Homepage | Medavie Blue Cross

HTTP/1.1 200 OK
Date: Mon, 28 Oct 2024 03:36:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: AWSALB=y9E68Jp8amwH36PTjrlocTUSQ7ZHrPybRPAkXZDmv2H52lGLwVjxneBpuJH83Fz7EA7KUMYe8qGU3JDmbYuZyfuQeIshBI7qUjeRKZQxV39qyodc7+tcnU11VUVf; Expires=Mon, 04 Nov 2024 03:36:32 GMT; Path=/
Set-Cookie: AWSALBCORS=y9E68Jp8amwH36PTjrlocTUSQ7ZHrPybRPAkXZDmv2H52lGLwVjxneBpuJH83Fz7EA7KUMYe8qGU3JDmbYuZyfuQeIshBI7qUjeRKZQxV39qyodc7+tcnU11VUVf; Expires=Mon, 04 Nov 2024 03:36:32 GMT; Path=/; SameSite=None
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
Permissions-Policy: autoplay=(self), camera=(), browsing-topics=()
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Content-Security-Policy-Report-Only: default-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline';   img-src 'self' https://images.medaviebc.ca https://images.protectionplusbenefits.ca https://dev.visualwebsiteoptimizer.com https://r2.visualwebsiteoptimizer.com https://forms.hsforms.com https://track.hubspot.com https://media.msg.dotomi.com https://docs.medaviebc.ca https://docs.protectionplusbenefits.ca https://login.dotomi.com https://perf-na1.hsforms.com https://www.google.com https://www.google.ca https://px.ads.linkedin.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://i.vimeocdn.com https://maps.gstatic.com https://raw.githubusercontent.com https://maps.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://googleads.g.doubleclick.net https://google.com googleads.g.doubleclick.net www.google.com google.com https://ad.doubleclick.net https://ade.googlesyndication.com https://r3.visualwebsiteoptimizer.com https://qc.croixbleue.ca https://sdk.privacy-center.org https://r1.visualwebsiteoptimizer.com https://pluginicons.craft-cdn.com https://s3.us-east-1.amazonaws.com https://www.linkedin.com https://pluginscreenshots.craft-cdn.com https://s3.ca-central-1.amazonaws.com https://forms-na1.hsforms.com data:;   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://pro.fontawesome.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com;   font-src 'self' https://fonts.gstatic.com https://pro.fontawesome.com data:;   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.appdynamics.com https://js.hs-scripts.com https://static.hotjar.com https://dev.visualwebsiteoptimizer.com https://js.stripe.com https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://js.hsbanner.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hubspot.com https://js.hsleadflows.net https://js.hsadspixel.net https://script.hotjar.com https://s.pinimg.com https://js.adsrvr.org https://www.google-analytics.com https://extend.vimeocdn.com https://googleads.g.doubleclick.net https://ct.pinterest.com https://connect.facebook.net https://snap.licdn.com https://www.vimeo.com https://vimeo.com https://maps.googleapis.com https://maps.googleapis.com https://cdn.datatables.net https://*.googletagmanager.com https://www.googleadservices.com www.googleadservices.com www.google.com google.com www.googletagmanager.com https://www.google.com www.googleadservices.com googleads.g.doubleclick.net https://f.vimeocdn.com https://sdk.privacy-center.org https://api.privacy-center.org https://urldefense.com https://js.hsforms.net blob:;   connect-src 'self' https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://pdx-col.eum-appdynamics.com https://r2.visualwebsiteoptimizer.com https://forms.hscollectedforms.net https://api.hubapi.com https://cta-service-cms2.hubspot.com https://stats.g.doubleclick.net https://ct.pinterest.com https://forms.hubspot.com https://px.ads.linkedin.com https://resource-navigator-mbc.herokuapp.com https://google.com https://maps.googleapis.com https://api.medavie.bluecross.ca https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://r3.visualwebsiteoptimizer.com https://pagead2.googlesyndication.com https://api.privacy-center.org https://r1.visualwebsiteoptimizer.com https://feed-proxy.craftcms.com https://api.craftcms.com https://forms.hsforms.com;   frame-src 'self' https://*.medaviebc.ca https://js.stripe.com https://td.doubleclick.net https://insight.adsrvr.org https://ct.pinterest.com https://player.vimeo.com https://www.googletagmanager.com https://bid.g.doubleclick.net bid.g.doubleclick.net td.doubleclick.net https://match.adsrvr.org;   object-src 'none';   report-uri https://staging.medaviebc.ca/csp-report-endpoint.php
X-Powered-By: Craft CMS
Link: <https://www.medaviebc.ca/en/>; rel="canonical"
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8d97e1d3ffd8100f-LAX

Goat Coin

HTTP/1.1 200 OK
Date: Sun, 27 Oct 2024 06:24:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 03 Oct 2024 13:22:47 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
vary: Accept-Encoding
x-cache: RefreshHit from cloudfront
via: 1.1 23ad473482cbcecf7ea47ad47c955886.cloudfront.net (CloudFront)
x-amz-cf-pop: SFO53-P4
x-amz-cf-id: A3U2YmBh8lrYSfC3B_OKMIc_nIWqovfrNzdLp7NraTUginm5ZayUpQ==
CF-Cache-Status: DYNAMIC
Strict-Transport-Security: max-age=15552000
Server: cloudflare
CF-RAY: 8d909a878b7d67e5-SJC

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8d:c4:28:14:c6:c5:f0:0d:84:6d:e2:b9:a7:93:f9
        Signature Algorithm: ecdsa-with-SHA256
        Issuer: C=US, O=Google Trust Services, CN=WE1
        Validity
            Not Before: Oct 16 15:46:47 2024 GMT
            Not After : Jan 14 15:46:46 2025 GMT
        Subject: CN=staging.goatco.in
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:85:7a:10:7b:a0:16:4e:de:ae:84:89:bf:10:df:
                    f8:83:0f:c3:53:60:89:6e:4e:cf:3e:e8:d2:5a:f9:
                    08:e3:40:0a:0c:e3:89:6d:80:6d:2f:b8:13:b9:6c:
                    db:24:bd:09:fd:10:9d:1c:b5:ef:ba:5e:b5:d1:35:
                    0e:29:63:99:41
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                98:72:DA:B2:BB:0C:EB:AD:A3:75:56:E0:4C:67:0C:E3:48:18:0C:A0
            X509v3 Authority Key Identifier: 
                90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38
            Authority Information Access: 
                OCSP - URI:http://o.pki.goog/s/we1/XY0
                CA Issuers - URI:http://i.pki.goog/we1.crt
            X509v3 Subject Alternative Name: 
                DNS:staging.goatco.in, DNS:*.staging.goatco.in
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://c.pki.goog/we1/SXiTs4pnn2c.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Oct 16 16:46:48.019 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:54:92:7A:B2:2C:64:FC:BA:DC:4F:62:A6:
                                37:C0:74:90:66:A3:91:41:23:A1:82:A3:A8:CE:85:6A:
                                8B:E8:94:A2:02:21:00:EA:0D:43:03:63:10:DA:9F:E0:
                                67:FD:92:64:7A:44:E3:7F:26:50:F3:32:55:AC:D6:00:
                                F6:D1:25:50:FD:E5:D2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Oct 16 16:46:49.043 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:9A:9B:04:35:14:28:2A:EB:49:DE:59:
                                EB:03:45:71:AB:92:6C:A4:B5:76:13:65:01:AD:F8:52:
                                B8:62:C0:0F:73:02:20:19:6B:7C:64:7B:B8:BA:38:F3:
                                F8:70:E2:44:45:DF:07:0B:A4:EF:58:10:BB:8D:58:0D:
                                98:09:39:42:86:DB:FC
    Signature Algorithm: ecdsa-with-SHA256
    Signature Value:
        30:45:02:21:00:c9:9a:26:b4:a0:a2:5b:ef:75:ce:b2:ee:8b:
        02:e3:59:65:f9:9f:f7:ec:46:35:c7:05:ca:a1:ad:ea:82:20:
        ec:02:20:58:22:c5:35:62:ff:e9:2b:a2:19:91:4f:c1:18:6d:
        5b:85:bd:16:fa:ba:0a:aa:d5:95:59:51:e0:6e:d8:fd:ee

HTTP/1.1 403 Forbidden
Date: Mon, 30 Sep 2024 00:23:13 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5895
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8cb01022bba4796f-AMS

HTTP/1.1 403 Forbidden
Date: Thu, 24 Oct 2024 12:58:29 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5893
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d7a237cf8d56b4c-DFW

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Fri, 25 Oct 2024 12:55:47 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Fri, 25 Oct 2024 14:15:34 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Mon, 21 Oct 2024 18:51:02 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5895
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d636fccfafe9703-AMS

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Sat, 26 Oct 2024 02:57:45 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

CloudFlare

HTTP/1.1 403 Forbidden
Date: Thu, 24 Oct 2024 01:30:14 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5893
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d763352dd0b0e44-AMS

CloudFlare

HTTP/1.1 400 Bad Request
Server: cloudflare
Date: Mon, 28 Oct 2024 04:06:55 GMT
Content-Type: text/html
Content-Length: 655
Connection: close
CF-RAY: -

HTTP/1.1 403 Forbidden
Date: Tue, 22 Oct 2024 15:29:24 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Server: cloudflare
CF-RAY: 8d6a85cd2e8d5269-LAX

error code: 1003