healthcare medical

government public service

technology software

finance banking

cryptocurrency blockchain

English

__RequestVerificationToken_L015UGVubk1lZGljaW5l0

visid_incap_1948950

ASPSESSIONIDCWRCAACC

MyChartLocale

MyChart_Session

incap_ses_271_1948950

MyChartPersistence

The domain name 'secure.mypennmedicine.org' uses the non-profit oriented generic top-level domain (.org) with subdomain 'secure'. Count 14 characters in 'mypennmedicine' split between 5 vowels and 9 consonants. Breaking it apart gives three words: my, penn, medicine. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

jsenabled

Login

Password

submit

__RequestVerificationToken

DeviceId

postLoginUrl

forMobile

html/8f/c7/8fc799b3-f644-4a98-8b3a-bd2b92686418.html.gz

default-src 'self';base-uri 'self';script-src 'self' https://us-api.experian.com 'nonce-E60839D270A94F13A1DB312A1E77AE70';style-src 'self' 'unsafe-inline';frame-src 'self' epichttp: https://premier.trustcommerce.com https://*;img-src 'self' blob: data: https://us-api.experian.com https://*;media-src 'self' blob: https://*;frame-ancestors 'self';connect-src 'self' epichttp: https://us-api.experian.com/decisionanalytics/crosscore/nprvlzc68nle/services/v0/applications/3;worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';

default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src https://* 'self' epichttp: https://premier.trustcommerce.com;script-src 'nonce-6aff970816f24d928e542bbc0d2a7b40' https://secure.mypennmedicine.org 'self' https://us-api.experian.com;img-src https://* 'self' blob: data: https://us-api.experian.com;connect-src 'self' epichttp: https://us-api.experian.com/decisionanalytics/crosscore/nprvlzc68nle/services/v0/applications/3;style-src https://secure.mypennmedicine.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:;

application/x-www-form-urlencoded; charset=UTF-8

default-src 'self';frame-ancestors 'none';

7eff78089552f332aaffeffc5a94117f4ab730ba4f330aefe5eb3afe63e72ea4

131c0d82967fed05e1920e519e0ea6ec91ab97b7c40480f72f8af8680bba1f0a

16f93b365e7b047e26f4e91d4a98fba14f29d99ba6828435e89b0293dfa4b73a

a343e5d893826a55212a40721371a33753a97cfa467893872b1676d982da5f96

57afc05ba98684960d20f561e419a0269e9aa357f4ae40c6bfa20cb3f2b3b740

bd23d257255711673e85bb9ea385155c71aed7fd0c26aebe9955418b22286fbc

1afe9b9c293b2f327c5eabd0153146ec9e2b4a4126dbcf42628e83432a34cd98

bb3ab32a2664c33d44a4f89b0ea62dd3d7a03c0cdaeb2a8804b24000d3736f34

6c0f4a75ddfe9dadedb9359828d81d1ff9c0407d7833698c0a0b760922107409

fef2d9d0ccd64cfacf47c9a893962ee02d7ad5fae6ea975f1a602e892161ff18

c13ab28a5bf1d0c0c72d49129d61cffe457c84c411c36ea7313ca9c47182d164

38d3470421c7659c46d746a28b59393937651ec5154ed14e934a91d8158eaa7f

639db295bfb73db75ba654f5eb3154fd72d54ca2408c441d33b977d1f944dc8b

b6bc38214a1991c48bf387af2005529cc74db339f0bad91eae51eec62fd501d3

3fd690424b77bcb222426d4a05497e635aacf3104195afd51dc4374f21cea557

424c5ed6a336a7e0214923df996b63864ed30b45f12a58b29d9d4312f5a79314

aa377962e5a68e2d221e4cf6e13112cfc5775e5c3fd3fa5d0d12b9e0c39a7e23

bf814afddfaf8504a1a9f837c81aa562aa59aa7076e6b84b0d700540f8dadece

a7b834ce7c3b080c731039a46452e1a943972cbb9cdb2e50af79ac63e772111d

0e1bb9a2d1de660c97767b100723ccf8d52e2543ac1d1794d856e708d3302cd5

0ba30e78d88c9a92ea92bd483a2b0932423ee4f3e3554ef7da58a13816d44ab9

d5fe7bfed7356ed718cbf760ed68179b7d48aa664a72eb4c4a3697177d1a552c

c1179fa455ce41b28f8c3b3b779eeffcb670d5ee719f53b85e7171bbbf4e45de

80a66cd91822f88a6e88db39d3250709033ad7598b06508756364c3ac23d1fcd

4d9b587f18d43bb9e06e3f3244212465d7fe02e412e25d1e5cc9c530ba1234ee

33c39d1364c5170e742492a3dcb1b0e57a67403c0d99703a40b9d8c0a58c6a4d

fee92eeeef0cf3383e0933505ac15852c4702b9babfd89473944115d3cc2b0bf

See what you can do with MyChart by myPennMedicine.

/MyPennMedicine/en-US/images/MyChart_city.png

University of Pennsylvania Health Systems

format-detection

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

html/8f/c7/8fc799b3-f644-4a98-8b3a-bd2b92686418_nodriver.html.gz

MyChart by myPennMedicine - Login Page

Name.com, Inc.

mypennmedicine.org

Abuse

NetEng

Incapsula Inc

Nicole Black

INCAPSULA-NET


					if (self === top) 
					{
						var InitialBodyClass = document.getElementById("initialBodyClass");
						if (InitialBodyClass) 
						{ 
							InitialBodyClass.parentNode.removeChild(InitialBodyClass); 
						}
					} 
					else 
					{ 
						top.location = "/MyPennMedicine/Home/LogOut"; 
					}
				


						if (typeof WP === 'undefined') {
							WP = {};
						}
						WP.myPath = '/MyPennMedicine/';
					

document.getElementById('jsdisabled').style.display = 'none';


(function WP$Debug$init(shouldEnableAdminDebugging, shouldEnableOnAllDomains)
				{
					$$WP = $$WP || {};
					$$WP.Debug = $$WP.Debug || {};
					$$WP.Debug.IsEnabled = shouldEnableAdminDebugging || shouldEnableOnAllDomains;

					// Tag messages so we know where they came from. No one wants to hunt down the source of console spray.
					if (shouldEnableOnAllDomains)
					{
						$$WP.Debug.messagePrefix = '[Debug.js FULL DEBUG] ';
						$$WP.Debug.log("JavaScript debugging messages are enabled on all domains. (Adjust this via the 'EnableProductionClientDebugging' application setting.)");
					}
					else if (shouldEnableAdminDebugging)
					{
						$$WP.Debug.messagePrefix = '[Debug.js ADMIN DEBUG] ';
						$$WP.Debug.log("JavaScript debugging messages are enabled for local and Server Admin Elevation access only. (Adjust this via the 'DisableClientDebugging' application setting.)");
					}
					else
					{
						$$WP.Debug.messagePrefix = '';
					}
				})(false,false);



$$WP = $$WP || {}; $$WP.I18N = $$WP.I18N || {};
$$WP.I18N.Identifier = "en-US";
$$WP.I18N.PrimaryLocaleName = "en-US";
$$WP.I18N.DateFormat = "MM/dd/yyyy";
$$WP.I18N.DateFormatSimple = "M/d/yyyy";
$$WP.I18N.CalendarDateAriaFormat = "dddd MMMM d, yyyy";
$$WP.I18N.FirstDayOfTheWeek = "0";
$$WP.I18N.TimeFormat = "h:mm tt"
$$WP.I18N.TimeSeparator = ":";
$$WP.I18N.Is24HourTime = ("False" === 'True');
$$WP.I18N.AmDesignator = "AM";
$$WP.I18N.PmDesignator = "PM";
$$WP.I18N.DecimalSeparator = ".";
$$WP.I18N.GroupSeparator = ",";
$$WP.I18N.RangeSeparator = " - ";
$$WP.I18N.GroupSize = "3";
$$WP.I18N.NegativePattern = "-n";
$$WP.I18N.Days = $$WP.I18N.Days || [];
$$WP.I18N.Days[0] = { Name: $$WP.I18N.upperCaseFirstLetter("Sunday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Sun") };
$$WP.I18N.Days[1] = { Name: $$WP.I18N.upperCaseFirstLetter("Monday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Mon") };
$$WP.I18N.Days[2] = { Name: $$WP.I18N.upperCaseFirstLetter("Tuesday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Tue") };
$$WP.I18N.Days[3] = { Name: $$WP.I18N.upperCaseFirstLetter("Wednesday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Wed") };
$$WP.I18N.Days[4] = { Name: $$WP.I18N.upperCaseFirstLetter("Thursday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Thu") };
$$WP.I18N.Days[5] = { Name: $$WP.I18N.upperCaseFirstLetter("Friday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Fri") };
$$WP.I18N.Days[6] = { Name: $$WP.I18N.upperCaseFirstLetter("Saturday"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Sat") };
$$WP.I18N.Months = $$WP.I18N.Months || [];
$$WP.I18N.Months[1] = { Name: $$WP.I18N.upperCaseFirstLetter("January"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Jan") };
$$WP.I18N.Months[2] = { Name: $$WP.I18N.upperCaseFirstLetter("February"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Feb") };
$$WP.I18N.Months[3] = { Name: $$WP.I18N.upperCaseFirstLetter("March"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Mar") };
$$WP.I18N.Months[4] = { Name: $$WP.I18N.upperCaseFirstLetter("April"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Apr") };
$$WP.I18N.Months[5] = { Name: $$WP.I18N.upperCaseFirstLetter("May"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("May") };
$$WP.I18N.Months[6] = { Name: $$WP.I18N.upperCaseFirstLetter("June"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Jun") };
$$WP.I18N.Months[7] = { Name: $$WP.I18N.upperCaseFirstLetter("July"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Jul") };
$$WP.I18N.Months[8] = { Name: $$WP.I18N.upperCaseFirstLetter("August"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Aug") };
$$WP.I18N.Months[9] = { Name: $$WP.I18N.upperCaseFirstLetter("September"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Sep") };
$$WP.I18N.Months[10] = { Name: $$WP.I18N.upperCaseFirstLetter("October"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Oct") };
$$WP.I18N.Months[11] = { Name: $$WP.I18N.upperCaseFirstLetter("November"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Nov") };
$$WP.I18N.Months[12] = { Name: $$WP.I18N.upperCaseFirstLetter("December"), Abbreviation: $$WP.I18N.upperCaseFirstLetter("Dec") };
$$WP.Debug = $$WP.Debug || {}
$$WP.Debug.CheckForStringResources = false;



$$WP = $$WP || {};
if (typeof $$WP.Settings === 'undefined'){$$WP.Settings = {};}
$$WP.Settings.OrganizationName = 'University of Pennsylvania Health Systems';
$$WP.Settings.MyChartCentralURL = 'https://central.mychart.org/MyChart/';


$$WP.Strings.addMnemonic("@MYCHART@DATE@",HTMLUnencode("Monday, March 9, 2026"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@TIME@",HTMLUnencode("8:36:09 PM"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@CURRENT_YEAR@",HTMLUnencode("2026"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@BrandECheckIn@",HTMLUnencode("Pre Check-in"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@BrandEOLPlanning@",HTMLUnencode(""), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@BrandVideoVisits@",HTMLUnencode(""), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@EVisit@",HTMLUnencode(""), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@BrandEVisit@",HTMLUnencode(""), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@BrandEDSelfRegistration@",HTMLUnencode(""), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@APPTITLE@","MyChart by myPennMedicine", false, "Global", $$WP.Strings.EncodingTypes.None)
$$WP.Strings.addMnemonic("@MYCHART@ABSOLUTEURL@",HTMLUnencode("/MyPennMedicine/"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@LOCALIZEDURL@",HTMLUnencode("/MyPennMedicine/en-US/"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@HELPDESKPHONE@","<a href='tel:8666147606'>866-614-7606</a>", false, "Global", $$WP.Strings.EncodingTypes.None)
$$WP.Strings.addMnemonic("@MYCHART@SCHEDULINGPHONE@","<a href='tel:8007897366'>800-789-7366</a>", false, "Global", $$WP.Strings.EncodingTypes.None)
$$WP.Strings.addMnemonic("@MYCHART@EMERGENCYPHONE@","911", false, "Global", $$WP.Strings.EncodingTypes.None)
$$WP.Strings.addMnemonic("@MYCHART@BILLINGPHONE@","<a href='tel:8004061177'>800-406-1177</a>", false, "Global", $$WP.Strings.EncodingTypes.None)
$$WP.Strings.addMnemonic("@MYCHART@ORGNAME@",HTMLUnencode("University of Pennsylvania Health Systems"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@MYORGNAME@",HTMLUnencode("University of Pennsylvania Health Systems"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@HELPEMAIL@",HTMLUnencode("MyChartSupport@DoNotUse.DoNotUse"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@PATIENT@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@PROXY@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@WEBUSER@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@PATIENTLEGALNAME@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@PATIENTINFORMALNAME@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@WEBUSERLEGALNAME@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@MRN@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@DOB@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@PCP@",HTMLUnencode("&nbsp;"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@SSNFORMAT@",HTMLUnencode("NNN-NN-NNNN"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@NationalIDLabel@",HTMLUnencode("Social Security number"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@NationalIDShortLabel@",HTMLUnencode("SSN"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@CURRENCYSYMBOL@",HTMLUnencode("$"), false, "Global");
$$WP.Strings.addMnemonic("@MYCHART@CURRENCYCODE@",HTMLUnencode("USD"), false, "Global");


$$WP.Strings.getNamespace("clinical.testresults").removeString("ImagesSectionTitle");
$$WP.Strings.getNamespace("clinical.testresults").addString("ImagesSectionTitle","");



$$WP.I18N.AllLocales = $$WP.I18N.Locale.createModelCollection();
$$WP.I18N.Locale.convertRawLocales({"en-US":{"Direction":1,"Language":"EN","ForceMetricUnits":false,"PrimaryLocaleName":"en-US","NationalIDLabel":"Social Security number","NationalIDShortLabel":"SSN","DateSeparator":"/","TimeSeparator":":","Is24HourTime":false,"FirstDayOfTheWeek":1,"DecimalSeparator":".","GroupSeparator":",","RangeSeparator":" - ","DecimalPlaces":"2","GroupSize":"3","NegativePattern":"-n","CurrencySymbol":"$","CurrencyCode":"USD","CurrencyDecimalPlaces":"2","CurrencyGroupSize":"3","CurrencyPositivePattern":"$n","CurrencyNegativePattern":"-$n","PercentSymbol":"%","ListSeparator":",","ListSpaces":1}}, $$WP.I18N.AllLocales);
var locale = $$WP.I18N.getMyChartLocale();
var tmp = $$WP.I18N.AllLocales.getFromIndex('Identifier', locale);
if (tmp === null) { $$WP.Debug.logError('Unable to load locale "' + locale + '" from $$WP.I18N.AllLocales.'); tmp = new $$WP.I18N.Locale(); }
$$WP.CurrentLocale = tmp.toRawObject();



if (typeof $$WP === 'undefined') {$$WP = {};}
$$WP.Settings = $$WP.Settings || {};
$$WP.Settings.WebsiteUrl = '/MyPennMedicine/';
$$WP.Settings.PublicDomain = 'https://secure.mypennmedicine.org';
$$WP.Settings.WebsiteName = 'HOME';
$$WP.Settings.WebAnalyticsEnabled = 'False';
$$WP.Settings.DrivingDirectionsUrlTemplate = '';
$$WP.Settings.IsDrivingDirectionsConsentEnabled =  'False';



	$$WP.Utilities.UI.OnUIFrameworkLoaded(function ()
	{
	var fullDataTileAutoFocusUsernameField = true;
	var captchaRequired = false;
	new $$WP.Authentication.Login.Controllers.LoginController(fullDataTileAutoFocusUsernameField, captchaRequired);
	});
	

Requests	IP Address	Location	AS Autonomous System
53	45.60.75.182	United States	AS19551Incapsula Inc
53	1	-	-

Security Scan Report: secure.mypennmedicine.org

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History