healthcare medical

government public service

adult content

English

s_cc

s_ips

s_ppv

AMCVS_8E391C8B533058250A490D4D%40AdobeOrg

s_tp

mbox

at_check

aws-waf-token

XSRF-TOKEN

xGFajjParSn_dc

x_rally_locale

CHOPSHOP_SESSION

xGFajjParSn

_dd_s

X-Rally-Canary

AMCV_8E391C8B533058250A490D4D%40AdobeOrg

language

The domain 'connect.werally.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'connect'. The second-level label 'werally' is 7 characters long holding 2 vowels versus five consonants. Segmentation suggests two words: we, rally. Expect 3.5 characters per word on average. 'we' most often appears in Dutch. Secondary signals appear in Chinese (Pinyin) and English.

html/64/8d/648d3fc6-f3d0-4258-93b5-b8a94e9e81b6.html.gz

base-uri 'self'; default-src data: 'self'; font-src data: 'self' collect.iperceptions.com fonts.gstatic.com *.rally-dev.com *.werally.com *.werally.in myoptum-stage.akamaized.net *.optum.com *.liveandworkwell.akamaized.net *.prod-laww.akamaized.net *.sr-smsc-stg-liveandworkwell.akamaized.net *.sr-smsc-stg.liveandworkwell.com *.lpsnmedia.net cloudfront.stage.federateddataservices.com cloudfront.federateddataservices.com ; script-src data: 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.werally.com https://*.werally.in art.azureedge.net sd.iperceptions.com universal.iperceptions.com assets.adobedtm.com connect.facebook.net content.zeronaught.com ips-invite.iperceptions.com unitedhealthgroup.tt.omtrdc.net *.qualtrics.com https://*.qualtrics.com *.liveandworkwell.com *.lpsnmedia.net *.liveperson.net *.optum.com member.int.uhc.com member.uat.uhc.com member.uhc.com cloudfront.stage.federateddataservices.com cloudfront.federateddataservices.com cm.everesttech.net www.onelink-edge.com xapis.onelink-edge.com ; style-src 'self' 'unsafe-inline' *.liveandworkwell.com *.lpsnmedia.net cloudfront.stage.federateddataservices.com cloudfront.federateddataservices.com ; img-src data: blob: 'self' smetrics.optum.com s3.amazonaws.com dpm.demdex.net www.google.com cm.eversttech.net cm.everesttech.net ips-img.iperceptions.com www.facebook.com rally-non-prod.s3.amazonaws.com rally-prod.s3.amazonaws.com https://*.qualtrics.com carevergesurveyicons.s3.amazonaws.com rally-connect-fpc-prod.s3.amazonaws.com *.liveandworkwell.com *.lpsnmedia.net *.liveperson.net *.myoptum.com nextportal-dev.s3.amazonaws.com nextportal-prod.s3.amazonaws.com *.werally.in *.uhc.com *.myuhc.com cloudfront.stage.federateddataservices.com cloudfront.federateddataservices.com *.uhg.com ; media-src data: 'self' *.lpsnmedia.net *.liveperson.net cloudfront.stage.federateddataservices.com cloudfront.federateddataservices.com ; child-src data: blob: myoptum.optum.com www.myoptum.com rallyhealth.com universal.iperceptions.com unitedhealthgroup.demdex.net collect.iperceptions.com *.liveperson.net *.lpsnmedia.net ; connect-src data: 'self' dpm.demdex.net *.iperceptions.com *.zeronaught.com api.mapbox.com *.ce.uhg.com events.mapbox.com smetrics.optum.com *.qualtrics.com *.sendbird.com wss://*.sendbird.com unitedhealthgroup.tt.omtrdc.net https://*.qualtrics.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://rum.browser-intake-datadoghq.com https://logs.browser-intake-datadoghq.com wss://*.browser-intake-datadoghq.com rum.browser-intake-datadoghq.com session-replay.browser-intake-datadoghq.com logs.browser-intake-datadoghq.com *.rally-dev.com *.werally.com *.werally.in *.uhc.com *.datadoghq.com *.optum.com *.liveandworkwell.com *.sr-smsc-stg-liveandworkwell.akamaized.net *.lpsnmedia.net *.liveperson.net *.msg.liveperson.net wss://*.msg.liveperson.net www.onelink-edge.com xapis.onelink-edge.com *.uhg.com ; frame-src https://*.werally.in https://*.geha.com https://*.mygeha.com https://*.werally.com https://*.rally-dev.com https://*.optum.com https://*.uhc.com https://*.myuhc.com https://*.rallyhealth.com https://*.iperceptions.com https://*.lpsnmedia.net https://*.liveperson.net https://unitedhealthgroup.demdex.net https://uhgenterprise.qualtrics.com https://uhg1.co1.qualtrics.com ; object-src data:; frame-ancestors 'self'; report-uri /rest/csp-reporter; report-to /rest/csp-reporter;

multipart/form-data; boundary=----WebKitFormBoundaryVCS7h7Y9zoA8INll

frame-ancestors 'self' *.qualtrics.com *.my.salesforce.com *.visualforce.com *.visual.force.com *.lightning.force.com; report-uri https://sjc1.qualtrics.com/csp-report

multipart/form-data; boundary=----WebKitFormBoundaryZCJHau9s7GLmpXaE

multipart/form-data; boundary=----WebKitFormBoundaryAomOcAmBe4WIxtFT

Language Assistance / Non-discrimination notice

Asistencia de Idiomas / Aviso de no Discriminación

description

width=device-width,initial-scale=1,maximum-scale=2

viewport

format-detection

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

WERALLY.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon Data Services Northern Virginia

Amazon EC2 Network Operations

AMAZON-IAD

var qualtricsScript = function(){var g=function(e,h,f,g){
    this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1

window.fpcTheme = 'united'
        window.baseUrl = '/'
        // Set the baseUrl to remove the trailing slash since that is how most of the code needs it
        // This assumes that the baseUrl is 

// Do not delete this or format this block in any way. When a build is deployed to an environment,
        // environment-specific configs will be injected here and used by the app.
        /*
       

if (window.navigator.appVersion.indexOf('MSIE') !== -1) {
            window.location = '/browserNotSupported/en.html';
        }

_satellite["_runScript1"](function(event, target, Promise) {
// pii masking code v2.0 1/2 start
window.analyticspiimasker = function (input, keywordsToBeRemoved, keywordsToBeMasked, queryParamVariable

_satellite["_runScript2"](function(event, target, Promise) {
try{
var lob=_satellite.getVar('ACDL: Member LOB').toLowerCase();
if(lob=='c&s')
  {
document.cookie = "LOB-Target=c&s;domain=.uhc.com;path


(function(){var g=function(e,h,f,g){
this.get=function(a){for(var a=a+"=",c=document.cookie.split(";"),b=0,e=c.length;b<e;b++){for(var d=c[b];" "==d.charAt(0);)d=d.substring(1,d.length);if(0==d.index

_satellite["_runScript3"](function(event, target, Promise) {
try{var checkCount=0,clearCount=5,checkQSI=setInterval((function(){try{if("undefined"!=typeof QSI&&void 0!==QSI.API){if(void 0!==QSI.API.ru

_satellite["_runScript4"](function(event, target, Promise) {
try{var lob=_satellite.getVar("ACDL: lob: Target").toLowerCase(),plan=_satellite.getVar("ACDL: M | planCoverageType").toLowerCase(),govtPro

Requests	IP Address	Location	AS Autonomous System
5	3.233.158.24	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	63.140.62.236	United States	AS16509AMAZON-02
1	34.120.21.7	Kansas City, Missouri, United States	AS396982GOOGLE-CLOUD-PLATFORM
1	104.17.209.240	United States	AS13335CLOUDFLARENET
1	18.239.208.50	United States	AS16509AMAZON-02
1	216.239.36.21	Mountain View, California, United States	AS15169GOOGLE
1	63.140.62.120	United States	AS16509AMAZON-02
1	52.215.132.242	Dublin, Leinster, Ireland	AS16509AMAZON-02
1	3.233.158.25	Ashburn, Virginia, United States	AS14618AMAZON-AES
1	3.160.150.125	United States	AS16509AMAZON-02
71	67	-	-

Security Scan Report: connect.werally.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History