| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomBlade |  204.138.94.134 | 200 OK | 7.1 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomBlade IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (7127), with CRLF, LF line terminators Hash9f9d46f83cc79595d4a9e58520e125ea 0bdd441c05b0d34fb7ea926b569ead797a26d140 c0bbb17742bcdc7d4895b8f1af3a8f7a0947c37f686a44627bc8d6f5cd5397d7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomBlade HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 7133
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-1bdd"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomSearch | 204.138.94.134 | 200 OK | 10 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomSearch IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (10298), with CRLF, LF line terminators Hash88c3d0a48ce920549637d6374fc11e1b e26cc6f2cb51c9c71f9dd5c1203a92310f6beac2 1468d3c18702b0f5d211f893db861501761c8cec337d18c7391e43fef8964083
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomSearch HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 10304
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-2840"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomNav | 204.138.94.134 | 200 OK | 8.1 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomNav IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (8050), with CRLF, LF line terminators Hash3090dd8813e3553ff7d47bac28c22801 8857532e7d2f790e5548c2e2fcbd6d03a338d013 8d8be4118f76111743a4076482bb2118532a76d2e782ca46e7a5c884c5b3f54d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomNav HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 8056
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-1f78"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/css/hpPage | 204.138.94.134 | 404 Not Found | 153 B |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/css/hpPage IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5f565b1581747f59247343b2f70bd95e dbfe66ea7345c99b0fae01742de93424af8479d8 4c76f59d3213b903b71a5e7a3d5646cd5bfcdcd473ba58022cbe56c56af2d829
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/css/hpPage HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/html
content-length: 153
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/en-us/download/renderingassets/details-social.css | 204.138.94.134 | 200 OK | 572 B |
URL GET HTTP/2microsecurityupdate.com/global/en-us/download/renderingassets/details-social.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with CRLF line terminators Hash169eb957eadf1da49dbf87acf4b7cc11 10235454c797445799a3049e4c84a2eea6752707 f3816fb77c6e84c943c9b4b809911029834be52865fc1befff06bced9895c072
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/en-us/download/renderingassets/details-social.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
content-length: 572
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-23c"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomSocial | 204.138.94.134 | 200 OK | 3.9 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomSocial IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (3903), with CRLF, LF line terminators Hash4979c1388d445c2a6ccd420d2ac5fe2c eea5bc9ee8c2e4db348deaca96b38585525de707 edd3a7c4239180dd42d875bec537f110df3ad1dd69e233c7783adf18e4d9f06c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomSocial HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 3909
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-f45"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/css/xhtmlcontent | 204.138.94.134 | 200 OK | 18 B |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/css/xhtmlcontent IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeUnicode text, UTF-8 (with BOM) text, with no line terminators Hash3f28280d3a659c9c69d74f891cfbbe77 2271c6dd94fd443c4e39cf99ebd4ded652195291 9cd1a0194b2bf200a8b30ded6d55b38effc3f995ff6b78a0df395acac600b1a0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/css/xhtmlcontent HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 18
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-12"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomFooter | 204.138.94.134 | 200 OK | 13 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomFooter IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (12860), with CRLF, LF line terminators Hashaa99e2b70ebb0df37f7810d254bd2534 02f3f1ac32ceaf1f44bc5ce7cbbc14cd18f15612 84d062f85d479003c65aa494291775575aedfd8850cfbe5f45701a9287e6cfec
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomFooter HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 12885
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-3255"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/scripts/jquery.js | 204.138.94.134 | 200 OK | 85 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/scripts/jquery.js IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65168) Hashb04a3bccd23ddeb7982143707a63ccf9 4a5dc1389aad050a44ee5e81408238a317ab3413 764b9e9f3ad386aaa5cdeae9368353994de61c0bede087c8f7e3579cb443de3b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/scripts/jquery.js HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/javascript
content-length: 85260
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-14d0c"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/mscomViews/script1.js | 204.138.94.134 | 200 OK | 5.4 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/mscomViews/script1.js IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (5417), with CRLF line terminators Hashf05fae4330bcbb7e2acae5ddf084fbd4 21c172150cc93f0a7a6ebd6e696e0db0d98c60da 89e4fb118529ecb2f39606e6fafd426565a47455b3513b5c1ea427f97bc1d27f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/mscomViews/script1.js HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/javascript
content-length: 5422
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-152e"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomJsCssLoader/oneMscomJsCssLoader.js | 204.138.94.134 | 200 OK | 1.1 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomJsCssLoader/oneMscomJsCssLoader.js IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (1102), with no line terminators Hash174e0469b24164293081458b8c0cc7a6 e286d9f2fe5df544b75bb4a0b1dcbaf86742507a 030237a8c82e3dbbce860ede3af30bf8659051f18ec5218502e2e57c03d3297c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomJsCssLoader/oneMscomJsCssLoader.js HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/javascript
content-length: 1102
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-44e"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/headerimages/downarrow.png | 204.138.94.134 | 200 OK | 2.9 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/headerimages/downarrow.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 7 x 5, 8-bit/color RGBA, non-interlaced Hashcd27eb662ca1e4777d5f559913b9ee7d 3dc1aafa00be71c2d177ee93e5044f4569c0e9e3 ea1ac6f2a31ca96b05477905d057c41c61444cebc87c59e2fdccd466583f7788
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/headerimages/downarrow.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 2853
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-b25"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/download_small.png | 204.138.94.134 | 200 OK | 1.2 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/download_small.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 56 x 45, 8-bit/color RGBA, non-interlaced Hash06d92042bd5b7441016d844e403687e7 2b2e1ada3c90d26d0d6f6ce7f86b7ef3e1efc41a 6cf1bb005f1605ba1fd69b94d8f9e10823b938f8610c69e958c38abf0befb5f8
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/download_small.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 1205
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-4b5"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/rss.png | 204.138.94.134 | 200 OK | 1.1 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/rss.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 20 x 20, 4-bit colormap, non-interlaced Hash64bf2b3a311020692cde022231106b31 c9f4b1767b8a78ce7c5aa22be13e6413e83e22de 3d94913ac2104c098ec4ff8c356172754448400e42e880397e517da4fcfcd419
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/socialimages/rss.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 1054
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-41e"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/share.png | 204.138.94.134 | 200 OK | 1.0 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/share.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 20 x 20, 8-bit grayscale, non-interlaced Hash5b148ee1c7623587dbb690776e20c5f9 81d300457bbe56270243ea93fdf7443c0d46a308 76b643fe247df46e5a43faba5785e397be98dc5e0cf8cdddcd459d5b635de116
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/socialimages/share.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 1000
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-3e8"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/commonimages/flyoutclosebutton.png | 204.138.94.134 | 200 OK | 958 B |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/commonimages/flyoutclosebutton.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 7 x 7, 1-bit colormap, non-interlaced Hashf656666988b49a554c5607020aaa4aaf 8e59c2417a9581f49b2e1c26aedc41e3030d6f68 98b2a5487bb0d08967eae10badf7c8386879a607ba2dea263437dbbd87625f7c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/commonimages/flyoutclosebutton.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 958
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-3be"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/spr-icons.png | 204.138.94.134 | 200 OK | 19 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/socialimages/spr-icons.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 16 x 752, 8-bit/color RGBA, non-interlaced Hashedf6962efab0dbe8911b08b5f9f7f385 722760b7694d76f4126ef61ba1e5133201d734fc 12be1dfeeef8f8cf39a4791f998b0eca79816f7f81481091f24569cbe6837b8b
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/socialimages/spr-icons.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 19277
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-4b4d"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/update_small.png | 204.138.94.134 | 200 OK | 1.1 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/update_small.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 60 x 75, 8-bit/color RGBA, non-interlaced Hash2e68abdbb59968ea35e45a01fbb271b8 00e7377806b7d213f6c58417e0a21d345bce42d2 82f5d474b59980fac80a0ee8fdb1a44f33b60e109a7ce90e9eaac48a43268ba3
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/update_small.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 1094
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-446"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/arrow_anchorlink_up.png | 204.138.94.134 | 200 OK | 245 B |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/arrow_anchorlink_up.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 7 x 9, 8-bit/color RGBA, non-interlaced Hash4ec3b6bde059a067ff461a02883857db 0a6880bc1dd177c1de7f2917e6534752c4f57916 6992594272d33a07517afca1027ccbaa6d59f33a8749d2a513123b45ec1a871d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/arrow_anchorlink_up.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: image/png
content-length: 245
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-f5"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomBlade | 204.138.94.134 | 200 OK | 7.1 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/js/oneMscomBlade IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (7127), with CRLF, LF line terminators Hash9f9d46f83cc79595d4a9e58520e125ea 0bdd441c05b0d34fb7ea926b569ead797a26d140 c0bbb17742bcdc7d4895b8f1af3a8f7a0947c37f686a44627bc8d6f5cd5397d7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/js/oneMscomBlade HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 7133
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-1bdd"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/css/hpPage | 204.138.94.134 | 404 Not Found | 153 B |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/css/hpPage IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5f565b1581747f59247343b2f70bd95e dbfe66ea7345c99b0fae01742de93424af8479d8 4c76f59d3213b903b71a5e7a3d5646cd5bfcdcd473ba58022cbe56c56af2d829
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/css/hpPage HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/html
content-length: 153
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/core/2/css/xhtmlcontent | 204.138.94.134 | 200 OK | 18 B |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/core/2/css/xhtmlcontent IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeUnicode text, UTF-8 (with BOM) text, with no line terminators Hash3f28280d3a659c9c69d74f891cfbbe77 2271c6dd94fd443c4e39cf99ebd4ded652195291 9cd1a0194b2bf200a8b30ded6d55b38effc3f995ff6b78a0df395acac600b1a0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/core/2/css/xhtmlcontent HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: application/octet-stream
content-length: 18
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-12"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/onemscomsettings/publishingimages/searchimages/searchv3.ltr.png | 204.138.94.134 | 200 OK | 3.4 kB |
URL GET HTTP/2microsecurityupdate.com/global/onemscomsettings/publishingimages/searchimages/searchv3.ltr.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePNG image data, 52 x 40, 8-bit/color RGBA, non-interlaced Hash3be47340a78d617a7f6a18df51ed07b1 f8fb6f1438af10300975e7b8b519931791c7bde3 1dabc0c07f1f4e162e25cfb32c5916b76e1bab5eaa2d82638138e47d6d43f09a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/onemscomsettings/publishingimages/searchimages/searchv3.ltr.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:12 GMT
content-type: image/png
content-length: 3432
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-d68"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/en-us/download/renderingassets/en-us/download/shared/templates/components/omniDetails/images/Arrow_AnchorLink_Down.png | 204.138.94.134 | 404 Not Found | 153 B |
URL GET HTTP/2microsecurityupdate.com/global/en-us/download/renderingassets/en-us/download/shared/templates/components/omniDetails/images/Arrow_AnchorLink_Down.png IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash5f565b1581747f59247343b2f70bd95e dbfe66ea7345c99b0fae01742de93424af8479d8 4c76f59d3213b903b71a5e7a3d5646cd5bfcdcd473ba58022cbe56c56af2d829
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/en-us/download/renderingassets/en-us/download/shared/templates/components/omniDetails/images/Arrow_AnchorLink_Down.png HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/global/en-us/download/renderingassets/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:12 GMT
content-type: text/html
content-length: 153
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/favicon.ico | 204.138.94.134 | 200 OK | 91 kB |
URL GET HTTP/2microsecurityupdate.com/favicon.ico IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeMS Windows icon resource - 5 icons, -128x-128, 32 bits/pixel, 64x64, 32 bits/pixel Hasha406da54cf17f5fdfd03fa5595a89d5a b283cd9451b460b144c46576b558b8be45732a20 4d0a99a42bc08dc60253b4eb0f38ab1d159ad2bad136a015925c1aafbe959345
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:12 GMT
content-type: image/x-icon
content-length: 91286
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
etag: "62f51b13-16496"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/KB824105-x86-ENU.exe | 204.138.94.134 | 200 OK | 220 kB |
URL User Request GET HTTP/2microsecurityupdate.com/KB824105-x86-ENU.exe IP204.138.94.134:443
CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections Size220 kB (219648 bytes) Hash70bd663276c9498dca435d8e8daa8729 9350c1c65d8584ad39b04f6f50154dd8c476c5b4 909984d4f2202d99d247b645c2089b014a835d5fe138ccd868a7fc87000d5ba1
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed | | VirusTotal | malicious | |
GET /KB824105-x86-ENU.exe HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:12 GMT
content-type: application/octet-stream
content-length: 219648
last-modified: Wed, 14 Dec 2022 18:40:32 GMT
etag: "639a18a0-35a00"
cache-control: no-store
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomGenericControl/oneMscomListLayout.css | 204.138.94.134 | 200 OK | 7.4 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomGenericControl/oneMscomListLayout.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typegzip compressed data, from Unix Hash3d7bf4b816f370a1d1913daa0f9a2c5b 93b4e3b84a28cce7f5f9fe494c0069c4c013ac33 877f56bd9cc69379753d7b33c5937aacc2a20f07b797c8e5db778a2eaec841fc
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomGenericControl/oneMscomListLayout.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-1551"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 204.138.94.134 | 200 OK | 98 kB |
URL User Request GET HTTP/2IP204.138.94.134:443
CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:10 GMT
content-type: text/html
last-modified: Wed, 14 Dec 2022 18:50:51 GMT
vary: Accept-Encoding
etag: W/"639a1b0b-1802c"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/onemscomsearch/onemscomsearch.css | 204.138.94.134 | 200 OK | 4.0 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/onemscomsearch/onemscomsearch.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (3986), with no line terminators Hash82db02f7d25a2cb8ccbc6bfe93ff17cb 38107d8ab33ade99811d2485c2d388e97dcca9a5 5f157e9bc343b0dc8af8fd102a3a28a00540021f1d1258e0ed3164b40cab77af
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/onemscomsearch/onemscomsearch.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-f92"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomNav/oneMscomNav.css | 204.138.94.134 | 200 OK | 9.0 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomNav/oneMscomNav.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (8998), with no line terminators Hashe344ecc7004a45e0cc972bf9613b92f5 4d5599b619c2ccc88914da8c5ef296c526ad2386 655ad10eae5ff284cea1c2e17c7593e32bbf3afe3084dc6211c2e684d860a9ec
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomNav/oneMscomNav.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-2326"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomFooter/onemscomfooter.css | 204.138.94.134 | 200 OK | 7.0 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomFooter/onemscomfooter.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (7002), with no line terminators Hashb1425d28d8e1716019478c661a561fae 68f860c7f69f4a3c1e332394d18920b6f0058242 48508a08183caf4126f35644d61d50743adc04fc9410a0375e2bbb08d6c00c6d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomFooter/onemscomfooter.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-1b58"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomSocial/oneMscomSocial.css | 204.138.94.134 | 200 OK | 4.8 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomSocial/oneMscomSocial.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (4835), with no line terminators Hash06b0c67580e162bc799ee8c24a2ed6ed 800d639731f0d2cd6d643e90c1f6f99dfba9ce3e cec2b6db90b42cdbd112a455e82950de798b71cdf32384e1a3a467c1a539d7ad
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomSocial/oneMscomSocial.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-12e3"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/mscomViews/styles.css | 204.138.94.134 | 200 OK | 65 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/mscomViews/styles.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (65115), with CRLF line terminators Hash9f286b0e8bb68f6fa2b8be3605e7db1d 6b6a56f1d73259875e481db79b4d145b84884879 b57ac863d201b8d6780d64499a7ec02cab012c6c1d030da050194a695cd0e50a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/mscomViews/styles.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-fe5d"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/en-us/download/renderingassets/main.css | 204.138.94.134 | 200 OK | 8.7 kB |
URL GET HTTP/2microsecurityupdate.com/global/en-us/download/renderingassets/main.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (8653), with no line terminators Hash0dfcc8765ca6d54b4a846df0c88e7144 67d52e1f4fef504a43daad809c4b0daa3ef921cd f1bde40c78d7b33601d66afc88567c24a60740cd9d90402dcb9c36918a043bbd
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/en-us/download/renderingassets/main.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-21ca"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomBlade/oneMscomBlade.css | 204.138.94.134 | 200 OK | 11 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/components/oneMscomBlade/oneMscomBlade.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (11053), with no line terminators Hash167866838cdf3b358eb1bc049c74e20b bd3a8f5ce5fc345c069d6380b64cb83e337f7d11 4da797382c3d69f8d4dd942710b5a93cdfe0a83a642a27627697ece9a9f1a96f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/components/oneMscomBlade/oneMscomBlade.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-2b2d"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/global/en-us/download/renderingassets/omnibase.css | 204.138.94.134 | 200 OK | 2.6 kB |
URL GET HTTP/2microsecurityupdate.com/global/en-us/download/renderingassets/omnibase.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (2835), with no line terminators Hash27030f4521d971727cf0b17cb7bf41a4 e39c11f8cd2321411663255523840d14dcc67165 8d14fd2e72ff9f3dcf9bab93b18c39fcf6a3ee88e2bfb12bc5d61f57f767ac5e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /global/en-us/download/renderingassets/omnibase.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-9f7"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| microsecurityupdate.com/en-us/download/shared/templates/Master/oneMscomMaster/oneMscomComponents.css | 204.138.94.134 | 200 OK | 1.0 kB |
URL GET HTTP/2microsecurityupdate.com/en-us/download/shared/templates/Master/oneMscomMaster/oneMscomComponents.css IP204.138.94.134:443
Requested byhttps://microsecurityupdate.com/ CertificateIssuerLet's Encrypt Subjectmicrosecurityupdate.com FingerprintE6:4F:E4:CC:E5:62:22:2C:AC:75:0D:35:9D:D7:B5:2B:85:BB:62:4D ValiditySat, 23 Mar 2024 15:14:19 GMT - Fri, 21 Jun 2024 15:14:18 GMT
File typeASCII text, with very long lines (1008), with no line terminators Hash236f3d2bc23b33656de138662ceb1969 942eb18e72b5d24b7249507199706bb1a5b0d455 efc01b17970ac321faea1736148452b59fa6853e3c3a6670624c62e4b2983303
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en-us/download/shared/templates/Master/oneMscomMaster/oneMscomComponents.css HTTP/1.1
Host: microsecurityupdate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://microsecurityupdate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.25.1
date: Fri, 26 Apr 2024 15:32:11 GMT
content-type: text/css
last-modified: Thu, 11 Aug 2022 15:06:59 GMT
vary: Accept-Encoding
etag: W/"62f51b13-3f0"
cache-control: no-store
content-encoding: gzip
X-Firefox-Spdy: h2
|
|