{"report_id":"22e4c741-fa81-45d7-9243-5c53a60193e7","version":0,"status":"done","tags":[],"date":"2026-07-12T20:05:31Z","url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"title":"ScreenConnect Remote Support Software","dom":{"size":33653,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (792)","md5":"ed77c3acdb38d97521e85e70e1806a18","sha1":"f879eb2bbdd3837049230d97e5939e2891774f87","sha256":"bd077830fc83ea52ce5b2bd65b64445b263985b81844b965dec378e1f429a9d6","sha512":"b07f0177d40b9d154d4af5e755741d443dc775e241cff82b7ccbab809d3dcccfc39b6955654ed6d07515f1ece031759174635e58543990810e3225211bc13de3","ssdeep":"768:4ZFLqyNOI9uZdBobW/l/P3/bL/bE/yUJmonumcF/6qw7TAy0tIB9:4ZFLqyNOI9WdQipPvb7bkyXccoqVtIB9","tlshash":"d7e2c5d1f38e107341bea02eda6f10c96b7e40f4b021ac23fc799d846bd9a4e5751b99","dom_hash":"domhash0d98ce50f2b5c761057334caae5f6280","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:05:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"microsoftupdates.pro","ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T10:31:32.527866Z","last_seen":"2026-07-10T10:31:32.527866Z","alert_count":24,"request_count":12,"received_data":1181469,"sent_data":6782,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36cd56b9a84d48ab0446aae9fd5acea2","sha1":"2a4008a80bdfc6d014a1fd5fb47989e2f9608ab6","sha256":"e41c09d173ee35ca1a943261ae9c9186621171af6715d2b2c9da06aec66fabc7","sha512":"a960bed3981af965104b41a00414e642ffd915833138f1ffeceecaa88495e6e434811e4b16383e8c2445c942d1b361fab5c123351413b6a823b88f8dd9d2ee8c","ssdeep":"","tlshash":"8701b148634d107821ecf16c6e3b7049b73aeedc35f0f49119d38254766173f96c49a5","size":777,"data":"","first_seen":"2026-06-07T16:27:17.82614Z","last_seen":"2026-07-30T09:47:56.128513Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71deacdf31eaaa57e957b921dd27ab98","sha1":"2b3ef0225a476a03ed9adffcde3b1e2a756f8c3f","sha256":"81643a4fa4279895effa238a260b2fe454e1426048fa9c48ac977323fdea0a99","sha512":"9d7740e6d5674395f942c090029f3785480ae5dde78d11af46d717fcbbb232f600a8cb865531c6fb03afec8bb4fbe5ef18e1249a1748294705ba2bb75cb535c1","ssdeep":"","tlshash":"bbf0ddae9a4e8d6ff1d50583e2127a09039c7826b1c8ce28ca795f682dd71764a32242","size":630,"data":"","first_seen":"2026-07-12T20:05:34.501438Z","last_seen":"2026-07-12T20:05:34.501438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"61126dfecdaf40d876f20d40f0a589c7","sha1":"e97dad5729333488695c44c56c10ae19cb05193f","sha256":"08ed41607c222dabcb0126cc4a3130d3c5cf6fc2a6cbb4daeb769ff5da26b301","sha512":"42de9949915cd3dd1d95e49cb89861e41bee15eb41b6629ca467f8a61a1ed28520317d68294c386992f235fe93fd747503bb668d927ae21508fb552a557e0974","ssdeep":"","tlshash":"4a510fda8f8e205794ea2139de0f518c8e3d01b5d4007d72bc5cf284a5881ad13bae7a","size":2442,"data":"","first_seen":"2024-05-16T12:51:22Z","last_seen":"2026-07-31T16:38:06.565087Z","times_seen":521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"319ad3f3ed3ba87eafaa99219b90a24c","sha1":"704525478502c4801fccf69022a784eee79c5309","sha256":"c239a9b39b1ffe5648e89111ca3080631bc7c70e612c99eb65b4165c0244b485","sha512":"298fb6463b1e55097d1b630a817085c92fd4d5253c383f54f5e19aff21eee7d7a1e1d28b95268d225f855313abfa6efe6da0133ecd41bd1042e20e73846bf1fb","ssdeep":"","tlshash":"0890041004cd5134c43114dc345173d03d31f0453005f000c01f410050444114d0dcd4","size":39,"data":"","first_seen":"2026-06-07T16:27:17.828808Z","last_seen":"2026-07-31T16:38:06.56623Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a258ec03988562b2dabdcbdc1c7c717a","sha1":"be3697eec287699c5821583c5769aaa6595fb915","sha256":"f7bdd57e9bd4229f88fd05a87786b224a10b2f8246914ffd93574e5744c1b5f6","sha512":"b58fca66051594e07c3c3e9796182f8b1a2aab36cf6c8cbb3eb88d0ac1519b57e4fea0ca3f8f1d5dd85c8f8641b791eeabef46cccea981198bc94ef6cb5a2ce8","ssdeep":"","tlshash":"9ba002d03c1ecb6277e654856837a2fefbc28488509cf46b49a5058524c49ab5d82275","size":70,"data":"","first_seen":"2026-06-07T16:27:17.829619Z","last_seen":"2026-07-31T16:38:06.566777Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36cccaf5e6314c7ca19f7357cf7c60f4","sha1":"19dc0276d130b4f405dfc7be7eb66f679d7442b2","sha256":"0849bdfdd19651337a273c0aeb77f78b0f83ea9b73f13959d8091554bdfd12f5","sha512":"4e46961a5af7a7db6680f212bf0a2c40922f22422e38e174632da4d7c67d1b4caa7b3f245cc70d47002fbf77c1fef5b8eebca2b3cea6a48e116537b5793961fb","ssdeep":"192:pV28APIKKBovzRz6zL/ORM/PWQRr/bhbVFQdRgHWm/bg9sJGF/y2LJmhf:pV28ZKKBobW/ORM/PtRr/blVedRu/b51","tlshash":"a3223092f3cd1072a1bee04e99be10c66b3c91b0b471bc26fc64d9c46be961b1751b8c","size":9939,"data":"","first_seen":"2026-06-08T02:46:15.904217Z","last_seen":"2026-07-30T09:47:56.131495Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"78e84e91fdc59a801ed7d47534e06190","sha1":"675d81307a6253ebc1e13cb6aec09f0f25bcc6e9","sha256":"a279cb4fee2ef0847ff99746ef759ac3645e34d4b6e8f67fbf33d8fcfef27700","sha512":"00e443c72fe0db619f2e7f88cdd2ad0ab6fb17fa70fb9535560c73901bb1d98d2fbd9844d498d1b9db60fd258d40603910a5840f0473efb77d01423eec799e5e","ssdeep":"384:rDuxnumcxKiJ/6q15c8ASULFyY/D5uy0tIkZ71SCy:OnumcF/6qw7TAy0tIBD","tlshash":"6672b7e1f39f64b3457e903eda0e00c5ab7e40f1d0119c33fc3a9d8859e9a8d5296b99","size":16285,"data":"","first_seen":"2026-06-08T02:46:15.906422Z","last_seen":"2026-07-25T09:54:12.682737Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Script.ashx?__Cache=bf39d6b7-00a6-4a9e-93a2-56c7dd872029","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"929bbb21b1510fdc92ba8407e42c0bb1","sha1":"17e4061ed2dc57ed6232d66e6818a200a06a6e5a","sha256":"d40bc08b5bfc423b4a12e4fce56214a7e2d57e53c4dcc49d369640be46bb611e","sha512":"7c5c0b46d2074d31f051aae83230da43c333dd022124e2538c8e667ea393f2eb9f7f72964850ef15687d032b3eab93fa70a3b680dbf419d7253d3bf7dd29a887","ssdeep":"1536:tZ0Xf9owQioMVzJJXBt84h2/XXJZVPvEmD0tNTPShr9gEfOhv5FW5jNR4tA96O:APH9hgJZVPvEJtNTKhruhv5FW5EA96O","tlshash":"c05482056bfe34ba310341e2ec37d8af3aec6558671ec4a3bdbf9219d34955401e239a","size":300533,"data":"","first_seen":"2026-07-10T10:31:36.359999Z","last_seen":"2026-07-12T20:05:34.492031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=4a0c3b54-91f7-48ed-b942-3db259d49ae8","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91d9d6edcec4bd928299fb395ff2287f","sha1":"c31da954e8e52c0e4eeb9377fdd9d65b9cef4b39","sha256":"a190ed347236402ab0b9d31c2fd6b703361e3cce3d4fe86b48ac625d4f58fd7f","sha512":"4836608d86e658f406489cd95d78f4078f36c075c9989e30ac70dd9fc7d3c2fc688b380b103bbd55f2baf83dd81bd8ddaf0be50ddcd8e5789692250b617b1bdc","ssdeep":"6144:RITRvTL92lQ+p/L7i++jri4iXiSKaA9Rb+SdFMKSF:GgpNK8","tlshash":"5b44d58db5f722b282b7713d8b6f4009767542431408dc257c6c9a846fad92da1fafce","size":270794,"data":"","first_seen":"2024-12-20T23:35:34.27114Z","last_seen":"2026-07-25T09:54:12.629611Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"microsoftupdates.pro/Script.ashx?__Cache=bf39d6b7-00a6-4a9e-93a2-56c7dd872029","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:04.264Z","timestamp":1783886704264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Script.ashx?__Cache=bf39d6b7-00a6-4a9e-93a2-56c7dd872029 HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 45740\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 21:05:04 GMT\r\nvary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":300533,"size_decoded":46170,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (34908), with CRLF line terminators","md5":"929bbb21b1510fdc92ba8407e42c0bb1","sha1":"17e4061ed2dc57ed6232d66e6818a200a06a6e5a","sha256":"d40bc08b5bfc423b4a12e4fce56214a7e2d57e53c4dcc49d369640be46bb611e","sha512":"7c5c0b46d2074d31f051aae83230da43c333dd022124e2538c8e667ea393f2eb9f7f72964850ef15687d032b3eab93fa70a3b680dbf419d7253d3bf7dd29a887","ssdeep":"1536:tZ0Xf9owQioMVzJJXBt84h2/XXJZVPvEmD0tNTPShr9gEfOhv5FW5jNR4tA96O:APH9hgJZVPvEJtNTKhruhv5FW5EA96O","tlshash":"c05482056bfe34ba310341e2ec37d8af3aec6558671ec4a3bdbf9219d34955401e239a","first_seen":"2026-07-10T10:31:36.359999Z","last_seen":"2026-07-12T20:05:34.492031Z","times_seen":2,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=57459","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.037Z","timestamp":1783886705037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?r=Page.Background\u0026__Cache=57459 HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/App_Themes/DarkTeal/Default.css?__Cache=10337809-0675-45e8-89c9-3e81a2c4bdfa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 22450\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 21:05:05 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":57459,"size_decoded":22785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"885335c51fd35ee9c78b16622e581288","sha1":"d28eac61623ba48c62abc935404e967fd94906f9","sha256":"a3a395cccb926b4e9c17a9e7af46d89184f769e8d6d9daeb06c4186d340c9596","sha512":"21e93f4f44b4f249c5234c799e806ffa1c454c26db9d6bf59cfc98d1574032295e44ec06d573c31990cf7444f06b55fa77fdc20bf7cfbb4b6c20bd65c594b1d9","ssdeep":"768:MIttZ7h2FSwnlCnUnXsNm8/4mvmR+H8Pkc/Ulht/M1BT5q9wHEO:7t3/wl5ncNBbvR9c/UlhBgp5q9S","tlshash":"0e43ef7dc354d3b8eea78bbcdf2660b0e54e91ada0e1d314837cc4b076914d9e28e895","first_seen":"2024-05-16T12:51:22Z","last_seen":"2026-07-25T09:54:12.580032Z","times_seen":103,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=4a0c3b54-91f7-48ed-b942-3db259d49ae8","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:04.265Z","timestamp":1783886704265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Scripts/SC.main.ts?ScriptImportType=Classic\u0026__Cache=4a0c3b54-91f7-48ed-b942-3db259d49ae8 HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 53268\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 21:05:04 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":270794,"size_decoded":53605,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"91d9d6edcec4bd928299fb395ff2287f","sha1":"c31da954e8e52c0e4eeb9377fdd9d65b9cef4b39","sha256":"a190ed347236402ab0b9d31c2fd6b703361e3cce3d4fe86b48ac625d4f58fd7f","sha512":"4836608d86e658f406489cd95d78f4078f36c075c9989e30ac70dd9fc7d3c2fc688b380b103bbd55f2baf83dd81bd8ddaf0be50ddcd8e5789692250b617b1bdc","ssdeep":"6144:RITRvTL92lQ+p/L7i++jri4iXiSKaA9Rb+SdFMKSF:GgpNK8","tlshash":"5b44d58db5f722b282b7713d8b6f4009767542431408dc257c6c9a846fad92da1fafce","first_seen":"2024-12-20T23:35:34.27114Z","last_seen":"2026-07-25T09:54:12.629611Z","times_seen":95,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Images/ActivityIndicator.gif","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.040Z","timestamp":1783886705040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Images/ActivityIndicator.gif HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/App_Themes/DarkTeal/Default.css?__Cache=10337809-0675-45e8-89c9-3e81a2c4bdfa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 27503\r\ncontent-type: image/gif\r\nexpires: Mon, 13 Jul 2026 20:05:05 GMT\r\nlast-modified: Wed, 24 Jul 2024 02:11:42 GMT\r\naccept-ranges: bytes\r\netag: \"1DADD6ED32E0300\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":27503,"size_decoded":27866,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c63792b958d231654ab54542fea871db","sha1":"c21cfffa5cbd2a7c94076324fe28c4596df92e0c","sha256":"9d070c98f02f1d6287952256b47f7cd72eda89bda25ef99782325214a042f01a","sha512":"adf5f76d848c6ecc5c0fc00e51f6ad76d716a3daea6417b533a7a0d00004dd0bba2a7f9c2743fd4a5b83fc4c1ce4178dcc64808254ba110a1774fc0208d78760","ssdeep":"384:ZPEb1PVCcijMhRFO9eiHcptlHdEw6ZCI1wsas2B/uyPs83VRKwaT+zJuXd:ZPAfCLMhzCxKdw1mpJT3bL0auN","tlshash":"61c2f14e883d941e94f546207b212b8c65126eea68dc01fdca9bfa289cdf73cb119dd1","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-30T09:47:56.127487Z","times_seen":652,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Services/PageService.ashx/GetLiveData","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.023Z","timestamp":1783886705023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: 30FWfmRrP0/+si5xXJ92aEmhRIRqXGngn6P6kh6goqgBAABVDODUy8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 60\r\nOrigin: https://microsoftupdates.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":60,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},0]"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ncontent-length: 144\r\ncontent-type: application/json; charset=utf-8\r\nexpires: -1\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://microsoftupdates.pro\r\naccess-control-allow-credentials: true\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":144,"size_decoded":536,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a98ddad58616d476523c71a1bb2b0bf7","sha1":"b994dd19b46a00b03641ec36e356c3a0cd60de80","sha256":"3b521ab12cf9721be37b86fe733ca92fdd0998fe8ed82cbbdee209260dd3b824","sha512":"d2f6c16066805c30a35d310c20c4892f40582475c8a5fa717830677d212b768abc38359a413afbd56a21da19d8a2e19c2d8de5d1d91fe3642354910a846dec38","ssdeep":"","tlshash":"2ec02b4f8e3139f648ccc3388d371c50cbf2121030b4e0b606e100a843d237c0210579","first_seen":"2026-07-12T20:05:34.49529Z","last_seen":"2026-07-12T20:05:34.49529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Images/ActionCenter.svg","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.045Z","timestamp":1783886705045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Images/ActionCenter.svg HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 346\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 20:05:05 GMT\r\nlast-modified: Wed, 24 Jul 2024 02:11:42 GMT\r\naccept-ranges: bytes\r\netag: \"1DADD6ED32E0300\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":346,"size_decoded":711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fa773933e8313a93f5dee59e919d83","sha1":"db438d4795023149a335dfe1c7dcfa1c5f09fee6","sha256":"81fce97d96268840367d7f9119333c8bfccf3a633a68006a87240288a085b0b1","sha512":"797b037627c3f3ebedcb4629ff8019b68d525c707fe969c9b8a7e2d816816009dd8cc470ce6447031f1b8835b05ebc30116a4f41e9c20b34e026e920a89428d7","ssdeep":"","tlshash":"cbe02d11a2ac4d1c7f220310cf7cb2f1023232ae234d124ce85c323c840850eb837ee8","first_seen":"2024-04-30T03:57:53Z","last_seen":"2026-07-31T16:38:06.561285Z","times_seen":596,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:05:03.215Z","timestamp":1783886703215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\ncontent-length: 7539\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\np3p: CP=\"NON CUR OUR STP STA PRE\"\r\ndate: Sun, 12 Jul 2026 20:05:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":32435,"size_decoded":7843,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (647), with CRLF line terminators","md5":"07af33d452294cf2e769ca05ee547969","sha1":"243709bd2910fb0198b066908604e6e085f2471f","sha256":"3b6a64c2b58772af2df6257f99efc153218b0f28e2344abaed0376b13327237a","sha512":"febf21d5142d726014457229f58ea9329dcaa59890a09e211232e7c33ee40230b06afbd4909fece6796884cc15536de73c2e386f71abf74d53d45bb8a3f92176","ssdeep":"768:SbOvOwZW/e/1h/Q0/Qg/pkkk8LTqDY/MmAGgxVO/D:SbEOPK19Q0QIpyfcMNVO/D","tlshash":"70e2c7e5718f10b745fe922ad57b1084ef3dc0f0a021a432f86add886bd968e5751bcd","first_seen":"2026-07-12T20:05:34.496746Z","last_seen":"2026-07-12T20:05:34.496746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":268,"connect":23,"send":0,"wait":70,"receive":0,"ssl":495},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/App_Themes/DarkTeal/Default.css?__Cache=10337809-0675-45e8-89c9-3e81a2c4bdfa","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:04.267Z","timestamp":1783886704267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /App_Themes/DarkTeal/Default.css?__Cache=10337809-0675-45e8-89c9-3e81a2c4bdfa HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 126463\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Jul 2026 21:05:04 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:04 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":485651,"size_decoded":126809,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27376), with CRLF line terminators","md5":"3b69baf5ab7787c9e714d6ceeb82ee88","sha1":"9578e35de8739f3fb6eee4fabd6cc15a0e7ca484","sha256":"fd1ceaf6d4c963cb7fabd1fd2e62adf25a589a73030144609cb8c8d52d486625","sha512":"663bae742705b088887b01b9e9acf876251c8df6aeab627d1d385f3f6d15d68086fb7edc38cc9227ba655443fdba1ff7279283d77029f437e0e6b059bea9eb79","ssdeep":"3072:g8B+8+a+WGg59pfbE5RvFVwJ9eESfg9535UcEirshwjOBp3:BRUWGg+jvgZ5AwjEd","tlshash":"85a4e726fb8f52e8c7da452a57b19250de2dc0b1164707f1786a94088f8b3943fa73db","first_seen":"2026-07-10T10:31:36.361258Z","last_seen":"2026-07-12T20:05:34.497761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Images/Extras.svg","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.044Z","timestamp":1783886705044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Images/Extras.svg HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 322\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 20:05:05 GMT\r\nlast-modified: Wed, 24 Jul 2024 02:11:42 GMT\r\naccept-ranges: bytes\r\netag: \"1DADD6ED32E0300\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":322,"size_decoded":687,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"813c72f0a4741978669871e3800d5279","sha1":"ae5e036f992577f8afca3d99a352f44a217c2c2a","sha256":"8fce4aad3b04f9b76a08bad9b2459e355bbf16a470486d689fa801b9a30e3061","sha512":"bcb4de8eba321bfe1ec092e53c87275143508b2e3298a099ae0bc90449557ae741ad34b36795538c6a10493e9937c36fe2fb230513ff56fac05f2aae5ee8f796","ssdeep":"","tlshash":"3be08c40cf18378c7a5885942b2ce4990493e2abb0ce82d5a1cd1038f74476ae9f3292","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-31T16:38:06.558979Z","times_seen":640,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Images/Applications.svg","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.047Z","timestamp":1783886705047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /Images/Applications.svg HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public\r\ncontent-length: 821\r\ncontent-type: image/svg+xml\r\nexpires: Mon, 13 Jul 2026 20:05:05 GMT\r\nlast-modified: Wed, 24 Jul 2024 02:11:42 GMT\r\naccept-ranges: bytes\r\netag: \"1DADD6ED32E0300\"\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":821,"size_decoded":1186,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2599340bf60ee89b13e6b91beefe1199","sha1":"4e0babcd7fdcabc1759ed0f130e06972340c5127","sha256":"5bf4f707f250958980d313203989f1fca55b9446f34d667e7256f853d52e494d","sha512":"b22ab922530cbabc1c9a2800218f620060b1be8b69ef67d47a8aba5f3897b1e651d1cf8025e933cfa70cc26fa8e50f8ac0f4318e51d3f876f2cef3f6b278ad19","ssdeep":"","tlshash":"8f018c6882e92a3e61136678d39085c53493f0c2ebb40918e8e4311983b4c43ef6db6f","first_seen":"2023-05-09T20:48:12Z","last_seen":"2026-07-31T16:38:06.561847Z","times_seen":643,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/FavIcon.axd?__Cache=c520ee19-28b6-49b4-98a2-6d5617d3c1d2","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"93.152.221.222","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:05.214Z","timestamp":1783886705214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"microsoftupdates.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 05:23:06 GMT","end":"Sat, 03 Oct 2026 05:23:05 GMT"},"fingerprint":{"sha1":"8A:55:2E:06:7A:14:7F:7F:9A:54:4A:25:25:75:7E:AF:82:51:B5:BA","sha256":"3E:2B:0C:F9:37:CC:0E:04:12:EF:F7:9E:AD:B9:AB:75:9F:6C:B0:0D:77:79:62:58:6C:80:BB:6C:9A:CA:40:D2"}}},"request":{"raw":"GET /FavIcon.axd?__Cache=c520ee19-28b6-49b4-98a2-6d5617d3c1d2 HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=3600\r\ncontent-length: 1538\r\ncontent-type: image/vnd.microsoft.icon\r\nexpires: Sun, 12 Jul 2026 21:05:05 GMT\r\nvary: Accept-Encoding\r\nserver: Microsoft-HTTPAPI/2.0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\ndate: Sun, 12 Jul 2026 20:05:05 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft HTTPAPI:2.0","description":"Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security.","website":"https://learn.microsoft.com/en-us/windows/win32/http/http-api-start-page","common_platform_enumeration":"","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":1859,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel","md5":"d9c91e92af6776e767700c6f0c258ec0","sha1":"d083b5b8f069abd44ba4c30d806220375ce3e7ee","sha256":"0b95167676069a859a7535ce88e2b9f82520485d0102400d6d3e38a21f7c1f72","sha512":"06db40e54216ddc7f20de265a4c1b4d6cd054e64e305aa9d1300b9024662dd43a0796715bb95b88680cd6d4b94041159680e8888bb356a007177959bb1b591f0","ssdeep":"","tlshash":"5d3129c98342143cd04d53380c675212fec3914a4a83ba651f4f1a661533b169ff7ad0","first_seen":"2024-12-20T23:35:34.287272Z","last_seen":"2026-07-31T16:38:06.559573Z","times_seen":463,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"microsoftupdates.pro/Services/PageService.ashx/GetLiveData","fqdn":"microsoftupdates.pro","domain":"microsoftupdates.pro","tld":"pro"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://microsoftupdates.pro/","date":"2026-07-12T20:05:06.075Z","timestamp":1783886706075,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /Services/PageService.ashx/GetLiveData HTTP/1.1\r\nHost: microsoftupdates.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nX-Anti-Forgery-Token: 30FWfmRrP0/+si5xXJ92aEmhRIRqXGngn6P6kh6goqgBAABVDODUy8MtQg==\r\nX-Unauthorized-Status-Code: 403\r\nContent-Length: 68\r\nOrigin: https://microsoftupdates.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://microsoftupdates.pro/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"[{\"GuestSessionInfo\":{\"sessionCodes\":[],\"sessionIDs\":[]}},409546327]"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"microsoftupdates.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}