microupdate.xyz
Classification: Malicious
microupdate.xyz is a malicious hostname. Linked to Menupass, Cinnamon Tempest activity. Reported by 2 threat sources, last seen 2023-08-19.
Current activity
- Offline — no longer resolving. Last online 2024-09-30 16:57:13.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045) CINNAMON TEMPEST (G1021)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Stone Panda | Maltiverse | 2023-08-18 04:16:02 | 2023-08-19 20:22:04 | malicious-activity | G0045 menuPass |
| Bronze Starlight | Maltiverse | 2023-08-18 04:16:03 | 2023-08-19 20:22:01 | malicious-activity | G1021 Cinnamon Tempest |
| Ta410 | Maltiverse | 2023-08-18 04:16:03 | 2023-08-19 20:21:59 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-08-18 05:45:06 | 2023-08-18 05:45:06 |
Tags
aptIP addresses resolved by this hostname
- 72.52.178.23 (2024-09-30 16:57:13)
- 54.65.172.3 (2024-09-01 08:52:54)
- 52.25.92.0 (2024-09-18 04:47:25)
- 58.158.177.102 (2024-08-18 00:57:54)
Whois information
- AS name
- AS17506 UCOM Corp.
- Domain
- microupdate.xyz
- TLD
- xyz
- DNSSEC
- ['unsigned']
- Nameservers
- NS11.VALUE-DOMAIN.COM, NS12.VALUE-DOMAIN.COM, NS13.VALUE-DOMAIN.COM, ns11.value-domain.com, ns12.value-domain.com, ns13.value-domain.com
- Registrant
- GMO Internet, Inc.
- Address
- 3-1 Ofuka-cho, Grand Front Osaka Tower B 23F
- City
- Kita-ku Osaka-shi
- State
- Osaka
- Country
- JP — Japan 🇯🇵
- Contact email
- [email protected], [email protected]
- Domain created
- 2026-01-30 09:06:12
- Domain expires
- 2027-01-30 23:59:59
- First indexed
- 2023-08-18 05:45:06
- Last updated
- 2026-07-28 15:59:47