There actually are updates to it as for the last three years Microsoft has continued to patch it under the commercial “Extended Security Update” program - that only ended in January 2023.
You just couldn’t get them as a home user without doing a lot of tweaking on your own.
Problem is it’s 3 years past EOL and hasn’t received any security updates in that time.
It’s functional, just not secure.
There actually are updates to it as for the last three years Microsoft has continued to patch it under the commercial “Extended Security Update” program - that only ended in January 2023.
You just couldn’t get them as a home user without doing a lot of tweaking on your own.
Wouldn’t be surprised if it’s some compromised machine that someone else is controlling for illegal activities.
Nothing is, just accept this and plan with it in mind.