Domain > rexall.medmeapp.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2021-04-01	99.84.173.123 (ClassC)
2025-04-02	13.249.9.118 (ClassC)
2025-09-14	45.60.101.105 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlConnection: keep-aliveDate: Sat, 13 Sep 2025 10:42:34 GMTLast-Modified: Wed, 03 Sep 2025 21:10:39 GMTETag: 07f24058ef4ff9384ad6a15f0a1ad770x-amz-server-side-encryption: AES256Accept-Ranges: bytesServer: AmazonS3X-Cache: Hit from cloudfrontVia: 1.1 2cff2df7a6084fb71cb1cb11b03b664a.cloudfront.net (CloudFront)X-Amz-Cf-Pop: YTO53-P1X-Amz-Cf-Id: D4lVx3oMmPg6Sy3wocCGB4X9GadWjoPqjvfCwwiCrkFsc5gM4gjznwAge: 64847X-Frame-Options: DENYReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy: frame-ancestors https://drx-pch-prod.pchealth.ca https://pchealth.ca https://www.pchealth.ca https://local.pchealth.lblw.ca https://drx-pch-dev.pchealth.ca https://drx-pch-sit.pchealth.ca https://drx-pch-uat.pchealth.ca https://drx-pch-web-sit.nane1-lower-gke1.lblw.cloud https://www.medmehealth.com https://medmehealth.design.webflow.com https://mypharmacy.shoppersdrugmart.ca https://mypharmacy.pchealth.ca; connect-src self blob: data: https://www.facebook.com https://*.cookieyes.com https://cdn-cookieyes.com https://o4507142357254144.ingest.us.sentry.io/api/ https://events.launchdarkly.com https://app.launchdarkly.com https://r85tr312u6.execute-api.us-west-2.amazonaws.com https://bam.nr-data.net https://*.medmeapp.com wss://*.medmeapp.com https://api.medmedev.com http://metabase.api.medmedev.com https://api.medmeuat.com https://*.s3.ca-central-1.amazonaws.com https://cognito-idp.ca-central-1.amazonaws.com https://api.mapbox.com https://events.mapbox.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://api.amplitude.com https://api.perfalytics.com https://fonts.googleapis.com https://perfalytics.com https://*.google-analytics.com https://*.google.com https://translate.googleapis.com wss://global.vss.twilio.com wss://sdkgw.us1.twilio.com https://www.bing.com https://*.googletagmanager.com https://csp.withgoogle.com https://stats.g.doubleclick.net https://uzb6dz5e50.execute-api.ca-central-1.amazonaws.com; default-src self blob: data: https://*.s3.ca-central-1.amazonaws.com https://api.mapbox.com https://*.medmeapp.com wss://*.medmeapp.com https://bam.nr-data.net https://fonts.googleapis.com https://fonts.gstatic.com https://js.stripe.com https://static.queue-it.net https://stats.g.doubleclick.net https://*.google-analytics.com https://www.google.ca https://*.google.com https://*.googletagmanager.com https://www1.shoppersdrugmart.ca https://events.mapbox.com https://assets.queue-it.net https://medmehealth.queue-it.net wss https://www.shoppersdrugmart.ca https://googleads.g.doubleclick.net https://api.medmedev.com; font-src self https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com data: chrome-extension; img-src self blob: data: https://www.facebook.com https://cdn-cookieyes.com https://*.s3.ca-central-1.amazonaws.com https://*.google-analytics.com https://www.google.ca https://*.google.com https://www1.shoppersdrugmart.ca https://browser-update.org https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://translate.google.com https://translate.googleapis.com https://www.brunet.ca https://www.google.ae https://www.google.at https://www.google.ba https://www.google.be https://www.google.bs https://www.google.ch https://www.google.cl https://www.google.cn https://www.google.co.bw https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com.ag https://www.google.com.ar https://www.google.com.au https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.ie https://www.google.it https://www.google.lv https://www.google.nl https://www.google.pl https://www.google.pt https://www.google.rs https://www.google.se https://www.google.tt https://*.googletagmanager.com https://www.jeancoutu.com https://www.shoppersdrugmart.ca https://adservice.google.com https://bam.nr-data.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.dz https://www.google.gg https://www.google.lk https://www.google.sk https://www.google.so https://ssl.gstatic.com https://www.gstatic.com; script-src-elem self https://connect.facebook.net https://cdn-cookieyes.com https://bam.nr-data.net https://js.stripe.com https://perfalytics.com https://perfalytics.com/static/js/freshpaint.js https://perfalytics.com/static/js/integrations.js https://perfalytics.com/static/js/editor.js https://r85tr312u6.cloudfront.net/static/js/freshpaint.js https://r85tr312u6.execute-api.us-west-2.amazonaws.com/prod https://r85tr312u6.cloudfront.net/static/js/integrations.js https://r85tr312u6.cloudfront.net/static/js/editor.js https://s3-us-west-1.amazonaws.com https://static.queue-it.net https://widget.intercom.io https://*.google-analytics.com https://*.googletagmanager.com https://assets.queue-it.net https://medmehealth.queue-it.net https://js.intercomcdn.com https://*.google.com https://translate.googleapis.com data: https://apis.google.com https://cdn.amplitude.com https://cdn.mxpnl.com tpc.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net unsafe-inline; script-src self https://connect.facebook.net https://bam.nr-data.net https://js.stripe.com https://s3-us-west-1.amazonaws.com https://static.queue-it.net https://*.google-analytics.com https://tagmanager.google.com https://assets.queue-it.net https://medmehealth.queue-it.net https://js.intercomcdn.com https://apis.google.com https://cdn.amplitude.com https://cdn.mxpnl.com tpc.googlesyndication.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://app.intercom.io https://widget.intercom.io unsafe-eval; style-src-elem https://api.mapbox.com https://fonts.googleapis.com https://translate.googleapis.com https://www.gstatic.com unsafe-inline; style-src https://api.mapbox.com https://tagmanager.google.com https://fonts.googleapis.com unsafe-inline https://translate.googleapis.com https://www.gstatic.com; worker-src blob:; child-src https://js.stripe.com https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net blob: tpc.googlesyndication.com; frame-src https://intercom-sheets.com/ blob: https://js.stripe.com https://platform.explo.co https://embed.ca.oneschema.co tpc.googlesyndication.com https://medme.dev.search.asepha.app https://medme.staging.search.asepha.app https://medme.prod.search.asepha.app; media-src https://js.intercomcdn.com data:; form-action https://messenger-apps.intercom.io https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://rxconsultaction.int.vigilance.ca https://rxconsultaction.vigilance.ca self; script-src-attr unsafe-inline; style-src-attr unsafe-inlineX-Content-Type-Options: nosniffStrict-Transport-Security: max-age15724800Set-Cookie: nlbi_2388498Yge2FVsFlglwLTEryeIvkQAAAABRdKAaI0GTJ+ES4pc/ECkF; HttpOnly; path/; Domain.medmeapp.com; Secure; SameSiteNoneSet-Cookie: visid_incap_2388498iWCScrhaR4yML7cDvVTSNehHxmgAAAAAQUIPAAAAAABk5HRa4Ojt0tqr3cPcyq00; expiresSun, 13 Sep 2026 06:20:05 GMT; HttpOnly; path/; Domain.medmeapp.com; Secure; SameSiteNoneSet-Cookie: incap_ses_8078_2388498yyS4e9H6/1WLQ8SSkNIacOhHxmgAAAAAZ/ZB3DBdctHsr5QmacZqtg; path/; Domain.medmeapp.com; Secure; SameSiteNoneX-CDN: ImpervaTransfer-Encoding: chunkedX-Iinfo: 13-22095898-22035342 pNNy RT(1757825000526 88) q(0 0 0 -1) r(0 0) U24

!doctype html>html langen>head>meta charsetutf-8/>meta nameviewport contentminimum-scale1,widthdevice-width,initial-scale1/>link hrefhttps://fonts.googleapis.com/css?familyMontserrat:300,400,500,600,700&displayswap relstylesheet/>link hrefhttps://fonts.googleapis.com/css?familyOpen+Sans:300,400,500,600,700&displayswap relstylesheet/>link hrefhttps://fonts.googleapis.com/css2?familyRoboto:wght@300;700&displayswap relstylesheet/>link relstylesheet hrefhttps://fonts.googleapis.com/icon?familyMaterial+Icons/>style>@keyframes keyframes-circular-dash {        0% {          stroke-dasharray: 1px, 200px;          stroke-dashoffset: 0px;        }        50% {          stroke-dasharray: 100px, 200px;          stroke-dashoffset: -15px;        }        100% {          stroke-dasharray: 100px, 200px;          stroke-dashoffset: -125px;        }      }/style>script>const loblawsRegEx  new RegExp(/loblaw/gi)      const isIndexingDisabled  production ! production      if (loblawsRegEx.test(window.location.hostname) || isIndexingDisabled) {        const meta  document.createElement(meta)        meta.name  robots        meta.content  noindex, nofollow        document.getElementsByTagName(head)0.appendChild(meta)      }/script>script>let pageMetadata  {};      try {        pageMetadata  JSON.parse({shoppersdrugmart.medmeapp.com:{title:Shoppers Drug Mart,favicon:/assets/favicons/sdm.png},loblawpharmacy.medmeapp.com:{title:Loblaw Pharmacy,favicon:/assets/favicons/sdm.png},scheduler.pharmaprix.ca:{title:Pharmaprix,favicon:/assets/favicons/sdm.png},consultation.jeancoutu.com:{title:Jean Coutu,favicon:/assets/favicons/jcg.png},consultation.brunet.ca:{title:Brunet,favicon:/assets/favicons/brunet.png},pharmacyenterprise.medmeapp.com:{title:MedMe},londondrugs.medmeapp.com:{title:London Drugs,favicon:/assets/favicons/londondrugs.png}});      } catch (error) {        console.error(Failed to parse PAGE_METADATA:, error);      }      const config  pageMetadatawindow.location.hostname;      document.title  config?.title || MedMe Health      // add favicon      const favicon  document.createElement(link)      favicon.rel  icon      favicon.type  image/png      favicon.href  config?.favicon || /assets/favicons/medme.png      document.getElementsByTagName(head)0.appendChild(favicon)/script>script>;(function () {        const isFeatureEnabled  true        if (isFeatureEnabled  true) {          fetch(https://api.tcp.medmeapp.com/public/tenants)            .then((response) > {              if (!response.ok) {                // If the response status is not in the range 200-299                throw new Error(`HTTP error! status: ${response.status}`)              }              return response.json()            })            .then((metadata) > {              // Save app metadata to local storage              localStorage.setItem(                medme-app-metadata,                JSON.stringify(metadata)              )            })            .catch((error) > {              localStorage.setItem(                medme-app-metadata,                JSON.stringify({ error: error.message })              )            })            .finally(() > {              // Dispatch an event to notify other parts of the app of the localStorage change,              // as the storage event does not fire in the same window or tab where the change occurs.              window.dispatchEvent(                new CustomEvent(medme-app-metadata)              )            })        }      })()/script>script deferdefer src/app.76a0330782187c92f29a.js>/script>/head>body>div idroot>div styleposition: absolute;          top: calc(50% - 20px);          left: calc(50% - 20px);          display: flex;          flex-direction: column;          justify-content: center;          align-items: center;>div roleprogressbar stylewidth: 40px; height: 40px>svg viewBox22 22 44 44>circle cx44 cy44 r20.2 fillnone stroke-width3.6 styledisplay: block;                stroke: #3f51b5;                animation: keyframes-circular-dash 1.4s ease-in-out infinite;                stroke-dasharray: 80px, 200px;                stroke-dashoffset: 0px;>/circle>/svg>/div>div stylefont-size: 1em;            font-weight: 600;            color: #5f6062;            margin: 1rem 0rem;            text-align: center;            font-family: GT Eesti Display, sans-serif;>Loading .../div>/div>/div>link hrefhttps://api.mapbox.com/mapbox-gl-js/v1.12.0/mapbox-gl.css relstylesheet/>link relstylesheet hrefhttps://api.mapbox.com/mapbox-gl-js/plugins/mapbox-gl-geocoder/v4.2.0/mapbox-gl-geocoder.css/>script typetext/javascript src/_Incapsula_Resource?SWJIYLWA719d34d31c8e3a6e6fffd425f7e032f3&ns2&cb359567540 async>/script>/body>/html>

Subdomains

Date	Domain	IP
polaristravelclinic.medmeapp.com	2024-10-18	99.84.66.58
staging.medmeapp.com	2024-02-21	192.0.2.235
auth.medmeapp.com	2024-09-23	204.246.191.96
scribe.api.medmeapp.com	2024-06-10	3.97.174.30
metabase.api.medmeapp.com	2024-05-03	3.99.38.195
gql.medscheck.medmeapp.com	2024-11-10	15.157.11.145
rexall.medmeapp.com	2025-09-14	45.60.101.105
hybridpharm.medmeapp.com	2024-10-11	108.138.94.114
api.tcp.medmeapp.com	2025-05-28	3.165.160.53
davisrexalldrugs.medmeapp.com	2024-03-05	3.163.24.59
alpinevaluedrugmart.medmeapp.com	2025-09-05	3.169.173.65
dev.medmeapp.com	2024-09-11	3.163.24.67
www.medmeapp.com	2023-11-01	3.163.24.78
metropharmacy.medmeapp.com	2024-07-21	18.161.6.108

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rexall.medmeapp.com

Is this malicious?

DNS Resolutions

Port 443

Subdomains