It's interesting to see that a link to download a patch on Microsoft's site links to https://thesource.ofallevil.com/. Microsoft.com and thesource.ofallevil.com resolve to the same IP, and there's even a certificate.

thesource.ofallevil.com