English

dtPC

_ga_PBYKFGD19S

_ga_XNQEBXVC3J

_ga_HC8Z9JTBL7

__privaci_cookie_no_action

_ga_0PWZ8C6N1M

kndctr_E264EA7B5444D3850A4C98A1_AdobeOrg_identity

s_cc

s_vnc365

dtCookie

gvn_pn

s_nr365

evar16

evar16_s

__privaci_cookie_consent_generated

__privaci_cookie_consent_uuid

AMCV_E264EA7B5444D3850A4C98A1%40AdobeOrg

_ga_2BH6Y09M3E

kndctr_E264EA7B5444D3850A4C98A1_AdobeOrg_cluster

s_gpv

AMCVS_E264EA7B5444D3850A4C98A1%40AdobeOrg

rxvt

dtSa

s_ivc

rxVisitor

Domain 'www.mhsindiana.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. Count 10 characters in 'mhsindiana' holding 4 vowels versus 6 consonants. Segmentation suggests 3 words: mh, s, indiana. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

searchPath

html/8e/a9/8ea904ec-ac06-485a-9f67-a0042e59fc00.html.gz

img-src * data:; default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'none';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'

script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/1a74b362328347702024274e29d77eb5

attachment; filename="MHS_30_Year_Anniversary.jpg"; filename*=UTF-8''MHS_30_Year_Anniversary.jpg

attachment; filename="flu-graphic.jpg"; filename*=UTF-8''flu-graphic.jpg

attachment; filename="Pregnant-Moms_550x175.png"; filename*=UTF-8''Pregnant-Moms_550x175.png

attachment; filename="Children-and-Families_550x175.png"; filename*=UTF-8''Children-and-Families_550x175.png

attachment; filename="Chronic-Condition_550x175.png"; filename*=UTF-8''Chronic-Condition_550x175.png

attachment; filename="Seniors_550x175.png"; filename*=UTF-8''Seniors_550x175.png

attachment; filename="get_adobe_reader.png"; filename*=UTF-8''get_adobe_reader.png

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'

default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline';

script-src 'report-sample' 'nonce-wzWIgT3PTUgXn3jh_1a87w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

a-pucjb0x55o0t

reCAPTCHA

d7d34f426bd88fb4ea1a271d2138a5969cd0f2fd35d9401c4a2d955ed00e5f5a

fa679eb03fb7dd41aff3e59dd6479115cf377597fa596ab4e133d93d3c3dbb86

7f1a60d2aa056b4155dc45728b51ea45db1ec706b9356e65a2e294580b2ea7a1

3445f4f65c250528a2824debc6f1a929268b755b05006f411574109c1e31888a

84ba5e814983edb3375f408162739fa46e8ce1ef788bfc65ee3eedd8f17b3442

9620e990405fbff25817605f299d1aac0314d27696b7031231a6ca46a9463a46

6245a7d2fc2f984211c3c05d5555f818c630580c982dfd52b3748ef349cef1c2

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

50fdba34e030a3152badc3045c9a1a51c5299d89053f94aa29a87a5f411b51ca

e1f0d3410c150971dfe0999a2ca908203a08c61b035503bd1d6c8859157c18e4

be30533fefe3ec801b7a8894e7580e7948add49649a9f1f741cb29f0d6f8951f

b51079d92f968490a2f411e28dfcceb58a5bf01224e2f0a09bc2c44657be933f

bb14bf3aa194f182b07be2851fd85d0dbd51ec8248e1ae6f98143c30e136af38

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

format-detection

Getting a yearly flu shot helps protect yourself and those around you. Plus it's available at no cost to you with the Healthy Indiana Plan. Learn more at MHS Indiana.

description

viewport

author

title

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

MHSINDIANA.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


			// New Adobe Analytics implementation
			let pageLanguage = "en_us";
			let covertedPageLanguage;
			switch (pageLanguage) {
			case 'en_us':
				covertedPageLanguage = 'english';
				break;
			case 'es':
				covertedPageLanguage = 'spanish';
				break;
			case 'es_us':
				covertedPageLanguage = 'spanish';
				break;
			default:
				covertedPageLanguage = 'unknown';
			}

			let siteDomain = window.location.hostname;
			let siteDomainParts = siteDomain.split('.');
			let siteName = siteDomainParts.length === 3 ? siteDomainParts[1] : siteDomainParts[0];
			let brandKey = "";
			let brandSiteType = "";
			switch (siteName) {
				case 'wellcare':
					brandKey = 'wellcare';
					brandSiteType = 'public:wellcare';
				break;
				case 'fideliscare':
					brandKey = 'fidelis';
					brandSiteType = 'public:fidelis';
				break;
				default:
					brandKey = 'public';
					brandSiteType = 'public';
			}

			var stateParse = "Indiana:IN";
			var productParse = "medicaid:medicaid";
			var stateSplit = stateParse.split(':');
			var productSplit = productParse.split(':');

			window.centeneAnalyticsQueue = window.centeneAnalyticsQueue || [];
			centeneAnalyticsQueue.push({
				event: {
					type: "page view",
					time: Number(new Date()),
					url: window.location.href
				},
				environment: {
					language: covertedPageLanguage,
					siteType: "public",
					product: productSplit[0],
					planname: "n/a"
				},
				user: {
					state: stateSplit[1]
				}
			});
		


	var googleanalytics = true;
	var adobeanalytics = false;
	var cncleavingalert = false;



(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-M9H89SC');



if (!Object.prototype.hasOwnProperty.call(window, 'CenteneAnalytics')) {
Object.defineProperty(window, "CenteneAnalytics", {
  value: {
    trackdata: function(eventpayload) {
      var eventType = (eventpayload && eventpayload.event && eventpayload.event.type) ? eventpayload.event.type : "";
      switch (eventType) {
        case "page view":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          if(eventpayload && eventpayload.data && eventpayload.data.allocation === "search")
          {
            CenteneAnalytics.isinit = true;
            return;
          }
          _satellite.track("Adobe Global Init");
          CenteneAnalytics.isinit = true;
          break;
        case "custom":
           CenteneAnalytics.DL = CenteneAnalytics.DL || {};
           CenteneAnalytics.DL.custom = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("Event: Custom Matrix");
         break;
        case "link click":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("link_click");
          break;
        case "site search":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("site_search");
          break;
        case "file download":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("file_download");
          break;
           case "AEP Link Click":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("AEP Link Click");
          break;
        case "error":
          break;
      }
    },
    DL: {}
  },
  writable: false
});

}

CenteneAnalytics.mapvalidator = function(eventpayload) {
  var eventType = (eventpayload && eventpayload.event && eventpayload.event.type)? eventpayload.event.type : "";
  var datalayer = (typeof eventpayload == "object")?eventpayload: {};
  switch(eventType){
    case "page view":
      // :::: flag
    case "error":
     // :::: flag
    break;
  }
  return datalayer;
}

//Custom Global Plugins::::::::::::::::::::::::::::: <START>
CenteneAnalytics.getCleanVal = function(dataObjProp, isObjExpected, isLower) {
    /* returns a string value irrespective of the input */
    let value = "";
    const isL = (isLower === false) ? 0 : 1;

    try {
        value = eval(dataObjProp);
    } catch (e) {
        // value could not be found, default to ""
    }

    // Handle boolean and object cases if isObjExpected is true
    if ((typeof value === "object" || typeof value === "boolean") && isObjExpected && (value || value === false)) {
        return String(value);
    }

    // If the value is null, undefined, or an object, return an empty string
    if (value == null || typeof value === "object") {
        return String("");
    }

    // If the value is a number (including integers), convert it to a string
    if (typeof value === "number") {
        return String(value);
    }

    // If the value is a string, return it, converting to lower case if needed
    return String(isL && typeof value === "string" ? value.toLowerCase() : value);
}
//Custom Global Plugins::::::::::::::::::::::::::::: <END>

window.centeneAnalyticsQueue = window.centeneAnalyticsQueue || [];
// process any existing events
for (var i = 0; i < centeneAnalyticsQueue.length; i++) {
  if (!centeneAnalyticsQueue[i].isProcessed) {
    CenteneAnalytics.trackdata(centeneAnalyticsQueue[i]);
    centeneAnalyticsQueue[i].isProcessed = true;
  }
}

// overwirite the queue push to also do a trackdata
window.centeneAnalyticsQueue.push = function(e) {
  if (typeof CenteneAnalytics !== "undefined" && typeof CenteneAnalytics.trackdata !== "undefined") {
    CenteneAnalytics.trackdata(e);
    e.isProcessed = true;
    return Array.prototype.push.apply(this, arguments);
  }
}


//window.adobeanalytics = true;

/*window.trackCustomLink = function(aepCusLinkTitle) {
 
  //if(!window.s){return;}
    //s.clearVars();
    //s.linkTrackVars='eVar29,events';  //v29 is link name for standard link click tracking
    //s.linkTrackEvents='event32';  //standard link click event
    //s.eVar29=cusLinkTitle;
   // s.events='event32';
    _satellite.setVar("Link Title", aepCusLinkTitle);
    console.log('AEPtrackCustomLinkUtility rule: ' + aepCusLinkTitle);
    _satellite.track("AEP Link Click");
    console.log('AEP Link Click DC rule initiated');
   // s.tl(this,'o',cusLinkTitle);
}  */


/*FAP link clicks (direct link - temporary until FAP tracking is implemented)*/
/* window.trackFAP = function(link) {
    var aepCusLinkTitle ='fap click thru';
  _satellite.setVar("Link Title", aepCusLinkTitle);
    trackCustomLink(_satellite.getVar('Link Title'));
} */ 


/*Link tracking with data attributes*/







_satellite["_runScript1"](function(event, target, Promise) {
 return alloy("getIdentity")
   .then(function(result) {
     _satellite.setVar("ECID", result.identity.ECID);
   });

});

X-UA-Compatible

Script

JQuery

Amazon Web Services

HSTS

Amazon CloudFront

Flu Shots | Healthy Indiana Plan | MHS Indiana

Google

Crazy Egg

Google authentication and security services

First-Party Tracking

Adobe

✅ Low Risk - https://www.mhsindiana.com/members/hip/health-services/preventive-care/flu-shots.html

Requests	IP Address	Location	AS Autonomous System
154	18.245.86.18	United States	AS16509AMAZON-02
65	3.167.227.89	United States	AS16509AMAZON-02
13	216.239.32.36	United States	AS15169GOOGLE
12	13.219.189.137	Ashburn, Virginia, United States	AS14618AMAZON-AES
8	142.250.186.136	United States	AS15169GOOGLE
7	18.245.86.34	United States	AS16509AMAZON-02
4	65.9.175.129	United States	AS16509AMAZON-02
4	142.250.185.163	United States	AS15169GOOGLE
4	142.250.185.195	United States	AS15169GOOGLE
4	74.125.206.157	United States	AS15169GOOGLE
154	156	-	-

Security Scan Report: www.mhsindiana.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History