WEBSITE ANALYSIS REPORT

http://upmcpatientportal.com

23 Jul 2026 · 17:16:20.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

58188.ase.aidcgroup.net1 captured requests
acs.aliexpress.com1 captured requests
ae-pic-a1.aliexpress-media.com5 captured requests
ae01.alicdn.com2 captured requests
assets.alicdn.com4 captured requests
assets.aliexpress-media.com14 captured requests
cdn.redgarto.com7 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com6 captured requests
dida-bottom.aliexpress-media.com1 captured requests
exemplarfederallithe.com17 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com4 captured requests
kettledroopingcontinuation.com27 captured requests
nn125.com2 captured requests
portalfluently.com2 captured requests
protrafficinspector.com1 captured requests
s.click.aliexpress.com2 captured requests
softmeadowtrail.com4 captured requests
spendsdetachment.com1 captured requests
umdc-global.aliexpress.com1 captured requests
upmcpatientportal.com16 captured requests
www.aliexpress.com1 captured requests
www.googletagmanager.com1 captured requests

Connections

nn125.com → s.click.aliexpress.comRedirects to1 captured connections
s.click.aliexpress.com → www.aliexpress.comRedirects to1 captured connections
upmcpatientportal.com → cdn.redgarto.comCalls3 captured connections
upmcpatientportal.com → cdn.redgarto.comLoads from4 captured connections
upmcpatientportal.com → cdn.show-creative1.comCalls1 captured connections
upmcpatientportal.com → cdn.storageimagedisplay.comLoads from6 captured connections
upmcpatientportal.com → exemplarfederallithe.comCalls5 captured connections
upmcpatientportal.com → exemplarfederallithe.comLoads from12 captured connections
upmcpatientportal.com → flushpersist.comLoads from2 captured connections
upmcpatientportal.com → fonts.googleapis.comLoads from2 captured connections
upmcpatientportal.com → fonts.gstatic.comLoads from4 captured connections
upmcpatientportal.com → kettledroopingcontinuation.comCalls10 captured connections
upmcpatientportal.com → kettledroopingcontinuation.comLoads from17 captured connections
upmcpatientportal.com → portalfluently.comLoads from2 captured connections
upmcpatientportal.com → protrafficinspector.comCalls1 captured connections
upmcpatientportal.com → softmeadowtrail.comLoads from4 captured connections
upmcpatientportal.com → spendsdetachment.comLoads from1 captured connections
upmcpatientportal.com → www.googletagmanager.comLoads from1 captured connections
www.aliexpress.com → 58188.ase.aidcgroup.netCalls1 captured connections
www.aliexpress.com → acs.aliexpress.comLoads from1 captured connections
www.aliexpress.com → ae-pic-a1.aliexpress-media.comLoads from5 captured connections
www.aliexpress.com → ae01.alicdn.comLoads from2 captured connections
www.aliexpress.com → assets.alicdn.comLoads from4 captured connections
www.aliexpress.com → assets.aliexpress-media.comLoads from14 captured connections
www.aliexpress.com → dida-bottom.aliexpress-media.comCalls1 captured connections
www.aliexpress.com → s.click.aliexpress.comLoads from1 captured connections
www.aliexpress.com → umdc-global.aliexpress.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:15:47.335 GET 200 document 227.2 KB 240 ms 1 alerts

17:15:47.768 GET 200 stylesheet 27.4 KB 152 ms 1 alerts

17:15:47.771 GET 200 stylesheet 24.7 KB 154 ms 1 alerts

17:15:47.773 GET 200 stylesheet 33.6 KB 148 ms 1 alerts

17:15:47.775 GET 200 stylesheet 19.5 KB 186 ms 1 alerts

17:15:47.777 GET 200 stylesheet 2.9 KB 154 ms 1 alerts

17:15:47.783 GET 200 stylesheet 11.1 KB 184 ms 1 alerts

17:15:48.032 GET 200 stylesheet 39 B 127 ms 1 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://upmcpatientportal.com/wp-content/themes/kadence/assets/css/rankmath.min.css?ver=1.5.1

IP / ASN

172.67.167.135

AS13335 · CLOUDFLARENET

Requested by: https://upmcpatientportal.com/

Resource information

File type: ASCII text, with no line terminators
MIME type: text/css
First seen (UTC): 19 Sep 2023 · 06:33:09.000 UTC
Last seen (UTC): 22 Oct 2026 · 10:10:58.751 UTC
Times seen: 4224

Size: 39 B (39 bytes)
MD5: 8bb1a200ced66c704844fddb0edb2ff6
SHA1: 7f38fd688ca2a24733b114f809669836c2f4bca0
SHA256: a819da9ca9a6585f5ce4c02b72014f15326de7bdef6ccff398307ef61c4e451c

Certificate information

Issuer: Google Trust Services · WE1
Subject: upmcpatientportal.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: CF:C1:37:89:EF:AB:33:BD:A2:9B:9F:2C:95:9E:48:D9:5B:49:04:52
Valid from: Fri, 12 Jun 2026 09:53:47 GMT
Valid until: Thu, 10 Sep 2026 10:52:18 GMT

Technology fingerprints

Cloudflare (CDN)
Litespeed Cache (Caching, WordPress plugins)
LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /wp-content/themes/kadence/assets/css/rankmath.min.css?ver=1.5.1 HTTP/1.1
Host: upmcpatientportal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://upmcpatientportal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Thu, 23 Jul 2026 17:15:48 GMT
content-type: text/css
server-timing: cfExtPri
cache-control: public, max-age=604800
expires: Thu, 30 Jul 2026 17:15:48 GMT
last-modified: Mon, 06 Jul 2026 12:56:36 GMT
accept-ranges: bytes
server: cloudflare
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=PmJTRAp2BYT3%2BlpmGgnM5J5NLT0iaNwMkZx5nR78wGS2BtjSUtzlri3rMubH6M%2BAaYgPUScwxTArutQQT4ervDEIIiBdZnEMObbNUcVYhLZ4Zmo5%2F%2BjpOtMsm30Sehr3MubhXmUhXbo%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=2,i=?0
cf-ray: a1fc54493bea0b65-OSL
content-length: 39

17:15:48.034 GET 200 script 477.8 KB 138 ms —

17:15:48.036 GET 200 stylesheet 1.7 KB 81 ms —

17:15:48.038 GET 200 imageset 8.5 KB 162 ms 1 alerts

17:15:48.040 GET 200 script 21.9 KB 120 ms 1 alerts

17:15:48.041 GET 200 script 12.5 KB 142 ms 1 alerts

17:15:48.059 GET 200 imageset 73.9 KB 206 ms 1 alerts

17:15:48.177 GET 200 script 50.3 KB 525 ms 2 alerts

17:15:48.188 GET 200 font 31.4 KB 69 ms —

17:15:48.190 GET 200 font 31.4 KB 71 ms —

17:15:48.725 GET 200 script 5.0 KB 380 ms 3 alerts

17:15:48.737 GET 200 xhr 40 B 94 ms —

17:15:48.740 GET 200 script 30.4 KB 471 ms 3 alerts

17:15:48.743 GET 200 script 47.3 KB 104 ms 2 alerts

17:15:48.746 GET 200 script 50.3 KB 490 ms 2 alerts

17:15:48.850 GET 307 xhr 0 B 385 ms 3 alerts

17:15:49.242 GET 200 xhr 4.0 KB 109 ms 3 alerts

17:15:49.256 GET 200 script 5.0 KB 97 ms 3 alerts

17:15:49.263 GET 307 xhr 0 B 97 ms 3 alerts

17:15:49.266 GET 200 script 71.6 KB 280 ms 3 alerts

17:15:49.268 GET 200 script 93.1 KB 371 ms 3 alerts

17:15:49.270 GET 200 script 30.4 KB 497 ms 3 alerts

17:15:49.279 GET 200 script 50.3 KB 121 ms 2 alerts

17:15:49.376 GET 200 xhr 4.0 KB 187 ms 3 alerts

17:15:49.408 GET 200 img 55.0 KB 137 ms —

17:15:49.410 GET 200 img 0 B 0 ms 3 alerts

17:15:49.419 GET 200 script 5.0 KB 394 ms 3 alerts

17:15:49.424 GET 307 xhr 0 B 229 ms 3 alerts

17:15:49.427 GET 200 script 30.4 KB 329 ms 3 alerts

17:15:49.484 GET 200 script 5.0 KB 838 ms 1 alerts

17:15:49.492 GET 200 xhr 3.6 KB 434 ms 1 alerts

17:15:49.494 GET 200 script 30.4 KB 838 ms 1 alerts

17:15:49.503 GET 200 xhr 3.6 KB 836 ms 1 alerts

17:15:49.506 GET 200 xhr 0 B 266 ms 3 alerts

17:15:49.507 GET 200 xhr 3.6 KB 822 ms 1 alerts

17:15:49.592 GET 200 script 83.4 KB 139 ms 1 alerts

17:15:49.596 GET 200 img 0 B 410 ms 1 alerts

17:15:49.666 GET 200 xhr 4.1 KB 107 ms 3 alerts

17:15:49.683 GET 200 script 83.4 KB 135 ms 1 alerts

17:15:49.736 GET 200 img 50.5 KB 33 ms —

17:15:49.738 GET 200 img 0 B 0 ms 3 alerts

17:15:49.784 GET 200 script 22.2 KB 147 ms 1 alerts

17:15:49.916 GET 200 img 91.3 KB 46 ms —

http://upmcpatientportal.com

Domain graph

Hostnames

Connections

Network requests

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://upmcpatientportal.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://upmcpatientportal.com

Domain graph

Network requests