Domain > care.rxpress.oniadea.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-12-15	18.165.122.74 (ClassC)
2023-12-18	13.33.252.10 (ClassC)
2026-02-24	3.163.158.77 (ClassC)

HTTP/1.1 301 Moved PermanentlyDate: Tue, 24 Feb 2026 10:57:55 GMTContent-Type: text/htmlContent-Length: 167Connection: keep-aliveLocation: https://care.rxpress.oniadea.com/X-Cache: Redirect from cloudfrontVia: 1.1 487082619948f670d3b30fb3db8fbabc.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA900-P1X-Amz-Cf-Id: IuGik9PxkaxmBxcbRPtpuglCmOMexAUShFzsfzT2j7UdTrHpho3zVwX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src self; connect-src *.oniadea.com *.iadea.com *.clwd.io remote.dev.iadea.oniadea.com www.google-analytics.com wss://remote.dev.iadea.oniadea.com; script-src self unsafe-inline unsafe-eval *.iadea.com *.oniadea.com *.clwd.io www.google.com www.gstatic.com www.googletagmanager.com ; style-src self unsafe-inline https://fonts.googleapis.com ; font-src self https://fonts.gstatic.com ; img-src self *.oniadea.com www.googletagmanager.com data: blob:; frame-src https://www.google.comCache-Control: no-storeServer: IAdeaCareVary: Origin

html>head>title>301 Moved Permanently/title>/head>body>center>h1>301 Moved Permanently/h1>/center>hr>center>CloudFront/center>/body>/html>

Port 443

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 850Connection: keep-aliveDate: Tue, 24 Feb 2026 10:57:56 GMTLast-Modified: Tue, 09 Apr 2024 10:40:38 GMTETag: 33f6ba107a7fc37dfae815047c1d4356Accept-Ranges: bytesServer: IAdeaCareX-Cache: Miss from cloudfrontVia: 1.1 9257f9c4051fe8bd6cc4a09855b66350.cloudfront.net (CloudFront)X-Amz-Cf-Pop: SEA900-P1X-Amz-Cf-Id: GPtkP-mFKa_odnwZ6Akbx9oDyYMCvpu0PlrSo3HVG9SCQ1qwhqZVfgX-XSS-Protection: 1; modeblockX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src self; connect-src *.oniadea.com *.iadea.com *.clwd.io remote.dev.iadea.oniadea.com www.google-analytics.com wss://remote.dev.iadea.oniadea.com; script-src self unsafe-inline unsafe-eval *.iadea.com *.oniadea.com *.clwd.io www.google.com www.gstatic.com www.googletagmanager.com ; style-src self unsafe-inline https://fonts.googleapis.com ; font-src self https://fonts.gstatic.com ; img-src self *.oniadea.com www.googletagmanager.com data: blob:; frame-src https://www.google.comStrict-Transport-Security: max-age31536000; includeSubDomainsCache-Control: no-storeVary: Origin

!doctype html>head>    meta charsetutf-8>    title>IAdeaCare/title>    script>        const specialHostname  new URL(location.href).hostname        if (specialHostname  www.care.iadea.com || specialHostname  care.iadea.com) {            location.replace(location.href.replace(specialHostname, care.oniadea.com))        } else {            const legacyBase  oniadea.com            const newBase  care.oniadea.com			const legacyDomain  new URL(location.href).origin            const enterpiseName  (new URL(location.href).origin).replace(legacyBase, ).split(.).at(-2)            const newDomain  `https://${enterpiseName}.${newBase}`            console.log(`Redirect to ${newDomain}`)            location.replace(location.href.replace(legacyDomain, newDomain))        }    /script>/head>/html>

Subdomains

Date	Domain	IP
care.iadea.oniadea.com	2024-12-19	99.86.38.100
api.iadea.oniadea.com	2025-07-20	34.223.189.82
files.iadea.oniadea.com	2025-07-02	100.20.103.117
configuration.tool.oniadea.com	2024-11-21	52.92.207.123
care.fpl.oniadea.com	2026-01-23	3.175.34.30
care.rxpress.oniadea.com	2026-02-24	3.163.158.77
care.hfw.oniadea.com	2026-01-04	3.175.34.83
care.vicinity.oniadea.com	2026-02-21	3.175.34.83

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > care.rxpress.oniadea.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains