Domain > codepush.routing-production.cgaws.cloud

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-03-21	3.160.22.21 (ClassC)
2026-03-02	18.161.6.113 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontContent-Type: text/htmlContent-Length: 4668Connection: keep-aliveDate: Thu, 13 Nov 2025 10:44:12 GMTLast-Modified: Mon, 22 Sep 2025 15:17:08 GMTETag: a39bbc60d834395df90845ef491ec283x-amz-server-side-encryption: AES256Cache-Control: public, max-age31536000Accept-Ranges: bytesX-Cache: Error from cloudfrontVia: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: FjsdpG7kjNLQgzfCHcWbZxaPZ8v3r6UxzArJScAYqibQ9hdFFQDg8wAge: 9428666X-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINReferrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age31536000; includeSubDomainsVary: Origin

html>  head>    script>      window.errorCode  404;      window.gtmIdUno  GTM-PWWDDK7;      window.gtmIdClassic  GTM-KQMG8W;      /* eslint-disable */var localeMatcher  /^\/((\w{2}-\w{2})|(\w{2}\/\w{2}))(?\/|$)/var locale  window.location.pathname.match(localeMatcher)var langPart  window.location.pathname.split(/)1const defaultLangCountry  en/noconst year  new Date().getFullYear()window.GTM_ID  !locale ? window.gtmIdClassic : window.gtmIdUnoconst addGtmScriptElement  function () {  // loads gtm script asynchronously, adds script tag to load it  // before any other script tags present on the page.  (function(w,d,s,l,i){    wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm.js});    var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;    j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;    f.parentNode.insertBefore(j,f);  })  (window,document,script,dataLayer, window.GTM_ID);}const pushDataLayerItems  function() {  // push page data to be logged as event by gtm.  var lang, country  locale ? locale1.split(/\.\-/) : langPart  var errorTypes  {    404: not_found,    500: server_error,    502: bad_gateway,    503: service_unavailable,  }  dataLayer.push({    event: page,    app_platform: web,    website_id: 001,    page_type: error,    store_currency: ,    default_currency: EUR,    store_country: country,    store_language: lang,    error_type: errorTypeswindow.errorCode,    error_msg: document.title,    error_code: window.errorCode  });}const loadGtmIFrame  function() {  // loads the gtm doc in hidden iframe inside the noscript element.  var $nonscript  document.querySelector(data-hidgtm-noscript)  var iframe  iframe data-hidgtm-iframe srchttps://www.googletagmanager.com/ns.html?id + window.GTM_ID +  height0 width0 styledisplay:none;visibility:hidden>/iframe>  if($nonscript)    $nonscript.innerHTML  iframe;}const updateHomeUrl  function(){  // updates the home url in home button, recharge icons in header and footer  const locationUrlParts  window.location.pathname.split(/);  // This is read from labels.json file from config/i18n  const labels  JSON.parse(document.getElementById(langLabels)?.text);  const langs  labels?.recharge?.languages;  let langCountry  defaultLangCountry  let isLangCountryValid  false;  if(locationUrlParts.length > 3){    langCountry  locationUrlParts1 + / + locationUrlParts2    isLangCountryValid  langs?.includes(langCountry)  }  if(locationUrlParts.length  2 || !isLangCountryValid) {    langCountry  locationUrlParts1    isLangCountryValid  langs?.includes(langCountry)  }  if(!isLangCountryValid)    langCountry  defaultLangCountry  const homeUrl  /  document.querySelectorAll(data-hrefhome_url).forEach(function(el) {    el.setAttribute(href, homeUrl);  });}const updateYearPlaceholder  function() {  // updates the year placeholder in footer to current year  document.querySelectorAll(data-textentity_name).forEach(function(el) {    el.textContent  el.textContent?.replace({year},year)  })}// executefunction updateErrorPage(){  addGtmScriptElement()  pushDataLayerItems()  loadGtmIFrame()  updateYearPlaceholder()}updateErrorPage()    /script>  /head>  body>      div idcontent-translated>/div>      script>        (function() {          const errorCode  404          const errorPageLangsString  Chinese_simplified,Czech,Hungarian,US,ar,as,ba,be,bg,bn,cs,da,de,el,en,es,fi,fr,hr,hu,id,is,it,ja,lb,lt,lv,ms,mt,nb,nl,no,pl,pt,ro,ru,sa,si,sk,sl,sv,th,tl,tr,vi,zh          const errorPageLangs  errorPageLangsString?.split(,)          const baseUrl  /_nuxt/error-pages/          const langPart  window.location.pathname.split(/)1          let langCode  langPart.length  2 ? langPart : langPart.split(-)0          langCode  errorPageLangs?.includes(langCode) ? langCode : en          const request  new XMLHttpRequest();          const pagePath  baseUrl + langCode + / + errorCode + .html          request.open(GET, pagePath, true);          request.onload  function() {            if (request.status > 200 && request.status  400) {              const resp  request.responseText;              document.querySelector(#content-translated).innerHTML  resp;              updateErrorPage()            }          };          request.send();        })();    /script>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > codepush.routing-production.cgaws.cloud

Is this malicious?

DNS Resolutions

Port 80

Port 443