Domain > secure.update.com-s02.net

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-01-18	116.203.10.53 (ClassC)
2026-02-22	3.169.173.111 (ClassC)

HTTP/1.1 301 Moved PermanentlyServer: CloudFrontDate: Sun, 22 Feb 2026 20:31:32 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://secure.update.com-s02.net/X-Cache: Redirect from cloudfrontVia: 1.1 7ad3d6571deff4c3c83d7e4476fcc6d0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: 88CuSSWPo7skGD8jtG4qmfWYj7Otqm8gLQsZUAtuj0VZSJSbLFqYbwX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffcontent-security-policy-report-only: child-src self blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src self blob: https://*.sosafe.de https://*.sosafe-test.com; script-src self report-sample https://*.sosafe.de https://*.sosafe-test.com; style-src self unsafe-inline report-sample https://*.sosafe.de https://*.sosafe-test.com; style-src-elem self report-sample https://*.sosafe.de https://*.sosafe-test.com; img-src self data: https://*.sosafe.de https://*.sosafe-test.com; connect-src self https://*.sosafe.de https://*.sosafe-test.com; default-src self; font-src self data: https://*.sosafe.de https://*.sosafe-test.com; frame-src self https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_keyf4fcbdbd596c4b2cb672b939a7ee93c6&sentry_environmentdevelopment; report-to https://sentry.sosafe.de/api/23/security/?sentry_keyf4fcbdbd596c4b2cb672b939a7ee93c6&sentry_environmentdevelopment;

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 2320Connection: keep-aliveLast-Modified: Mon, 19 Jan 2026 08:50:57 GMTx-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3Date: Sun, 22 Feb 2026 20:31:33 GMTCache-Control: public, max-age0, s-maxage300, stale-while-revalidate300ETag: 2b50a836faf9dc8f876e093ea2461217X-Cache: RefreshHit from cloudfrontVia: 1.1 41d11417b7470cfb79cc5b299692369a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: c59A0vFuRYgkU0eFB6qgHZsbcGLfmDbvS2Z8Cj58r9BwskfQCLDzkgX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preloadcontent-security-policy-report-only: child-src self blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src self blob: https://*.sosafe.de https://*.sosafe-test.com; script-src self report-sample https://*.sosafe.de https://*.sosafe-test.com; style-src self unsafe-inline report-sample https://*.sosafe.de https://*.sosafe-test.com; style-src-elem self report-sample https://*.sosafe.de https://*.sosafe-test.com; img-src self data: https://*.sosafe.de https://*.sosafe-test.com; connect-src self https://*.sosafe.de https://*.sosafe-test.com; default-src self; font-src self data: https://*.sosafe.de https://*.sosafe-test.com; frame-src self https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_keyf4fcbdbd596c4b2cb672b939a7ee93c6&sentry_environmentdevelopment; report-to https://sentry.sosafe.de/api/23/security/?sentry_keyf4fcbdbd596c4b2cb672b939a7ee93c6&sentry_environmentdevelopment;

!DOCTYPE html    PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml langde>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta http-equivX-UA-Compatible contentIE11>    title>Sicherheitsupdates/title>    link relstylesheet href../assets/css/styles.css?ver1768551990777>    link relshortcut icon href../assets/img/favicon.png />    link relstylesheet href../assets/fonts/fontawesome-all.min.css?ver1768551990777>    meta nameviewport        contentwidthdevice-width, heightdevice-height, initial-scale1.0, maximum-scale1, user-scalableyes />/head>body>    section>        picture>            img idlogo classlogo src altUpdate Logo>        /picture>        div classprogress-text>            p idimportantUpdates>                !--Es stehen wichtige Sicherheitsupdates aus.-->            /p>            p classcolor-transparent reveal iddownloadInitiation>                !--Wir bereiten deinen Download vor...-->            /p>            p classcolor-transparent reveal iddownloading>                !--Lade herunter...-->            /p>        /div>        div classprogress-container>            div classprogress hidden reveal>                div classprogress-bar roleprogressbar stylewidth: 0% aria-valuenow0 aria-valuemin0                    aria-valuemax100>/div>            /div>        /div>        form action idinstall-form>div classbutton waiting hidden reveal clickable disabled idpleaseWait>                !--Bitte warten...-->/div>/form>    /section>    footer>        p classcopyright idcopyright>            !--© Securityupdates GmbH-->        /p>        p classimprint>            a href# idimprint>                !--Impressum-->/a>            span>- /span>            a href# idprivacy>                !--Datenschutzerklärung-->/a>        /p>    /footer>    script src../assets/js/jquery.min.js>/script>    script src../assets/js/bundle.min.js?ver1768551990777>/script>/body>/html>

Subdomains

Date	Domain	IP
pop3.com-s02.net	2026-02-22	18.161.6.40
hz-inova.com-s02.net	2026-02-22	18.161.6.23
old.com-s02.net	2025-11-15	18.161.6.40
microsafe.old.com-s02.net	2025-11-14	18.161.6.59
officeonline.old.com-s02.net	2025-11-15	18.161.6.59
microsafeonline.old.com-s02.net	2026-02-09	18.238.217.77
mail.old.com-s02.net	2025-11-15	18.161.6.40
instagram.old.com-s02.net	2026-02-12	18.161.6.40
plan.old.com-s02.net	2025-11-14	18.161.6.96
login.old.com-s02.net	2026-02-09	18.161.6.40
sso.old.com-s02.net	2025-11-14	18.161.6.23
event.old.com-s02.net	2026-01-21	18.161.6.96
support.old.com-s02.net	2025-11-13	18.161.6.96
synthetics-meinhard.com-s02.net	2025-11-17	18.161.6.59
youtube.com-s02.net	2025-03-24	18.238.217.77
mail10.dhl-service.com-s02.net	2026-02-22	18.161.6.59
microsafe.com-s02.net	2024-09-24	18.197.187.225
exchange.com-s02.net	2026-02-22	18.161.6.96
home.com-s02.net	2026-02-22	18.161.6.59
payme.com-s02.net	2025-05-01	18.173.249.40
word-online.com-s02.net	2025-02-16	99.84.66.24
office-online.com-s02.net	2025-05-01	3.163.165.115
excel-online.com-s02.net	2024-11-04	3.66.12.243
powerpoint-online.com-s02.net	2024-09-17	52.29.17.79
officeonline.com-s02.net	2024-09-22	54.93.175.42
microsafeonline.com-s02.net	2024-09-17	35.156.149.18
login.microsafeonline.com-s02.net	2026-02-22	3.169.173.64
update.com-s02.net	2024-09-05	54.93.191.237
secure.update.com-s02.net	2026-02-22	3.169.173.111
onedrive-live.com-s02.net	2026-02-22	18.161.6.59
login-live.com-s02.net	2024-09-21	35.156.149.18
peterhall-consulting.com-s02.net	2025-11-16	18.161.6.59
valtech.com-s02.net	2024-09-08	52.58.223.220
facebook.com-s02.net	2026-01-20	18.161.6.96
portal.com-s02.net	2024-08-10	3.78.194.155
secure.portal.com-s02.net	2025-04-30	99.84.66.97
mail.com-s02.net	2023-09-24	3.126.98.149
instagram.com-s02.net	2024-09-30	18.159.140.54
virusscan.com-s02.net	2024-10-01	18.159.140.54
plan.com-s02.net	2024-10-22	54.93.213.97
login.com-s02.net	2024-10-18	54.93.213.97
sso.com-s02.net	2023-09-24	3.126.98.149
intranet.sso.com-s02.net	2025-08-10	204.246.191.41
dalli-group.com-s02.net	2026-02-22	18.161.6.23
vaillant-group.com-s02.net	2024-09-11	35.156.17.176
merckgroup.com-s02.net	2024-09-03	52.58.223.220
transfer.com-s02.net	2025-02-12	3.163.24.63
pidas.com-s02.net	2025-11-10	18.161.6.59
igus.com-s02.net	2025-08-11	18.161.6.23
box.microsoft.com-s02.net	2026-02-22	18.161.6.59
document.com-s02.net	2025-02-20	99.84.66.79
ms-consent.com-s02.net	2025-03-16	3.163.24.77
cloudfront-ms-consent.com-s02.net	2026-01-29	18.161.6.23
event.com-s02.net	2024-07-20	18.197.168.4
sharepoint.com-s02.net	2025-04-22	3.175.34.110
support.com-s02.net	2024-07-20	3.121.172.63
eyeosupport.com-s02.net	2025-02-07	3.163.24.108
jbnmailhost.com-s02.net	2025-11-16	3.175.34.14
smtps.jbsmailhost.com-s02.net	2026-02-02	18.161.6.23
www.com-s02.net	2024-07-20	3.123.60.73
dropbox.com-s02.net	2025-08-09	18.161.6.96

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > secure.update.com-s02.net

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains