Re:Master List of Data Broker Opt-Out Links
by tombrossman on Wednesday December 14, 2016 @11:00AM
(#13176927)
I manually added the 's' to the protocol to test and the server sent the only cert it had (if present, this is normal). It's like entering an IP address and having the server return the default site over HTTP.
Many sites ignore the Google Analytics requirement but I think this one should aim a bit higher, especially with all the legal geniuses involved in writing that privacy page.
Annualmedicalreport is in a related line of work to this site - it's not about medical care but about looking up the information health insurers gather about patients. It has some positive reviews from real news sources, but it also sets off some alarm bells for me. It seems to be eager for your data itself, and has a weird sideline of articles about non-medical consumer reporting that read like sponsored content.
Given all that, I wouldn't be surprised if they were connected to (possibly the creator of) this broker site, and that's why their cert is being served.
None of which actually makes me feel better, and the failure to disclose Analytics certainly isn't encouraging.