Domain > login.celayix.com

More information on this domain is in AlienVault OTX

Whois

Property	Value
NameServer	NS-1971.AWSDNS-54.CO.UK
Created	2000-06-23 20:18:29
Changed	2021-02-18 23:28:35
Registrar	Register.com, Inc.

DNS Resolutions

Date	IP Address
2021-10-02	143.204.225.78 (ClassC)
2026-02-09	3.169.173.116 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Mon, 09 Feb 2026 09:48:46 GMTContent-Type: text/htmlContent-Length: 915Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 a454a679efa1e16833b77cb6af61e11c.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: 3nZYxpRdj6tUf_s7qBEj4zDMJzTV5Agjj0nGpGPb3Q4dT7_-nkNNUQX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: upgrade-insecure-requests; default-src self *.celayix.com; base-uri self; object-src self data: blob:; script-src self *.celayix.com unsafe-inline unsafe-eval *.googleapis.com apis.google.com/js/api.js cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com *.google.com *.gstatic.com kendo.cdn.telerik.com *.posthog.com/ widget.intercom.io/ js.intercomcdn.com/ cdn.qrvey.com cdn.jsdelivr.net/npm/marked/marked.min.js *.qrveyapp.com/ *.googletagmanager.com inlinemanual.com *.inlinemanual.com *.clickcease.com *.clarity.ms *.vimeocdn.com *.doubleclick.net *.zoominfo.com *.bing.com d1b3llzbo1rqxo.cloudfront.net *.licdn.com *.productfruits.com; connect-src self *.celayix.com *.amazonaws.com *.googleapis.com *.google.com *.gstatic.com wss://*.celayix.com *.logrocket.io *.lr-ingest.io *.logrocket.com *.lr-in.com *.lr-in-prod.com *.quickblox.com wss://*.quickblox.com:* *.posthog.com/ ipv4.icanhazip.com/ data: api2.amplitude.com/2/httpapi api-iam.intercom.io/ wss://nexus-websocket-a.intercom.io/ *.qrveyapp.com/ wss://xfb5at2rib.execute-api.us-east-1.amazonaws.com wss://fbkdlma0p3.execute-api.us-east-1.amazonaws.com *.google-analytics.com px.ads.linkedin.com *.clarity.ms *.zoominfo.com *.productfruits.com wss://*.productfruits.com https://productfruits.help; img-src self *.celayix.com data: *.googleapis.com *.gstatic.com *.google.com *.google.ca *.amazonaws.com blob: *.qrveyapp.com *.intercomcdn.com *.intercomassets.com *.linkedin.com *.clarity.ms *.bing.com *.googletagmanager.com *.productfruits.com; style-src self unsafe-inline fonts.googleapis.com s3.amazonaws.com/cdn.qrvey.com/ *.qrveyapp.com/ cdn.qrvey.com/ *.productfruits.com; frame-src self *.celayix.com:* *.google.com blob: intercom-sheets.com/ *.doubleclick.net *.productfruits.com; font-src self fonts.gstatic.com data: s3.amazonaws.com/cdn.qrvey.com/ *.qrveyapp.com/ s3.amazonaws.com cdn.qrvey.com/ fonts.intercomcdn.com/; child-src self blob: data:; worker-src self blob:; media-src self blob: *.intercomcdn.comX-Content-Type-Options: nosniff

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Bad request.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: 3nZYxpRdj6tUf_s7qBEj4zDMJzTV5Agjj0nGpGPb3Q4dT7_-nkNNUQ/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 4476Connection: keep-aliveDate: Mon, 09 Feb 2026 09:48:48 GMTCache-Control: max-age0Last-Modified: Wed, 28 Jan 2026 04:15:10 GMTx-amz-version-id: K7DUxTFGB3SlMRIQHLcH3TtXZ78t1EmkETag: 43153488512f03fc8b3f4b63fd0a2e9cServer: AmazonS3X-Cache: Miss from cloudfrontVia: 1.1 8af7e76489ae9222af2304e63d2c0520.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: uvbMMOUDVVMhvdPsF2iybbEe1mg3wsJtJ8zVlEKMYexzHrnzHnpB6gX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: upgrade-insecure-requests; default-src self *.celayix.com; base-uri self; object-src self data: blob:; script-src self *.celayix.com unsafe-inline unsafe-eval *.googleapis.com apis.google.com/js/api.js cdn.logrocket.io cdn.lr-ingest.io cdn.lr-in.com cdn.lr-in-prod.com *.google.com *.gstatic.com kendo.cdn.telerik.com *.posthog.com/ widget.intercom.io/ js.intercomcdn.com/ cdn.qrvey.com cdn.jsdelivr.net/npm/marked/marked.min.js *.qrveyapp.com/ *.googletagmanager.com inlinemanual.com *.inlinemanual.com *.clickcease.com *.clarity.ms *.vimeocdn.com *.doubleclick.net *.zoominfo.com *.bing.com d1b3llzbo1rqxo.cloudfront.net *.licdn.com *.productfruits.com; connect-src self *.celayix.com *.amazonaws.com *.googleapis.com *.google.com *.gstatic.com wss://*.celayix.com *.logrocket.io *.lr-ingest.io *.logrocket.com *.lr-in.com *.lr-in-prod.com *.quickblox.com wss://*.quickblox.com:* *.posthog.com/ ipv4.icanhazip.com/ data: api2.amplitude.com/2/httpapi api-iam.intercom.io/ wss://nexus-websocket-a.intercom.io/ *.qrveyapp.com/ wss://xfb5at2rib.execute-api.us-east-1.amazonaws.com wss://fbkdlma0p3.execute-api.us-east-1.amazonaws.com *.google-analytics.com px.ads.linkedin.com *.clarity.ms *.zoominfo.com *.productfruits.com wss://*.productfruits.com https://productfruits.help; img-src self *.celayix.com data: *.googleapis.com *.gstatic.com *.google.com *.google.ca *.amazonaws.com blob: *.qrveyapp.com *.intercomcdn.com *.intercomassets.com *.linkedin.com *.clarity.ms *.bing.com *.googletagmanager.com *.productfruits.com; style-src self unsafe-inline fonts.googleapis.com s3.amazonaws.com/cdn.qrvey.com/ *.qrveyapp.com/ cdn.qrvey.com/ *.productfruits.com; frame-src self *.celayix.com:* *.google.com blob: intercom-sheets.com/ *.doubleclick.net *.productfruits.com; font-src self fonts.gstatic.com data: s3.amazonaws.com/cdn.qrvey.com/ *.qrveyapp.com/ s3.amazonaws.com cdn.qrvey.com/ fonts.intercomcdn.com/; child-src self blob: data:; worker-src self blob:; media-src self blob: *.intercomcdn.comX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomains; preload

!doctype html>html>head>meta httpequivX-UA-Compatible contentIEedge/>meta charsetutf-8/>meta httpequivContent-Language contenten/>meta nameviewport contentwidthdevice-width,initial-scale1>meta namedescription contentSchedule Xpress, is used to create employee schedules using automation. It is also used to find replacements and send messages to staff./>script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:	new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,	jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src	https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);	})(window,document,script,dataLayer,GTM-M4NBM7);/script>script>/**		 * This handler redirects the user to the previously logged in version		 * of the app if the app was terminated without logging out.		 */		(function () {			const url  new URL(window.location);			/**			 * If the URL protocol is http(s), then this is not a cordova app and			 * the subsequent logic can be skipped.			 */			if (/^http/.test(url.protocol)) {				return;			}			const getItem  (key) > {				const value  localStorage.getItem(key);				if (value  null) {					throw new Error(key  + key +  does not exist in localStorage);				}				try {					return JSON.parse(value);				} catch ({ message }) {					console.error(message);					throw new Error(Cannot JSON.parse localStorage.getItem( + key + ));				}			};			let isApp814, loginSecureData;			try {				isApp814  getItem(isApp814);				loginSecureData  getItem(loginSecureData);				if (yes, no.includes(isApp814)) {					isApp814  isApp814  yes;				} else {					throw new Error(isApp814  + isApp814 +  is not valid);				}				if (!loginSecureData || !loginSecureData.hasOwnProperty(claim)) {					throw new Error(loginSecureData is not valid);				}				// cancel all resource requests initiated by this page				window.stop();				if (isApp814  yes) {					window.location.replace(814/index.html);				} else {					window.location.replace(900/index.html);				}			} catch ({ message }) {				console.warn(message);				// remove pathname related items from localStorage				localStorage.removeItem(isApp814);				localStorage.removeItem(loginSecureData);				return;			}		})();/script>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/kendo/kendo.common-bootstrap.min.css>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/kendo/kendo.bootstrap.min.css>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/bootstrap/bootstrap.min.css>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/font-awesome/css/all.min.css>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/font-awesome/css/v4-shims.min.css>link relstylesheet href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/index.css/>link relicon href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/favicon.ico typeimage/x-icon>script src/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/cordova.js deferdefer>/script>script id__webpack_public_path__>window.resourceBaseUrl  /production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/;/script>title>Celayix Login/title>link href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/common-styles.css relstylesheet>link href/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/package-styles.css relstylesheet>/head>body>noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-M4NBM7 height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>div idroot classcx-responsive-container>/div>script src/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/vendors-7d3286c205d2bdebfa44.js>/script>script src/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/common-styles-0cce19d30b6ac23a259d.js>/script>script src/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/package-styles-7e755eddb4e61fd5bc63.js>/script>script src/production/2601272013-9d3819293c1ef402d47bb78a88db8ac08ece6c55/main.bundle.js>/script>/body>/html>

Subdomains

Date	Domain	IP
v3-etime-api.celayix.com	2024-07-13	15.156.117.122
prodv3-va-etime-api.celayix.com	2026-01-20	3.163.24.84
prodv3-mo-etime-api.celayix.com	2026-01-20	18.161.6.56
prodv3-va-socket-api.celayix.com	2024-08-20	3.223.38.102
login.celayix.com	2026-02-09	3.169.173.116
help.celayix.com	2025-12-03	3.163.24.122
team-xpress.celayix.com	2021-02-25	99.84.79.32
www.celayix.com	2019-07-14	104.199.117.31

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > login.celayix.com

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443

Subdomains