Domain > safe-backend.haven1.org

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-15	104.26.15.136 (ClassC)
2025-10-22	104.26.13.160 (ClassC)

HTTP/1.1 200 OKDate: Wed, 22 Oct 2025 02:08:10 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-alivevary: Accept, Cookieallow: GET, HEAD, OPTIONSx-frame-options: SAMEORIGINx-content-type-options: nosniffreferrer-policy: origin-when-cross-origincross-origin-opener-policy: same-originNel: {report_to:cf-nel,success_fraction:0.0,max_age:604800}strict-transport-security: max-age31536000; includeSubDomainscontent-security-policy: frame-ancestors https://*.synaps.io/ https://*.haven1.org;  upgrade-insecure-requests;cf-cache-status: DYNAMICReport-To: {group:cf-nel,max_age:604800,endpoints:{url:https://a.nel.cloudflare.com/report/v4?snHLeODoi9jrOpWvaTP%2F5qK32TkPDhZB%2F0Id9oAuQOOlZWOqDbHSEyl4oiXLjsZVZBgrkStOossao%2FpyXMe6ojzFmfwB8O0%2Fo%2FW1XIjMg%2BABA7W%2BB}}Server: cloudflareSet-Cookie: csrftokenB19322ChsN3fmQE0UtoofomHnG3BR9ub; SameSiteLax; Path/; Max-Age31449600; ExpiresWed, 21 Oct 2026 02:08:10 GMTCF-RAY: 992571ffbbefff07-PDX

!DOCTYPE html>html>head>    meta charsetutf-8/>    title>Safe Config Service API/title>                                    link relicon typeimage/png href/static/drf-yasg/swagger-ui-dist/favicon-32x32.png/>                link relstylesheet typetext/css href/static/drf-yasg/style.css/>        link relstylesheet typetext/css href/static/drf-yasg/swagger-ui-dist/swagger-ui.css>                    /head>body classswagger-body>    div idswagger-ui>/div>    script idswagger-settings typeapplication/json>{docExpansion: list, deepLinking: false, showExtensions: true, defaultModelRendering: model, defaultModelExpandDepth: 3, defaultModelsExpandDepth: 3, showCommonExtensions: true, supportedSubmitMethods: get, put, post, delete, options, head, patch, trace, displayOperationId: true, persistAuth: false, refetchWithAuth: false, refetchOnLogout: false, fetchSchemaWithQuery: true}/script>script idoauth2-config typeapplication/json>{}/script>    script src/static/drf-yasg/swagger-ui-dist/swagger-ui-bundle.js>/script>    script src/static/drf-yasg/swagger-ui-dist/swagger-ui-standalone-preset.js>/script>    script src/static/drf-yasg/insQ.min.js>/script>    script src/static/drf-yasg/immutable.min.js>/script>    script src/static/drf-yasg/swagger-ui-init.js>/script>    a idoauth2-redirect-url href/static/drf-yasg/swagger-ui-dist/oauth2-redirect.html classhidden>/a>    div iddjango-session-auth classhidden>                    input typehidden namecsrfmiddlewaretoken valueCDd0G7rSl8YCeeP9tm5N84Tz0ZxyBntf3ucTyZTZDLRHqUjZdFj1di56dvqZimNg>                                                                    div classbtn authorize>                    a idauth classheader__btn href/accounts/login/?next/ data-sw-translate>                                                    Django Login                                            /a>                /div>                        /div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > safe-backend.haven1.org

Is this malicious?

DNS Resolutions

Port 443