WEBSITE ANALYSIS REPORT

http://upmcpatientportal.com/

20 Jun 2026 · 06:00:35.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:00:07.973 GET 200 document 227.2 KB 191 ms 1 alerts

06:00:08.417 GET 200 stylesheet 27.4 KB 117 ms 1 alerts

06:00:08.418 GET 200 stylesheet 24.7 KB 121 ms 1 alerts

06:00:08.420 GET 200 stylesheet 33.6 KB 121 ms 1 alerts

06:00:08.422 GET 200 stylesheet 19.5 KB 115 ms 1 alerts

06:00:08.424 GET 200 stylesheet 2.9 KB 116 ms 1 alerts

06:00:08.426 GET 200 stylesheet 11.1 KB 115 ms 1 alerts

06:00:08.428 GET 200 stylesheet 39 B 117 ms 1 alerts

06:00:08.608 GET 200 script 467.4 KB 148 ms —

06:00:08.611 GET 200 stylesheet 1.7 KB 81 ms —

06:00:08.613 GET 200 imageset 8.5 KB 116 ms 1 alerts

06:00:08.615 GET 200 script 21.9 KB 113 ms 1 alerts

06:00:08.616 GET 200 script 12.5 KB 115 ms 1 alerts

06:00:08.636 GET 200 imageset 73.9 KB 163 ms 1 alerts

06:00:08.751 GET 200 script 50.0 KB 616 ms 2 alerts

06:00:08.754 GET 200 font 31.4 KB 70 ms —

06:00:08.756 GET 200 font 31.4 KB 71 ms —

06:00:09.384 GET 200 script 5.0 KB 481 ms 2 alerts

Transaction #22

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://upmcpatientportal.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (5126), with no line terminators
MIME type: application/javascript
First seen (UTC): 04 May 2026 · 13:56:21.086 UTC
Last seen (UTC): 10 Aug 2026 · 10:29:39.496 UTC
Times seen: 7126

Size: 5.0 KB (5126 bytes)
MD5: 9454b75035bf1e7fbd8bc933d239763a
SHA1: 05ac0f19656d2fd1882cb0ec3bc347cf2dbec25e
SHA256: 261c1fc4c2d7eadeabb8edc511b4d3681cad5a27060128b4c3a6690484ccaffd

Certificate information

Issuer: Let's Encrypt · R13
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: B2:89:22:5D:2D:93:D6:5F:5A:1E:20:6A:F9:7C:82:61:CD:1B:4B:5A
Valid from: Tue, 28 Apr 2026 00:44:47 GMT
Valid until: Mon, 27 Jul 2026 00:44:46 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://upmcpatientportal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 20 Jun 2026 06:00:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,X-Device-User-Agent
access-control-allow-origin: *
content-encoding: zstd
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
vary: Accept-Encoding
x-envoy-upstream-service-time: 1
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fe0f48fab533a61add3aa18562e603a4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:00:09.393 GET 200 xhr 40 B 112 ms —

06:00:09.396 GET 200 script 101.3 KB 572 ms 2 alerts

06:00:09.399 GET 200 script 91.3 KB 582 ms 2 alerts

06:00:09.401 GET 200 script 47.0 KB 100 ms 2 alerts

06:00:09.403 GET 200 script 0 B 0 ms 2 alerts

06:00:09.525 GET 307 xhr 0 B 0 ms 2 alerts

06:00:09.909 GET 200 xhr 0 B 0 ms 2 alerts

06:00:10.006 GET No response xhr 0 B 0 ms 1 alerts

06:00:10.009 GET No response script 0 B 0 ms 1 alerts

06:00:10.011 GET No response script 0 B 0 ms 1 alerts

06:00:10.017 GET No response script 0 B 0 ms 2 alerts

06:00:10.120 GET 200 document 62.1 KB 40 ms —

06:00:10.135 GET No response subdocument 0 B 0 ms 1 alerts

06:00:10.138 GET No response img 0 B 0 ms 2 alerts

06:00:10.320 GET 204 img 0 B 8 ms —

http://upmcpatientportal.com/

Domain graph

Hostnames

Connections