technology software

documentation technical

English

The domain 'www.circl.lu' uses the Luxembourgish country-code top-level domain (.lu) and includes subdomain 'www'. The second-level label 'circl' is 5 characters long holding one vowel versus 4 consonants. Splitting it apart reveals 3 words: c, irc, l. Expect one character per word on average. No strong language cues emerged from the frequency lists.

html/f8/57/f85788e2-6085-4151-84a0-5d3aee0b97be.html.gz

default-src 'self' 'unsafe-inline' 'unsafe-eval' circl.lu www.circl.lu www.gstatic.com pandora.circl.lu cra.circl.lu; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: circl.lu www.circl.lu www.gstatic.com pandora.circl.lu cra.circl.lu;

fcbbc5d653b789b4488c2e13aabddb233ecfd40aba4202fb22299882e58fb9c9

TR-96 - Multiple Vulnerabilities in F5 Devices and Products - Impact and Mitigation

TR-95 - Critical vulnerability - Deserialization of untrusted data in on-premises Microsoft SharePoi

Coordinated Vulnerability Disclosure (CVD) Policy

TR-93 - Financial transaction fraud after sytem compromise via Remote Management and Monitoring tool

TR-92 - Unused Domain Names and the Risks of Missing DNS SPF Records

TR-88 - Motivation, procedure and rational for leaked credential notifications

Learning from the Recent Windows/Falcon Sensor Outage - Causes and Potential Improvement Strategies 

TR-87 - CrowdStrike Agent causing BSOD loop on Windows - Faulty Update on Falcon Sensor

TR-86 - Check Point VPN Information Disclosure (CVE-2024-24919) - Actively Exploited

TR-85 - Three vulnerabilities in Cisco ASA software/applicance and FTD software being exploited

TR-84 - PAN-OS (Palo Alto Networks) OS Command Injection Vulnerability in GlobalProtect Gateway - CV

TR-82 - backdoor discovered in xz-utils - CVE-2024-3094

Cybersecurity Unites Across Borders - FETTA Project Launched to Strengthen EU Cyber Threat Intellige

TR-78 - CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Conne

TR-77 - Spear phishing and voice call scams targeting corporate executives and their accounting depa

TR-76 - Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

TR-75 - Unauthenticated remote code execution vulnerability in NetScaler ADC (formerly Citrix ADC) a

TR-74 - A heap-based buffer overflow vulnerability [CWE-122] in FortiOS - CVE-2023-27997

TR-72 - Vulnerable Microsoft Exchange server metrics leading to alarming situation

TR-70 - Vulnerabilities in Microsoft Exchange CVE-2022-41040 - CVE-2022-41082

New online service - Pandora Document and File Analysis

TR-68 - Best practices in times of tense geopolitical situations

TR-65 - Vulnerabilities and Exploitation of Log4j (Remote code injection in Log4j)

TR-64 - Exploited Exchange Servers - Mails with links to malware from known/valid senders - 10th Nov

CIRCL hash lookup is a public API to lookup hash values against known database of files.

TR-61 - Critical vulnerabilities in Microsoft Exchange

TR-58 - CVE-2020-0796 - Critical vulnerability in Microsoft SMBv3 - status and mitigation

TR-54 - Sextortion scam emails - I know your password

Meltdown and Spectre Bugs in modern computers leak passwords and sensitive data

TR-50 - WPA2 handshake traffic can be manipulated to induce nonce and session key reuse

TR-49 - CVE-2017-7494 - A critical vulnerability in Samba - remote code execution from a writable sh

MS17-010 is critical and patches MUST BE applied.

TR-46 - Information Leaks Affecting Luxembourg and Recommendations (regularly updated)

TR-42 - CVE-2015-7755 - CVE-2015-7756 - Critical vulnerabilities in Juniper ScreenOS

TR-41 (fr) - Crypto Ransomware - Défenses proactives et réponse sur incident

TR-41 - Crypto Ransomware - Proactive defenses and incident response

TR-38 (fr) - Attaques visant les solutions bancaires d'entreprise - Recommandations

TR-38 - Attacks targeting enterprise banking solutions - recommendations and remediations

TR-37 - VENOM / CVE-2015-3456 - Critical vulnerability in QEMU Floppy Disk Controller (FDC) emulatio

TR-36 Example setup of WordPress with static export

A new wave of crypto ransomware targeting Luxembourg

Une nouvelle vague de ransomware cible le Luxembourg

NTP (Network Time Protocol) daemon - ntpd - critical vulnerabilities

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, are vulnerable to critic

TR-27 - GNU Bash Critical Vulnerability - CVE-2014-6271 - CVE-2014-7169

CIRCL warns about spear phishing scams targeting corporate executives and their accounting departmen

https://twitter.com/i/web/status/1591074624250343424

https://twitter.com/i/web/status/1590326328553013248

Malware Information Sharing and Threat Sharing Platform

How to Verify Integrity of CIRCL Web Pages

viewport

The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven initiative designed to gather, review, report and respond to computer security threats and incidents. CIRCL is the CERT (Computer Emergency Response Team/Computer Security Incident Response Team) for the private sector, communes and non-governmental entities in Luxembourg.

description

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Requests	IP Address	Location	AS Autonomous System
12	185.194.93.14	Luxembourg	AS197869Luxembourg House of Cybersecurity
6	2a00:5980:93::14	Luxembourg	AS197869Luxembourg House of Cybersecurity
12	2	-	-

Security Scan Report: www.circl.lu

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History