Domain > sa.core.gw.prod.careem-rh.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2023-04-21	18.200.107.107 (ClassC)
2023-05-10	52.19.48.196 (ClassC)
2025-10-24	172.64.153.23 (ClassC)

HTTP/1.1 308 Permanent RedirectDate: Fri, 24 Oct 2025 04:44:29 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9936d1ba9da6f7ed-PDXLocation: https://sa.core.gw.prod.careem-rh.com/X-OneAgent-JS-Injection: trueX-ruxit-JS-Agent: trueServer-Timing: dtSInfo;desc1Set-Cookie: dtCookiez48j3ehhv_4_srv_2_sn_0E9054E873C6E296C3A806A22468171F_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1; Path/; Domain.careem-rh.com; secureSet-Cookie: __cf_bmwm_ju56MVeXN8goRhVib5wnv.CN3Mz_4L6SZBVKfgiQ-1761281069-1.0.1.1-qE80NvdmFYiYaa5Yoc1yy25_oAj.7sfVc_R0a1OZHDhs3PJD6vDEVGrNZTB2_AJqnhe22jmbeR9QfMBAJ0.3VMofyrjLOpDkI8eeOfD28R0; path/; expiresFri, 24-Oct-25 05:14:29 GMT; domain.prod.careem-rh.com; HttpOnlySet-Cookie: _cfuvidp3dH3Ag6xgJrZwcJTedFTuyFXK9Nts8GCIhVW5oj.Lc-1761281069393-0.0.1.1-604800000; path/; domain.prod.careem-rh.com; HttpOnlycf-cache-status: DYNAMICServer: cloudflare

html>head>title>308 Permanent Redirect/title>script typetext/javascript src/ruxitagentjs_ICA15789NPRUVXfqrux_10321250808084810.js data-dtconfigridRID_2418|rpid-319950359|domaincareem-rh.com|reportUrl/rb_bf90328sse|appea7c4b59f27d43eb|ssc1|owasp1|featureHashICA15789NPRUVXfqrux|rdnt1|uxrgce1|cucz48j3ehh|mel100000|expw1|dpvc1|lastModification1761207694061|postfixz48j3ehh|tp500,50,0|srbbv2|agentUri/ruxitagentjs_ICA15789NPRUVXfqrux_10321250808084810.js data-config{revision:1761207694061,beaconUri:/rb_bf90328sse,agentUri:/ruxitagentjs_ICA15789NPRUVXfqrux_10321250808084810.js,environmentId:z48j3ehh,modules:ICA15789NPRUVXfqrux} data-envconfig{} data-appconfig{app:ea7c4b59f27d43eb}>/script>/head>body>center>h1>308 Permanent Redirect/h1>/center>script>(function(){function c(){var ba.contentDocument||a.contentWindow.document;if(b){var db.createElement(script);d.innerHTMLwindow.__CF$cv$params{r:9936d1ba9da6f7ed,t:MTc2MTI4MTA2OS4wMDAwMDA};var adocument.createElement(script);a.nonce;a.src/cdn-cgi/challenge-platform/scripts/jsd/main.js;document.getElementsByTagName(head)0.appendChild(a);;b.getElementsByTagName(head)0.appendChild(d)}}if(document.body){var adocument.createElement(iframe);a.height1;a.width1;a.style.positionabsolute;a.style.top0;a.style.left0;a.style.bordernone;a.style.visibilityhidden;document.body.appendChild(a);if(loading!document.readyState)c();else if(window.addEventListener)document.addEventListener(DOMContentLoaded,c);else{var edocument.onreadystatechange||function(){};document.onreadystatechangefunction(b){e(b);loading!document.readyState&&(document.onreadystatechangee,c())}}}})();/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sa.core.gw.prod.careem-rh.com

Is this malicious?

DNS Resolutions

Port 80