Domain > giift.app.instasafe.io

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-04-15	15.207.0.228 (ClassC)
2025-10-23	15.207.2.32 (ClassC)

HTTP/1.1 200 OKdate: Thu, 23 Oct 2025 17:31:28 GMTcontent-type: text/htmlcontent-length: 2501last-modified: Mon, 15 Sep 2025 06:39:53 GMTetag: 68c7b4b9-9c5accept-ranges: bytesserver: Instasafestrict-transport-security: max-age31536000; includeSubDomains; preloadx-frame-options: SAMEORIGINcache-control: no-cachex-content-type-options: nosniffx-xss-protection: 1; modeblockreferrer-policy: strict-origin-when-cross-originpermissions-policy: camera(self), geolocation(self), payment(), publickey-credentials-get(self), screen-wake-lock(), sync-xhr(), usb(self), web-share(), xr-spatial-tracking(), clipboard-read(self), clipboard-write(self), encrypted-media()content-security-policy: default-src self; script-src self unsafe-inline unsafe-eval https://challenges.cloudflare.com; style-src self https://fonts.googleapis.com unsafe-inline; font-src self https://fonts.gstatic.com; frame-src self https://challenges.cloudflare.com; img-src self data: blob: *.instasafe.io:* s3.amazonaws.com *.s3.amazonaws.com *.amazonaws.com storage.googleapis.com *.storage.googleapis.com; connect-src self http://127.0.0.1:7979 http://127.0.0.1:6769 *.instasafe.io:* https://checkip.safehats.com https://us-central1-instasafe-nextgen-sdp.cloudfunctions.net/getclientip https://api.ipify.org; object-src none; base-uri self; upgrade-insecure-requests;

!doctype html>html langen>	head>		meta charsetutf-8 />		title>InstaSafe ZTAA | Login/title>		link relicon href/favicon.png />		meta nameviewport contentwidthdevice-width, initial-scale1 />				!-- Android Chrome: Set the status bar color -->		meta nametheme-color content#ffffff media(prefers-color-scheme: light)>		meta nametheme-color content#111827 media(prefers-color-scheme: dark)>		!-- iOS Safari: Customize the status bar appearance -->		meta nameapple-mobile-web-app-status-bar-style contentdefault media(prefers-color-scheme: light)>		meta nameapple-mobile-web-app-status-bar-style contentblack-translucent media(prefers-color-scheme: dark)>				link relmodulepreload href/_app/immutable/entry/start.D6vGmtpJ.js>		link relmodulepreload href/_app/immutable/chunks/entry.DRsbdBB2.js>		link relmodulepreload href/_app/immutable/chunks/scheduler.CTNmHWZs.js>		link relmodulepreload href/_app/immutable/chunks/index.C0tqOu4x.js>		link relmodulepreload href/_app/immutable/entry/app.CHH0PmYU.js>		link relmodulepreload href/_app/immutable/chunks/preload-helper.ktfdejDp.js>		link relmodulepreload href/_app/immutable/chunks/index.DR1KNgQw.js>		script>			const storedTheme  localStorage.getItem(selectedTheme);			if (storedTheme  darkTheme || (!storedTheme && window.matchMedia((prefers-color-scheme: dark)).matches)) {				document.documentElement.classList.add(dark);				document.querySelector(metanametheme-color).setAttribute(content, #111827);				document.querySelector(metanameapple-mobile-web-app-status-bar-style).setAttribute(content, black-translucent);			} else {				document.documentElement.classList.remove(dark);				document.querySelector(metanametheme-color).setAttribute(content, #ffffff);				document.querySelector(metanameapple-mobile-web-app-status-bar-style).setAttribute(content, default);			}		/script>	/head>	body data-sveltekit-preload-datahover>		div styledisplay: contents>			script>				{					__sveltekit_fell0f  {						base: 					};					const element  document.currentScript.parentElement;					Promise.all(						import(/_app/immutable/entry/start.D6vGmtpJ.js),						import(/_app/immutable/entry/app.CHH0PmYU.js)					).then((kit, app) > {						kit.start(app, element);					});				}			/script>		/div>	/body>/html>

Subdomains

Date	Domain	IP
alphatech.app.instasafe.io	2025-10-23	15.207.0.228
giift.app.instasafe.io	2025-10-23	15.207.2.32
609a2f89a7bbe70001464ffe.wns-52.gw.app.instasafe.io	2025-10-23	3.7.192.120
63d21a7e13b07f767d07aff8.wns-46.gw.app.instasafe.io	2025-10-23	13.234.197.59

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > giift.app.instasafe.io

Is this malicious?

DNS Resolutions

Port 443

Subdomains