update04.microsoft-essentials.com
Classification: Malicious
update04.microsoft-essentials.com is a malicious hostname. Linked to Cobalt Strike malware. Reported by 2 threat sources, last seen 2023-01-01.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 00:40:38.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Cobalt Strike | ThreatFox Abuse.ch | 2022-04-30 00:02:01 | 2023-01-01 19:18:18 | malicious-activity | S0154 Cobalt Strike |
| Malware | Hybrid-Analysis | 2021-11-18 06:45:06 | 2021-11-18 06:45:06 |
Tags
cobaltstrike threatview-io agentemis beacon cobeacon digitalocean-asnIP addresses resolved by this hostname
- 161.35.189.140 (2021-11-18 06:45:06)
- 160.16.200.77 (2026-10-18 00:40:38)
Whois information
- Domain
- microsoft-essentials.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS11.VALUE-DOMAIN.COM, NS12.VALUE-DOMAIN.COM, NS13.VALUE-DOMAIN.COM
- Registrant
- GMO Internet Group, Inc. d/b/a Onamae.com
- Contact email
- [email protected]
- Domain created
- 2026-08-22 05:21:07
- Domain expires
- 2027-08-22 05:21:07
- First indexed
- 2021-11-18 06:45:06
- Last updated
- 2026-10-18 00:40:38