English

_ga_PBYKFGD19S

_ga_2BH6Y09M3E

dtCookie

dtPC

rxvt

_fbp

_ga_XNQEBXVC3J

kndctr_E264EA7B5444D3850A4C98A1_AdobeOrg_cluster

gvn_pn

s_ivc

AMCVS_E264EA7B5444D3850A4C98A1%40AdobeOrg

s_vnc365

evar16

s_cc

_ga_HC8Z9JTBL7

s_nr365

_ga_DZSQ8PS2FF

__privaci_cookie_consent_uuid

s_gpv

__privaci_cookie_no_action

rxVisitor

kndctr_E264EA7B5444D3850A4C98A1_AdobeOrg_identity

_gcl_au

evar16_s

__privaci_cookie_consent_generated

AMCV_E264EA7B5444D3850A4C98A1%40AdobeOrg

dtSa

The domain name 'www.delawarefirsthealth.com' uses the commercial generic top-level domain (.com) and includes subdomain 'www'. The second-level label 'delawarefirsthealth' is 19 characters long with seven vowels and twelve consonants. Breaking it apart gives 3 words: delaware, first, health. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

searchPath

html/e7/ce/e7ce99ec-85b8-4ed9-94f4-30d0d6a5d94a.html.gz

img-src * data:; default-src * data: 'unsafe-eval' 'unsafe-inline' blob:; object-src 'none';

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

attachment; filename="DFH_PrimaryLogo_Color_RGB (new).jpg"; filename*=UTF-8''DFH_PrimaryLogo_Color_RGB%20%28new%29.jpg

attachment; filename="vab page images (26).png"; filename*=UTF-8''vab%20page%20images%20%2826%29.png

attachment; filename="Pregnant-Moms_550x175.png"; filename*=UTF-8''Pregnant-Moms_550x175.png

attachment; filename="Children-and-Families_550x175.png"; filename*=UTF-8''Children-and-Families_550x175.png

attachment; filename="Chronic-Condition_550x175.png"; filename*=UTF-8''Chronic-Condition_550x175.png

attachment; filename="Seniors_550x175.png"; filename*=UTF-8''Seniors_550x175.png

attachment; filename="get_adobe_reader.png"; filename*=UTF-8''get_adobe_reader.png

attachment; filename="vab page images (32).png"; filename*=UTF-8''vab%20page%20images%20%2832%29.png

attachment; filename="fb icon.png"; filename*=UTF-8''fb%20icon.png

attachment; filename="linkedin icon.png"; filename*=UTF-8''linkedin%20icon.png

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs

default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'

default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline';

script-src 'report-sample' 'nonce-JG-0huW9g8f148aOhwvtHQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0

a-vp4r8rv22e4p

reCAPTCHA

e57f8e3a19d89cc9dc02e8e02bb5a1e77de5d0a77d04fc9c80844a7983a5882c

4c3e204f6a70e0695999f6939d1d7d211e32df892400a8ead9790363bcc83887

9c5286a6e828319357963e632e7a89afacd055f18d45c138a634a9aa9711a9f0

24cd7a5ed166eb203e17d1037e11f32c6033c6d6210b8d27f4907359a8489eb8

2ce2e6e97b258b7c1ff0df8d084f453d71d87b814dea18c315282ca3b6e8cb8d

0a2a868b9ca16eeadeb3886891801f8793e43a2b605add6d0c80a935a8d2751b

44593138721606b6cad1dc1e8f3465bcc9bd5e88b0c9d0443eac4d2993ceaef1

6d70cb622d0cdd9ddc27716eb11387536e78b9610beabf23d779a1d321531aff

c6559df76235516a7eb21028afb29174c68e11e89e25a8bd32c25027beed0b6e

eae65fd58b7cb0bed14676c6dc9936edf0c8ea34c1fe6fbd42cd89fa862f184f

ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e

e1f0d3410c150971dfe0999a2ca908203a08c61b035503bd1d6c8859157c18e4

be30533fefe3ec801b7a8894e7580e7948add49649a9f1f741cb29f0d6f8951f

A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnhy03KDqX7kBz/q/iidW7srW31oQbBt4VhgoAAACUeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

format-detection

viewport

Delaware First - DE - delawarefirsthealth.com

author

title

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

CSC Corporate Domains, Inc.

DELAWAREFIRSTHEALTH.COM

Amazon EC2 Abuse

IP Management

Amazon AWS Network Operations

Amazon.com, Inc.

AWS RPKI Management POC

IP Routing

Amazon EC2 Network Operations

AMAZON-CF


			// New Adobe Analytics implementation
			let pageLanguage = "en_us";
			let covertedPageLanguage;
			switch (pageLanguage) {
			case 'en_us':
				covertedPageLanguage = 'english';
				break;
			case 'es':
				covertedPageLanguage = 'spanish';
				break;
			case 'es_us':
				covertedPageLanguage = 'spanish';
				break;
			default:
				covertedPageLanguage = 'unknown';
			}

			let siteDomain = window.location.hostname;
			let siteDomainParts = siteDomain.split('.');
			let siteName = siteDomainParts.length === 3 ? siteDomainParts[1] : siteDomainParts[0];
			let brandKey = "";
			let brandSiteType = "";
			switch (siteName) {
				case 'wellcare':
					brandKey = 'wellcare';
					brandSiteType = 'public:wellcare';
				break;
				case 'fideliscare':
					brandKey = 'fidelis';
					brandSiteType = 'public:fidelis';
				break;
				default:
					brandKey = 'public';
					brandSiteType = 'public';
			}

			var stateParse = "Delaware:DE";
			var productParse = "medicaid:medicaid";
			var stateSplit = stateParse.split(':');
			var productSplit = productParse.split(':');

			window.centeneAnalyticsQueue = window.centeneAnalyticsQueue || [];
			centeneAnalyticsQueue.push({
				event: {
					type: "page view",
					time: Number(new Date()),
					url: window.location.href
				},
				environment: {
					language: covertedPageLanguage,
					siteType: "public",
					product: productSplit[0],
					planname: "n/a"
				},
				user: {
					state: stateSplit[1]
				}
			});
		


	var googleanalytics = true;
	var adobeanalytics = false;
	var cncleavingalert = false;



(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-TL9BPHT');



if (!Object.prototype.hasOwnProperty.call(window, 'CenteneAnalytics')) {
Object.defineProperty(window, "CenteneAnalytics", {
  value: {
    trackdata: function(eventpayload) {
      var eventType = (eventpayload && eventpayload.event && eventpayload.event.type) ? eventpayload.event.type : "";
      switch (eventType) {
        case "page view":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          if(eventpayload && eventpayload.data && eventpayload.data.allocation === "search")
          {
            CenteneAnalytics.isinit = true;
            return;
          }
          _satellite.track("Adobe Global Init");
          CenteneAnalytics.isinit = true;
          break;
        case "custom":
           CenteneAnalytics.DL = CenteneAnalytics.DL || {};
           CenteneAnalytics.DL.custom = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("Event: Custom Matrix");
         break;
        case "link click":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("link_click");
          break;
        case "site search":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("site_search");
          break;
        case "file download":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("file_download");
          break;
           case "AEP Link Click":
          CenteneAnalytics.DL = CenteneAnalytics.mapvalidator(eventpayload);
          _satellite.track("AEP Link Click");
          break;
        case "error":
          break;
      }
    },
    DL: {}
  },
  writable: false
});

}

CenteneAnalytics.mapvalidator = function(eventpayload) {
  var eventType = (eventpayload && eventpayload.event && eventpayload.event.type)? eventpayload.event.type : "";
  var datalayer = (typeof eventpayload == "object")?eventpayload: {};
  switch(eventType){
    case "page view":
      // :::: flag
    case "error":
     // :::: flag
    break;
  }
  return datalayer;
}

//Custom Global Plugins::::::::::::::::::::::::::::: <START>
CenteneAnalytics.getCleanVal = function(dataObjProp, isObjExpected, isLower) {
    /* returns a string value irrespective of the input */
    let value = "";
    const isL = (isLower === false) ? 0 : 1;

    try {
        value = eval(dataObjProp);
    } catch (e) {
        // value could not be found, default to ""
    }

    // Handle boolean and object cases if isObjExpected is true
    if ((typeof value === "object" || typeof value === "boolean") && isObjExpected && (value || value === false)) {
        return String(value);
    }

    // If the value is null, undefined, or an object, return an empty string
    if (value == null || typeof value === "object") {
        return String("");
    }

    // If the value is a number (including integers), convert it to a string
    if (typeof value === "number") {
        return String(value);
    }

    // If the value is a string, return it, converting to lower case if needed
    return String(isL && typeof value === "string" ? value.toLowerCase() : value);
}
//Custom Global Plugins::::::::::::::::::::::::::::: <END>

window.centeneAnalyticsQueue = window.centeneAnalyticsQueue || [];
// process any existing events
for (var i = 0; i < centeneAnalyticsQueue.length; i++) {
  if (!centeneAnalyticsQueue[i].isProcessed) {
    CenteneAnalytics.trackdata(centeneAnalyticsQueue[i]);
    centeneAnalyticsQueue[i].isProcessed = true;
  }
}

// overwirite the queue push to also do a trackdata
window.centeneAnalyticsQueue.push = function(e) {
  if (typeof CenteneAnalytics !== "undefined" && typeof CenteneAnalytics.trackdata !== "undefined") {
    CenteneAnalytics.trackdata(e);
    e.isProcessed = true;
    return Array.prototype.push.apply(this, arguments);
  }
}


//window.adobeanalytics = true;

/*window.trackCustomLink = function(aepCusLinkTitle) {
 
  //if(!window.s){return;}
    //s.clearVars();
    //s.linkTrackVars='eVar29,events';  //v29 is link name for standard link click tracking
    //s.linkTrackEvents='event32';  //standard link click event
    //s.eVar29=cusLinkTitle;
   // s.events='event32';
    _satellite.setVar("Link Title", aepCusLinkTitle);
    console.log('AEPtrackCustomLinkUtility rule: ' + aepCusLinkTitle);
    _satellite.track("AEP Link Click");
    console.log('AEP Link Click DC rule initiated');
   // s.tl(this,'o',cusLinkTitle);
}  */


/*FAP link clicks (direct link - temporary until FAP tracking is implemented)*/
/* window.trackFAP = function(link) {
    var aepCusLinkTitle ='fap click thru';
  _satellite.setVar("Link Title", aepCusLinkTitle);
    trackCustomLink(_satellite.getVar('Link Title'));
} */ 


/*Link tracking with data attributes*/







_satellite["_runScript1"](function(event, target, Promise) {
 return alloy("getIdentity")
   .then(function(result) {
     _satellite.setVar("ECID", result.identity.ECID);
   });

});

!function(b,e,f,g,a,c,d){b.fbq||(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq||(b._fbq=a),a.push=a,a.loaded=!0,a.version="2.0",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,"script","https://connect.facebook.net/en_US/fbevents.js");fbq("init","597256112412679");fbq("track","PageView");

window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments)}gtag("js",new Date);gtag("config","AW-10986365116");

X-UA-Compatible

Script

JQuery

Amazon Web Services

HSTS

Amazon CloudFront

Flu Shots |

Google

Google authentication and security services

Meta/Facebook

Adobe

First-Party Tracking

✅ Low Risk - https://www.delawarefirsthealth.com/members/medicaid/benefits-services/flu-shots.html

Requests	IP Address	Location	AS Autonomous System
52	52.222.214.124	United States	AS16509AMAZON-02
14	104.17.209.240	United States	AS13335CLOUDFLARENET
13	216.239.34.36	United States	AS15169GOOGLE
11	142.251.140.168	United States	AS15169GOOGLE
10	52.73.49.191	Ashburn, Virginia, United States	AS14618AMAZON-AES
8	142.250.186.100	United States	AS15169GOOGLE
7	18.245.86.34	United States	AS16509AMAZON-02
6	142.250.186.102	United States	AS15169GOOGLE
5	216.58.206.70	United States	AS15169GOOGLE
5	142.250.185.162	United States	AS15169GOOGLE
183	123	-	-

Security Scan Report: www.delawarefirsthealth.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History