Domain > app.paytient.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-03-20	52.84.18.49 (ClassC)
2025-02-27	18.67.76.12 (ClassC)
2025-06-16	3.169.202.14 (ClassC)
2025-06-16	3.169.202.19 (ClassC)
2026-01-16	18.161.6.50 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5714Connection: keep-aliveDate: Fri, 16 Jan 2026 21:53:41 GMTreferrer-policy: strict-origin-when-cross-originServer: AmazonS3Accept-Ranges: bytesLast-Modified: Wed, 14 Jan 2026 19:33:51 GMTCache-Control: public,max-age0,must-revalidatestrict-transport-security: max-age31536000; includeSubDomainsx-frame-options: DENYx-xss-protection: 1; modeblockx-content-type-options: nosniffETag: a9d22153efd499b45c4dd9d2886f0ccbX-Cache: Miss from cloudfrontVia: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P1Alt-Svc: h3:443; ma86400X-Amz-Cf-Id: xjTn8Y8J7h-NEjt7Q8IlR-KAS9b_GHnIryd8bG78v-wVdb3JfBL1uQ

!doctype html>html langen>  head>    meta charsetUTF-8 />    link relicon href/favicon.ico />    meta      nameviewport      contentwidthdevice-width, initial-scale1, maximum-scale1    />    title>Paytient Operations Portal/title>    style>      .noscript-message {        font-family: Inter, Arial, sans-serif;        color: #1d1d1f;        text-align: center;        margin-top: 20%;        margin-left: 5%;        margin-right: 5%;        h1 {          font-weight: 600;          font-size: 36px;        }        p {          margin-left: 25%;          margin-right: 25%;          font-size: 20px;          color: #6f6f7a;          line-height: 28px;          @media (max-width: 768px) {            margin-left: 5%;            margin-right: 5%;          }        }      }    /style>  !-- Datadog RUM -->script  srchttps://www.datadoghq-browser-agent.com/us1/v5/datadog-rum.js  typetext/javascript>/script>script typetext/javascript>  if (window?.DD_RUM) {    window?.DD_RUM?.init({      site: datadoghq.com,      service: paytient-chainsaw,      clientToken: pub700f3e5a4e7bbb141ef249d0587f3c0a,      applicationId: cd989929-c119-4c54-90c3-1a922fd2b48a,      env: production,      version: production-ef2501a5-us-west-2,      sessionSampleRate: 100, // percentage of sessions to track      sessionReplaySampleRate: 100, // percentage of sessions with Browser RUM & Session Replay pricing      traceSampleRate: 100, // percentage of requests to trace      allowedTracingUrls: /https:\/\/.*\.paytient\.com/,      trackUserInteractions: true,      trackResources: true,      trackLongTasks: true,      defaultPrivacyLevel: mask,      actionNameAttribute: data-dd-action-name,    });    window.DD_RUM?.setGlobalContextProperty?.(region, us-west-2);  }/script>!-- Datadog Logs -->script  srchttps://www.datadoghq-browser-agent.com/us1/v5/datadog-logs.js  typetext/javascript>/script>script typetext/javascript>  if (window?.DD_LOGS) {    window.DD_LOGS.init({      site: datadoghq.com,      service: paytient-chainsaw,      clientToken: pub700f3e5a4e7bbb141ef249d0587f3c0a,      env: production,      version: production-ef2501a5-us-west-2,      forwardErrorsToLogs: true,      sessionSampleRate: 100, // percentage of sessions to track      beforeSend: function (event) {        if (typeof event.message  string) {          return !            Request aborted, // Aborted by the client. Not actionable            XHR Error, // Not actionable client-side error            XHR error, // Not actionable client-side error            timeout of 30000ms exceeded, // Network timeouts          .some(function (title) {            return event.message.includes(title);          });        }      },    });    window.DD_LOGS?.setGlobalContextProperty?.(region, us-west-2);  }/script>!-- Heap -->script typetext/javascript>  ((window.heapReadyCb  window.heapReadyCb || ),    (window.heap  window.heap || ),    (heap.load  function (e, t) {      ((window.heap.envId  e),        (window.heap.clientConfig  t  t || {}),        (window.heap.clientConfig.shouldFetchServerConfig  !1));      var a  document.createElement(script);      ((a.type  text/javascript),        (a.async  !0),        (a.src           https://cdn.us.heap-api.com/config/ + e + /heap_config.js));      var r  document.getElementsByTagName(script)0;      r.parentNode.insertBefore(a, r);      var n            init,          startTracking,          stopTracking,          track,          resetIdentity,          identify,          identifyHashed,          getSessionId,          getUserId,          getIdentity,          addUserProperties,          addEventProperties,          removeEventProperty,          clearEventProperties,          addAccountProperties,          addAdapter,          addTransformer,          addTransformerFn,          onReady,          addPageviewProperties,          removePageviewProperty,          clearPageviewProperties,          trackPageview,        ,        i  function (e) {          return function () {            var t  Array.prototype.slice.call(arguments, 0);            window.heapReadyCb.push({              name: e,              fn: function () {                heape && heape.apply(heap, t);              },            });          };        };      for (var p  0; p  n.length; p++) heapnp  i(np);    }));  heap.load(809928653);/script>  script typemodule crossorigin src/assets/index-DLDRVM2B.js>/script>  link relmodulepreload crossorigin href/assets/vendor-CBP-wgBy.js>  link relmodulepreload crossorigin href/assets/common-package-BYzIffFF.js>  link relmodulepreload crossorigin href/assets/ui-package-CgESVQzg.js>  link relmodulepreload crossorigin href/assets/dynamic-modules-CO4OQqKc.js>  link relstylesheet crossorigin href/assets/ui-package-B_DH7iSt.css>/head>  body data-dd-action-nameRedacting all PII/PHI by default - add data-dd-action-name attr to child element to override>    noscript>      div classnoscript-message>        h1>JavaScript is required to view this site/h1>        p>          Your browser either does not support JavaScript, or it is being          blocked. Please enable JavaScript and reload the page, or use a          browser that supports JavaScript.        /p>      /div>    /noscript>    div idroot>/div>  /body>/html>

Subdomains

Date	Domain	IP
partner.staging.paytient.com	2025-10-04	52.10.171.146
api.paytient.com	2025-10-08	52.34.42.167
link.paytient.com	2025-10-26	44.242.40.45
portal.paytient.com	2025-10-24	54.68.237.244
links.mail.paytient.com	2025-05-09	54.145.169.116
production.paytient.com	2024-06-27	3.163.24.33
api.production.paytient.com	2025-10-08	52.34.42.167
link.production.paytient.com	2025-11-08	35.161.176.209
portal.production.paytient.com	2025-10-08	52.34.42.167
app.paytient.com	2026-01-16	18.161.6.50
www.paytient.com	2023-11-02	18.161.6.83

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > app.paytient.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains