Any Win10 SmartScreen/canonicalizer.ucsuri.tcs Link?

Hi all

I write from the Land Down Under, Queensland, Brisbane.

I'm currently enjoying a large number of internet outages. For fellow Aussies, I'm with Telstra. Technology = NBN-HFC. Arris CM8200 modem, Sagemcom F@st 5355 router.

Fellow Aussies would suggest the outages are caused by one or more of: NBN upgrades (possible - they've been flagged), Telstra (no further explanation needed), or F@st 5355 router (no further explanation needed).

In the router log, I and others have noted a frequently-appearing Error Message, viz: "DNS name resolution failure (canonicalizer.ucsuri.tcs)"

On a very few places online this connection is discussed, the connection between Windows 10 SmartScreen and canonicalizer.ucsuri.tcs is confirmed but no one is able to say more than that. canonicalizer.ucsuri.tcs is NOT a registered domain.

Any further info - guidance appreciated.

ausgumbie

Don't have any information regarding canonicalizer.ucsuri.tcs, but Malwarebytes seem to have updated MBAM to allow the connection ( One can only presume it must be related to Microsoft telemetry purposes somehow ).

Programs being flagged as Malvertising - Website Blocking - Malwarebytes Forums

edit:
Further see the link below for the Smartscreen telemetry:
(Use Google translate)
https://www.gameindustry.de/hints.php

Thanks das10

The relevant section of the German page (https://www.gameindustry.de/hints.php) seems to read (my translation - I have some German - based on Google Translate and Collins Online):

Microsoft SmartScreen:

Behind the introduction of SmartScreen as a protective function in Windows against "potential threats" hides a [stupid]* telemetry service. Microsoft SmartScreen turns itself on during each installation of a program and asks the user if he/she really wants to install a program. In the background three addresses activate themselves for this purpose.

1. checkappexec.Microsoft.com
2. t.checkappexec.Microsoft.com
3. canonicalizer.ucsuri.TCS

If something is installed from the Windows Store, the "licensing.mp.microsoft.com" activates itself in addition. While the "licensing" address does make sense in validating product keys, Smartscreen directly [passes on]* recorded data from the user's computer in relation to installation directories, installation time, language settings, what will be installed where, operating system / version, location, unique user ID, settings for created group policies and much more.

These three addresses from Microsoft SmartScreen (besides the mentioned licensing) are also entered in the hosts file and thus prevent unnecessary disclosure of things. A win-win situation for both sides, because in addition to [the host’s] own privacy and Microsoft's server will also be protected.

(Caption to pic)
Microsoft Smartscreen Telemetry

With SmartScreen, Microsoft not only gets a precise insight into folder structures, but can theoretically get an overview of any user interests. [It gets that gratis]* with each click on an exe file being installed.

An excerpt prepared here as a screenshot. Contents vary little for these three addresses listed.


*NOTES:

[stupid]. The paragraphs don't seem derisive of Win 10/SmartScreen. So, I'd understand "stupid" here as "simple, unsophisticated"; i.e., the telemetry service is something of a blunt instrument.

[passes on]. My interpretation of "SmartScreen gibt ... weiter".

[the host's] own (privacy). My interpretation of "eigener (Privatsphäre)".

[It gets that gratis]. My best understanding of "Das umsonst ..."


Anyhoo - a bit more info - a bit more grist for the mill.


Again, my thanks


ausgumbie

Thank you for your detailed interpretation.