Edit tour

Windows Analysis Report
https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a

Overview

General Information

Sample URL:	https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a
Analysis ID:	1402808
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7164 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2184,i,12828378703502771898,11203226601353503592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4040 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.greatland.com/about-us-old/

HTTP Parser: Base64 decoded: {"session":{"id":"c04dde47-badb-4700-b1ab-9573f4b80507","first_touch_timestamp":"2024-03-04T16:01:57","first_touch_referral_url":"","first_touch_request_url":"https://www.greatland.com/about-us-old/"},"shopper":{"visitor_id":"","customer_id":null,"email":...

Source: https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7&google_gid=CAESEL4m_YXqj2Ox3x7PIJezzJs&google_cver=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=lxs0wtc&ref=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&upid=qozgk3h&upv=1.1.0	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=rightmedia	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49754 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.56.210.93:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.5:49745 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49754 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.108.161
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /afe8ce2d-9b07-4f37-bfe3-d5380beea89a HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /bundles/jquery?v=dnh4CNLvAE-7b8jMEp_ifW1aAnsMY_uAuKfqaBWUVPU1 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /bundles/jqueryval?v=mkS8U9dwJq4AB8r0mhcPRDKSs3b164TkP_0S8JOy-g01 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /bundles/modernizr?v=KGygLU_Ygx-27Szx0BNU49_4N_lJnUmNs2RbUl05ER01 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /bundles/modal?v=-a4TryEKwD6_l2KoDb4knH7rIkrny3QIHNOq2F-8J1I1 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /bundles/Common?v=iv-wMx9JW9PONMa62erC7xTxZejViXqRf7JNiAKcC7Y1 HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/corner-left.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/rrfill.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/corner-right.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/background.jpg HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/logo.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/btn-retrieve.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/footer-tile.jpg HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/corner-left.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/rrfill.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/corner-right.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/btn-retrieve.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/logo.png HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
Source: global traffic	HTTP traffic detected: GET /Images/background.jpg HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z
Source: global traffic	HTTP traffic detected: GET /Images/footer-tile.jpg HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905.6\|1709568091905.6
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: retrieval.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905.6\|1709568091905.6
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Content/GetContent?contentName=FAQ HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905.6\|1709568091905.6
Source: global traffic	HTTP traffic detected: GET /Content/GetContent?contentName=About_Us HTTP/1.1Host: retrieval.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905\|1709568102902.3
Source: global traffic	HTTP traffic detected: GET /about-us-old/ HTTP/1.1Host: www.greatland.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bodl-events/index.js HTTP/1.1Host: microapps.bigcommerce.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/storefront/carts HTTP/1.1Host: www.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.greatland.com/about-us-old/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507
Source: global traffic	HTTP traffic detected: GET /tag/9mpew7vfbm HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/greatland/includes/hawksearch.css?bust=13042021023502 HTTP/1.1Host: manage.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/greatland/includes/hawksearch.js?bust=13042021023502 HTTP/1.1Host: manage.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?action=track_visitor&1709568118830 HTTP/1.1Host: www.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/about-us-old/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507
Source: global traffic	HTTP traffic detected: GET /sites/shared/icons/style.css HTTP/1.1Host: manage.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://manage.hawksearch.com/sites/greatland/includes/hawksearch.css?bust=13042021023502Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/shared/hawk-recommender-common.css HTTP/1.1Host: manage.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://manage.hawksearch.com/sites/greatland/includes/hawksearch.css?bust=13042021023502Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/shared/includes/hawksearch_plugins.css HTTP/1.1Host: manage.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://manage.hawksearch.com/sites/greatland/includes/hawksearch.css?bust=13042021023502Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/storefront/carts HTTP/1.1Host: www.greatland.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-XSRF-TOKEN: 7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4sec-ch-ua-mobile: ?0X-SF-CSRF-TOKEN: a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.greatland.com/about-us-old/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?action=track_visitor&1709568118830 HTTP/1.1Host: www.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507; ajs_user_id=null; ajs_group_id=null; ajs_anonymous_id=%22451d7abb-7842-4d36-b2f0-0929b641f24a%22; STORE_VISITOR=1; Shopper-Pref=521AB95DB6716B26613F4C98C5BDEF6F617B1B2A-1710172920096-x%7B%22cur%22%3A%22USD%22%7D
Source: global traffic	HTTP traffic detected: GET /api/storefront/carts HTTP/1.1Host: www.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507; ajs_user_id=null; ajs_group_id=null; ajs_anonymous_id=%22451d7abb-7842-4d36-b2f0-0929b641f24a%22; STORE_VISITOR=1; Shopper-Pref=521AB95DB6716B26613F4C98C5BDEF6F617B1B2A-1710172920096-x%7B%22cur%22%3A%22USD%22%7D
Source: global traffic	HTTP traffic detected: GET /nobot HTTP/1.1Host: bes.gcp.data.bigcommerce.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=greatland/greatland.com/202306151733&cb=1709568120219 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.8.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.9.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.13.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.15.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.16.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.30.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/storefront/carts HTTP/1.1Host: www.greatland.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507; ajs_user_id=null; ajs_group_id=null; ajs_anonymous_id=%22451d7abb-7842-4d36-b2f0-0929b641f24a%22; STORE_VISITOR=1; Shopper-Pref=EA2BFCE9F521F78D43548B7ADCEE3E1183C49FB1-1710172920772-x%7B%22cur%22%3A%22USD%22%7D; CONSENTMGR=ts:1709568120214%7Cconsent:true; utag_main=v_id:018e0a335579001fd7cde1809b780506f002706700918$_sn:1$_se:2$_ss:0$_st:1709569920273$ses_id:1709568120194%3Bexp-session$_pn:1%3Bexp-session$_prevpage:About%20Us%20-%20OLD%3Bexp-1709571720274; _gid=GA1.2.808406981.1709568120; _ga_3MXMJX3KHQ=GS1.1.1709568120.1.0.1709568120.0.0.0; _ga=GA1.1.1911684203.1709568120
Source: global traffic	HTTP traffic detected: GET /hawk.png?t=AXBsMDFhATE3MDk1NjgxMjA3OTUBMQE2YWIxY2I2Ny1hNjBjLTQ4MjctOWY4YS02YjI2NDZlMzYyZTABNWQxNDIxOWEtZDBmNy00ZjMxLTljMGQtMjgzMjFmZjdjMTdlATEyNjMBOTA3AUNocm9tZQExMTcBV2luZG93cwEvYWJvdXQtdXMtb2xkLwEBW10BNQ%3D%3D&et=1&cg=2ce7ee20c3a24043a37014561293a16b&cd=%5B%5D&80107034 HTTP/1.1Host: tracking.hawksearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.31.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.37.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event HTTP/1.1Host: collect.tealiumiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.41.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.45.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/st/js/st.js HTTP/1.1Host: d31y97ze264gaa.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/greatland/greatland.com/prod/utag.46.js?utv=ut4.46.202306151733 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us-36bfea60-4437-467a-8c2e-cd3f3b204ba5.js HTTP/1.1Host: cdn.getambassador.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/mlgreatland552prod/1/H.27.5/s33031020834113?AQB=1&ndh=1&t=4%2F2%2F2024%2017%3A2%3A1%201%20-60&fid=18D699F0BADBDD78-20A091AEABB01D67&ns=marketlive&pageName=About%20Us%20-%20OLD&g=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&cc=USD&ch=Page&v3=D%3Dch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1Host: marketlive.122.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/v2/ktag.js?tid=KT-N3ABF-3EB HTTP/1.1Host: resources.xg4ken.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/mlgreatland552prod/1/H.27.5/s33031020834113?AQB=1&pccr=true&vidn=32F2F83DE3DDDCE9-40001E5781637363&ndh=1&t=4%2F2%2F2024%2017%3A2%3A1%201%20-60&fid=18D699F0BADBDD78-20A091AEABB01D67&ns=marketlive&pageName=About%20Us%20-%20OLD&g=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&cc=USD&ch=Page&v3=D%3Dch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1Host: marketlive.122.2o7.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_vi=[CS]v1\|32F2F83DE3DDDCE9-40001E5781637363[CE]
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-4721954-1&cid=1911684203.1709568120&jid=415439967&_u=aGBAAEIqAAAAACgCIAB~&z=1272412581 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /st/?_stk=7d952dbcfb93c80885dc44dac357abeecf0e2b27&dr=&dl=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&dt=About%20Us%20-%20OLD&vp=1263x907&sr=1280x1024&ua=UA-4721954-1&uac=1911684203.1709568120&cb=1709568122970&stv=38 HTTP/1.1Host: st1.dialogtech.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@fingerprintjs/fingerprintjs@3.3.2/dist/fp.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-4721954-1&cid=1911684203.1709568120&jid=415439967&_u=aGBAAEIqAAAAACgCIAB~&z=1272412581 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /b/ss/mlgreatland552prod/1/H.27.5/s33031020834113?AQB=1&pccr=true&vidn=32F2F83DE3DDDCE9-40001E5781637363&ndh=1&t=4%2F2%2F2024%2017%3A2%3A1%201%20-60&fid=18D699F0BADBDD78-20A091AEABB01D67&ns=marketlive&pageName=About%20Us%20-%20OLD&g=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&cc=USD&ch=Page&v3=D%3Dch&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1Host: marketlive.122.2o7.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_vi=[CS]v1\|32F2F83DE3DDDCE9-40001E5781637363[CE]
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-4721954-1&cid=1911684203.1709568120&jid=415439967&gjid=869597654&_gid=808406981.1709568120&_u=aGBAAEIqAAAAACgCIAB~&z=721239556 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hawk.png?t=AXBsMDFhATE3MDk1NjgxMjA3OTUBMQE2YWIxY2I2Ny1hNjBjLTQ4MjctOWY4YS02YjI2NDZlMzYyZTABNWQxNDIxOWEtZDBmNy00ZjMxLTljMGQtMjgzMjFmZjdjMTdlATEyNjMBOTA3AUNocm9tZQExMTcBV2luZG93cwEvYWJvdXQtdXMtb2xkLwEBW10BNQ%3D%3D&et=1&cg=2ce7ee20c3a24043a37014561293a16b&cd=%5B%5D&80107034 HTTP/1.1Host: tracking.hawksearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_unified_window/10.34.2-release_1197625183/ui-framework.js?version=10.34.2-release_1197625183 HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_unified_window/10.34.2-release_1197625183/surveylogicinstance.min.js?version=10.34.2-release_1197625183 HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_unified_window/10.34.2-release_1197625183/desktopEmbedded.js?version=10.34.2-release_1197625183 HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_secure_storage/3.26.0.0-release_5111/storage.secure.min.js?loc=https%3A%2F%2Fwww.greatland.com&site=26850593&env=prod&accdn=accdn.lpsnmedia.net HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_secure_storage/3.26.0.0-release_5111/storage.secure.min.html?loc=https%3A%2F%2Fwww.greatland.com&site=26850593&ist=sessionStorage&env=prod&accdn=accdn.lpsnmedia.net HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=lxs0wtc&ref=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&upid=qozgk3h&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=lxs0wtc&ref=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&upid=qozgk3h&upv=1.1.0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=db83a22a-ea25-487e-aef2-abd14ab092d7
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=db83a22a-ea25-487e-aef2-abd14ab092d7; TDCPM=CAESFgoHcnViaWNvbhILCKT92KrPm948EAUSFQoGZ29vZ2xlEgsI2J3Zqs-b3jwQBRIZCgpyaWdodG1lZGlhEgsIvL7Zqs-b3jwQBRgFKAMyCwi82tvX5ZvePBAFQg8iDQgBEgkKBXRpZXIyEAFaB2x4czB3dGNgAQ..
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZGI4M2EyMmEtZWEyNS00ODdlLWFlZjItYWJkMTRhYjA5MmQ3&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=3&type=55953&gdpr=%24%7bGDPR%7d&gdpr_consent=%24%7bGDPR_CONSENT%7d&gpp=%24%7bGPP_STRING%7d&gpp_sid=%24%7bGPP_SID%7d&ovsid=rightmedia&redirect=https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fgeneric%3fttd_pid%3drightmedia&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7 HTTP/1.1Host: hb.yahoo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=db83a22a-ea25-487e-aef2-abd14ab092d7; TDCPM=CAESFgoHcnViaWNvbhILCKT92KrPm948EAUSFQoGZ29vZ2xlEgsI2J3Zqs-b3jwQBRIZCgpyaWdodG1lZGlhEgsIvL7Zqs-b3jwQBRgFKAMyCwi82tvX5ZvePBAFQg8iDQgBEgkKBXRpZXIyEAFaB2x4czB3dGNgAQ..
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZGI4M2EyMmEtZWEyNS00ODdlLWFlZjItYWJkMTRhYjA5MmQ3&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=db83a22a-ea25-487e-aef2-abd14ab092d7; TDCPM=CAESFgoHcnViaWNvbhILCKT92KrPm948EAUSFQoGZ29vZ2xlEgsI2J3Zqs-b3jwQBRIZCgpyaWdodG1lZGlhEgsIvL7Zqs-b3jwQBRgFIAEoAzILCLza29flm948EAVCDyINCAESCQoFdGllcjIQAVoHbHhzMHd0Y2AB
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7&google_gid=CAESEL4m_YXqj2Ox3x7PIJezzJs&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=db83a22a-ea25-487e-aef2-abd14ab092d7; TDCPM=CAESFgoHcnViaWNvbhILCKT92KrPm948EAUSFQoGZ29vZ2xlEgsI2J3Zqs-b3jwQBRIZCgpyaWdodG1lZGlhEgsIvL7Zqs-b3jwQBRgFIAEoAzILCLza29flm948EAVCDyINCAESCQoFdGllcjIQAVoHbHhzMHd0Y2AB
Source: global traffic	HTTP traffic detected: GET /le_re/3.59.0.0-release_5207/jsv2/overlay.js?_v=3.59.0.0-release_5207 HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /le_re/3.59.0.0-release_5207/jsv2/UISuite.js?_v=3.59.0.0-release_5207 HTTP/1.1Host: lpcdn.lpsnmedia.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st/log?_stb=1&bid=8ba93b70-da40-11ee-ab34-4b4e19f077fa&pid=8babac70-da40-11ee-ab34-4b4e19f077fa&stn=8552098701&sgn=1&t=%5B%7B%22n%22%3A1571%7D%2C%7B%22tn%22%3A8868%7D%2C%7B%22pl%22%3A11878%7D%2C%7B%22dl%22%3A3159%7D%2C%7B%22fd%22%3A5716%7D%2C%7B%22fl%22%3A-3003%7D%2C%7B%22tr%22%3A8875%7D%5D&_stk=7d952dbcfb93c80885dc44dac357abeecf0e2b27&stv=38&cb=1709568155137&r=undefined HTTP/1.1Host: st2.dialogtech.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.greatland.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st/log?_stb=1&bid=8ba93b70-da40-11ee-ab34-4b4e19f077fa&pid=8babac70-da40-11ee-ab34-4b4e19f077fa&stn=8552098701&sgn=1&t=%5B%7B%22n%22%3A1571%7D%2C%7B%22tn%22%3A8868%7D%2C%7B%22pl%22%3A11878%7D%2C%7B%22dl%22%3A3159%7D%2C%7B%22fd%22%3A5716%7D%2C%7B%22fl%22%3A-3003%7D%2C%7B%22tr%22%3A8875%7D%5D&_stk=7d952dbcfb93c80885dc44dac357abeecf0e2b27&stv=38&cb=1709568155137&r=undefined HTTP/1.1Host: st2.dialogtech.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ibp_st=8ba93b70-da40-11ee-ab34-4b4e19f077fa
Source: global traffic	HTTP traffic detected: GET /category/corporate.do HTTP/1.1Host: www.greatland.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_252.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=uB(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=cb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},xB=function(){var a=[],b=function(c){return Ia(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_252.2.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={kh:d,ih:e,jh:f,Vh:g,Wh:h,He:m,yb:b},p=z.YT,q=function(){ED(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};H(function(){for(var t=C.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HD(w,"iframe_api")\|\|HD(w,"player_api"))return b}for(var x=C.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!yD&&FD(x[B],n.He))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: return b}vD.D="internal.enableAutoEventOnTimer";var vc=da(["data-gtm-yt-inspected-"]),wD=["www.youtube.com","www.youtube-nocookie.com"],xD,yD=!1; equals www.youtube.com (Youtube)
Source: chromecache_252.2.dr	String found in binary or memory: var KC=function(a,b,c,d,e){var f=Bz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Bz("fsl","nv.ids",[]):Bz("fsl","ids",[]);if(!g.length)return!0;var h=xz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Jy(h,Ky(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: retrieval.greatland.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1709568071017&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_179.2.dr	String found in binary or memory: http://ad2.trafficgate.net/
Source: chromecache_179.2.dr	String found in binary or memory: http://ads.glispa.com/
Source: chromecache_179.2.dr	String found in binary or memory: http://adserv.ontek.com.tr/
Source: chromecache_179.2.dr	String found in binary or memory: http://advmanager.techfun.pl/redirect/
Source: chromecache_179.2.dr	String found in binary or memory: http://affiliazioniads.snai.it/
Source: chromecache_238.2.dr	String found in binary or memory: http://alertifyjs.com
Source: chromecache_180.2.dr, chromecache_238.2.dr	String found in binary or memory: http://alertifyjs.com)
Source: chromecache_179.2.dr	String found in binary or memory: http://axiabanners.exodus.gr/
Source: chromecache_231.2.dr	String found in binary or memory: http://bestiejs.github.io/json3
Source: chromecache_179.2.dr	String found in binary or memory: http://click.hotlog.ru/
Source: chromecache_228.2.dr	String found in binary or memory: http://devadmin.filetaxes.com/dr/contentstyle.css
Source: chromecache_179.2.dr	String found in binary or memory: http://g1.v.fwmrm.net/ad/
Source: chromecache_180.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_180.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_179.2.dr	String found in binary or memory: http://hitcounter.ru/top/stat.php
Source: chromecache_180.2.dr	String found in binary or memory: http://imagesloaded.desandro.com/
Source: chromecache_179.2.dr	String found in binary or memory: http://interactive.forthnet.gr/click?
Source: chromecache_179.2.dr	String found in binary or memory: http://izlenzi.com/campaign/
Source: chromecache_231.2.dr	String found in binary or memory: http://james.padolsey.com
Source: chromecache_186.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_231.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_180.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_179.2.dr	String found in binary or memory: http://jsfiddle.net/NDYV8/16/
Source: chromecache_179.2.dr	String found in binary or memory: http://jsfiddle.net/NDYV8/19/
Source: chromecache_180.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_180.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_231.2.dr	String found in binary or memory: http://kit.mit-license.org
Source: chromecache_180.2.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_180.2.dr	String found in binary or memory: http://manage.hawksearch.com/sites/shared/images/spacer.gif
Source: chromecache_179.2.dr	String found in binary or memory: http://pay4results24.eu
Source: chromecache_179.2.dr	String found in binary or memory: http://promo.vador.com/
Source: chromecache_179.2.dr	String found in binary or memory: http://ptapjmp.com/
Source: chromecache_231.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_180.2.dr	String found in binary or memory: http://stackoverflow.com/a/442474)
Source: chromecache_179.2.dr	String found in binary or memory: http://top.mail.ru/jump
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000000176ff
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017701
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017702
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017703
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017704
Source: chromecache_236.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000017706
Source: chromecache_231.2.dr	String found in binary or memory: http://unlicense.org/UNLICENSE
Source: chromecache_180.2.dr	String found in binary or memory: http://webcodingeasy.com/Javascript/Get-scroll-position-of-webpage--crossbrowser
Source: chromecache_180.2.dr	String found in binary or memory: http://www.amazon.co.uk/wishlist/HNTU0468LQON
Source: chromecache_179.2.dr	String found in binary or memory: http://www.eis.de/index.phtml?refid=
Source: chromecache_180.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_207.2.dr	String found in binary or memory: http://www.greatland.com/
Source: chromecache_207.2.dr, chromecache_228.2.dr	String found in binary or memory: http://www.greatland.com/category/corporate.do
Source: chromecache_179.2.dr	String found in binary or memory: http://www.hw-area.com/?dp=
Source: chromecache_179.2.dr	String found in binary or memory: http://www.installads.net/
Source: chromecache_179.2.dr	String found in binary or memory: http://www.lalit.org/lab/javascript-css-font-detect/
Source: chromecache_180.2.dr	String found in binary or memory: http://www.opensource.org/licenses/gpl-license.php)
Source: chromecache_180.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_179.2.dr, chromecache_180.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_179.2.dr	String found in binary or memory: http://www.rssad.jp/
Source: chromecache_179.2.dr	String found in binary or memory: http://www.salidzini.lv/
Source: chromecache_179.2.dr	String found in binary or memory: http://www.stucox.com/blog/you-cant-detect-a-touchscreen/
Source: chromecache_180.2.dr	String found in binary or memory: http://www.texotela.co.uk)
Source: chromecache_180.2.dr	String found in binary or memory: http://www.texotela.co.uk/code/jquery/numeric/
Source: chromecache_179.2.dr	String found in binary or memory: http://www.trizer.pl/?utm_source
Source: chromecache_235.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_179.2.dr	String found in binary or memory: https://ad.letmeads.com/
Source: chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_179.2.dr	String found in binary or memory: https://ads.sunmaker.com/tracking.php?
Source: chromecache_179.2.dr	String found in binary or memory: https://adserver.html.it/
Source: chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_179.2.dr	String found in binary or memory: https://aff.sendhub.pl/
Source: chromecache_179.2.dr	String found in binary or memory: https://affiliazioniads.snai.it/
Source: chromecache_142.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_179.2.dr	String found in binary or memory: https://app.readpeak.com/ads
Source: chromecache_146.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/a0e989131fd5/launch-2c94beadc94f-development.min.js
Source: chromecache_146.2.dr	String found in binary or memory: https://assets.adobedtm.com/d4d114c60e50/a0e989131fd5/launch-5dd5dd2177e6.min.js
Source: chromecache_207.2.dr, chromecache_228.2.dr, chromecache_225.2.dr	String found in binary or memory: https://az416426.vo.msecnd.net/scripts/a/ai.0.js
Source: chromecache_179.2.dr	String found in binary or memory: https://blackfridaysales.ro/trk/shop/
Source: chromecache_179.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=531915
Source: chromecache_179.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=781447
Source: chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_213.2.dr	String found in binary or memory: https://cdn.getambassador.com
Source: chromecache_220.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZGI4M2EyMmE
Source: chromecache_187.2.dr	String found in binary or memory: https://collect.tealiumiq.com/event
Source: chromecache_217.2.dr	String found in binary or memory: https://d31y97ze264gaa.cloudfront.net/assets/st/js/st.js
Source: chromecache_179.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/HTMLCanvasElement/toBlob
Source: chromecache_179.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/
Source: chromecache_180.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/Array/indexOf
Source: chromecache_179.2.dr	String found in binary or memory: https://event.2performant.com/events/click
Source: chromecache_179.2.dr	String found in binary or memory: https://fingerprintjs.com)
Source: chromecache_179.2.dr	String found in binary or memory: https://fingerprintjs.com/blog/audio-fingerprinting/
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkBIXvYC6trAT55ZBi1ueQVIjQTD-JqaE0lK.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/karla/v31/qkBIXvYC6trAT55ZBi1ueQVIjQTD-JqaHUlKd7c.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_201.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_179.2.dr	String found in binary or memory: https://fpjs.dev/pro
Source: chromecache_223.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/canvas/winding.js
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/cookies.js
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/548
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/cozylife/audio-fingerprint
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/blob/master/contributing.md#how-to-make-an-entropy-so
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/commit/945633e7c5f67ae38eb0fea37349712f0e669b18
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/103
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/254
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/307
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/514
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/568
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/574
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/583
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/592
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/628
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/645
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/66
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/issues/683).
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/fingerprintjs/fingerprintjs/pull/716#issuecomment-986898796
Source: chromecache_210.2.dr	String found in binary or memory: https://github.com/hij1nx/EventEmitter2
Source: chromecache_210.2.dr	String found in binary or memory: https://github.com/iconic/SVGInjector
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/jsdom/jsdom).
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js)
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/karanlyons/murmurHash3.js/blob/a33d0723127e2e5415056c455f8aed2451ace208/murmurHas
Source: chromecache_180.2.dr	String found in binary or memory: https://github.com/louisremi/jquery-smartresize
Source: chromecache_179.2.dr	String found in binary or memory: https://gitlab.torproject.org/legacy/trac/-/issues/13018
Source: chromecache_179.2.dr	String found in binary or memory: https://go.alvexo.com/
Source: chromecache_220.2.dr	String found in binary or memory: https://hb.yahoo.net/cksync.php?cs=3&type=55953&gdpr=%24%7bGDPR%7d&gdpr_consent=%24%7bGDPR_CONSENT%7
Source: chromecache_182.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_220.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_179.2.dr	String found in binary or memory: https://l.profitshare.ro/
Source: chromecache_243.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le/apps/campaigns/1.2.1-release_122345/img/engagementWindow/no-image2.pn
Source: chromecache_179.2.dr	String found in binary or memory: https://netmarketshare.com/browser-market-share.aspx?options=%7B%22filter%22%3A%7B%22%24and%22%3A%5B
Source: chromecache_238.2.dr	String found in binary or memory: https://opensource.org/licenses/gpl-3.0
Source: chromecache_236.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_220.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=db83a22a-ea25-487e-aef2-abd14ab092d7&gd
Source: chromecache_179.2.dr	String found in binary or memory: https://r88.vn/
Source: chromecache_231.2.dr	String found in binary or memory: https://st1.dialogtech.com/st/
Source: chromecache_231.2.dr	String found in binary or memory: https://st1.dialogtech.com/st/locations
Source: chromecache_231.2.dr	String found in binary or memory: https://st2.dialogtech.com/st/log
Source: chromecache_179.2.dr	String found in binary or memory: https://stackoverflow.com/q/1713771/1118709.
Source: chromecache_179.2.dr	String found in binary or memory: https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088
Source: chromecache_252.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_252.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_142.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_231.2.dr	String found in binary or memory: https://stcdproducer.dialogtech.com/v1/data
Source: chromecache_142.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/40207f/0000000000000000000176ff/27/
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/4b3e87/000000000000000000017706/27/
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/74ffb1/000000000000000000017702/27/
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/a2527e/000000000000000000017704/27/
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/cb695f/000000000000000000017701/27/
Source: chromecache_236.2.dr	String found in binary or memory: https://use.typekit.net/af/eaf09c/000000000000000000017703/27/
Source: chromecache_146.2.dr	String found in binary or memory: https://use.typekit.net/bxf0ivf.js
Source: chromecache_179.2.dr	String found in binary or memory: https://www.browserleaks.com/canvas#how-does-it-work
Source: chromecache_142.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_142.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_142.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_235.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_142.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_235.2.dr	String found in binary or memory: https://www.googlesyndication.com
Source: chromecache_235.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_176.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_200.2.dr, chromecache_174.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_206.2.dr, chromecache_142.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_163.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_measurement_id##
Source: chromecache_251.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_tracking_id##
Source: chromecache_252.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_179.2.dr	String found in binary or memory: https://www.tipico.com/?affiliateId=
Source: chromecache_252.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_179.2.dr	String found in binary or memory: https://xltube.nl/click/
Source: chromecache_179.2.dr	String found in binary or memory: https://ya-distrib.ru/r/
Source: chromecache_228.2.dr, chromecache_225.2.dr	String found in binary or memory: https://yearli.com/legal/privacy-policy
Source: chromecache_225.2.dr	String found in binary or memory: https://yearli.com/legal/terms-of-use
Source: chromecache_179.2.dr	String found in binary or memory: https://zbet.vn/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.56.210.93:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.192.108.161:443 -> 192.168.2.5:49745 version: TLS 1.2

Source: chromecache_179.2.dr

Binary or memory string: 'a[href*="//kingtoon.slnk.kr"]',

Source: classification engine

Classification label: clean1.win@27/213@92/34

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2184,i,12828378703502771898,11203226601353503592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2184,i,12828378703502771898,11203226601353503592,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://kenwheeler.github.io/slick	0%	URL Reputation	safe
http://ptapjmp.com/	0%	Avira URL Cloud	safe
https://www.clarity.ms/tag/9mpew7vfbm	0%	Avira URL Cloud	safe
http://www.hw-area.com/?dp=	0%	Avira URL Cloud	safe
http://www.amazon.co.uk/wishlist/HNTU0468LQON	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://fpjs.dev/pro	0%	Avira URL Cloud	safe
https://yearli.com/legal/terms-of-use	0%	Avira URL Cloud	safe
http://www.trizer.pl/?utm_source	0%	Avira URL Cloud	safe
http://unlicense.org/UNLICENSE	0%	Avira URL Cloud	safe
https://app.readpeak.com/ads	0%	Avira URL Cloud	safe
http://hitcounter.ru/top/stat.php	0%	Avira URL Cloud	safe
http://devadmin.filetaxes.com/dr/contentstyle.css	0%	Avira URL Cloud	safe
http://www.lalit.org/lab/javascript-css-font-detect/	0%	Avira URL Cloud	safe
http://promo.vador.com/	0%	Avira URL Cloud	safe
https://zbet.vn/	0%	Avira URL Cloud	safe
http://bestiejs.github.io/json3	0%	Avira URL Cloud	safe
https://aff.sendhub.pl/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
marketlive.122.2o7.net	63.140.39.248	true	false	high
jsdelivr.map.fastly.net	151.101.193.229	true	false	unknown
lpcdn.lpsnmedia.net	34.120.154.120	true	false	high
hb.yahoo.net	23.40.179.42	true	false	high
retrieval.greatland.com	13.82.175.96	true	false	high
dg2iu7dxxehbo.cloudfront.net	54.230.160.114	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	172.253.63.155	true	false	high
insight.adsrvr.org	3.33.220.150	true	false	high
collect.tealiumiq.com	52.45.37.25	true	false	high
bes.gcp.data.bigcommerce.com	34.111.131.117	true	false	high
getambassador.map.fastly.net	151.101.2.133	true	false	unknown
cm.g.doubleclick.net	142.250.65.194	true	false	high
www.google.com	142.251.40.132	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
st2.dialogtech.com	50.19.240.225	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
alb-ext-ingress-group-95161440.us-east-1.elb.amazonaws.com	3.215.125.159	true	false	high
greatland.com	63.141.128.23	true	false	high
tracking.hawksearch.com	12.133.121.70	true	false	high
st1.dialogtech.com	18.210.134.220	true	false	high
microapp-cdn.gcp.bigcommerce.net	34.117.232.248	true	false	unknown
manage.hawksearch.com	12.133.122.170	true	false	high
d31y97ze264gaa.cloudfront.net	18.173.130.175	true	false	high
dzfq4ouujrxm8.cloudfront.net	18.173.132.100	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
va.v.liveperson.net	unknown	unknown	false	high
cdn11.bigcommerce.com	unknown	unknown	false	high
use.typekit.net	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
cdn.getambassador.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	high
microapps.bigcommerce.com	unknown	unknown	false	high
resources.xg4ken.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
tags.tiqcdn.com	unknown	unknown	false	high
www.greatland.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-4721954-1&cid=1911684203.1709568120&jid=415439967&_u=aGBAAEIqAAAAACgCIAB~&z=1272412581	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm=&google_sc=&google_hm=ZGI4M2EyMmEtZWEyNS00ODdlLWFlZjItYWJkMTRhYjA5MmQ3&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7&google_tc=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://match.adsrvr.org/track/upb/?adv=lxs0wtc&ref=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&upid=qozgk3h&upv=1.1.0	false		high
https://retrieval.greatland.com/Images/corner-right.png	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.46.js?utv=ut4.46.202306151733	false		high
https://retrieval.greatland.com/Images/btn-retrieve.png	false		high
https://d31y97ze264gaa.cloudfront.net/assets/st/js/st.js	false		high
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.16.js?utv=ut4.46.202306151733	false		high
https://www.clarity.ms/tag/9mpew7vfbm	false	Avira URL Cloud: safe	unknown
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=greatland/greatland.com/202306151733&cb=1709568120219	false		high
https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZGI4M2EyMmEtZWEyNS00ODdlLWFlZjItYWJkMTRhYjA5MmQ3&gdpr=0&gdpr_consent=&ttd_tdid=db83a22a-ea25-487e-aef2-abd14ab092d7	false		high
https://cdn.getambassador.com/us-36bfea60-4437-467a-8c2e-cd3f3b204ba5.js	false		high
https://retrieval.greatland.com/Images/rrfill.png	false		high
https://lpcdn.lpsnmedia.net/le_secure_storage/3.26.0.0-release_5111/storage.secure.min.html?loc=https%3A%2F%2Fwww.greatland.com&site=26850593&ist=sessionStorage&env=prod&accdn=accdn.lpsnmedia.net	false		high
https://lpcdn.lpsnmedia.net/le_unified_window/10.34.2-release_1197625183/ui-framework.js?version=10.34.2-release_1197625183	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=rightmedia	false		high
https://tracking.hawksearch.com/hawk.png?t=AXBsMDFhATE3MDk1NjgxMjA3OTUBMQE2YWIxY2I2Ny1hNjBjLTQ4MjctOWY4YS02YjI2NDZlMzYyZTABNWQxNDIxOWEtZDBmNy00ZjMxLTljMGQtMjgzMjFmZjdjMTdlATEyNjMBOTA3AUNocm9tZQExMTcBV2luZG93cwEvYWJvdXQtdXMtb2xkLwEBW10BNQ%3D%3D&et=1&cg=2ce7ee20c3a24043a37014561293a16b&cd=%5B%5D&80107034	false		high
https://www.greatland.com/about-us-old/	false		high
https://retrieval.greatland.com/Content/GetContent?contentName=About_Us	false		high
https://resources.xg4ken.com/js/v2/ktag.js?tid=KT-N3ABF-3EB	false		high
https://manage.hawksearch.com/sites/greatland/includes/hawksearch.css?bust=13042021023502	false		high
https://retrieval.greatland.com/bundles/jquery?v=dnh4CNLvAE-7b8jMEp_ifW1aAnsMY_uAuKfqaBWUVPU1	false		high
https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-4721954-1&cid=1911684203.1709568120&jid=415439967&gjid=869597654&_gid=808406981.1709568120&_u=aGBAAEIqAAAAACgCIAB~&z=721239556	false		high
https://manage.hawksearch.com/sites/shared/hawk-recommender-common.css	false		high
https://retrieval.greatland.com/Images/corner-left.png	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.30.js?utv=ut4.46.202306151733	false		high
https://retrieval.greatland.com/Content/GetContent?contentName=FAQ	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.9.js?utv=ut4.46.202306151733	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.8.js?utv=ut4.46.202306151733	false		high
https://retrieval.greatland.com/bundles/modal?v=-a4TryEKwD6_l2KoDb4knH7rIkrny3QIHNOq2F-8J1I1	false		high
https://lpcdn.lpsnmedia.net/le_re/3.59.0.0-release_5207/jsv2/overlay.js?_v=3.59.0.0-release_5207	false		high
https://tags.tiqcdn.com/utag/greatland/greatland.com/prod/utag.31.js?utv=ut4.46.202306151733	false		high
https://insight.adsrvr.org/track/up?adv=lxs0wtc&ref=https%3A%2F%2Fwww.greatland.com%2Fabout-us-old%2F&upid=qozgk3h&upv=1.1.0	false		high
https://manage.hawksearch.com/sites/shared/includes/hawksearch_plugins.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_252.2.dr	false		high
http://www.amazon.co.uk/wishlist/HNTU0468LQON	chromecache_180.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/cookies.js	chromecache_179.2.dr	false		high
https://app.readpeak.com/ads	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://adserver.html.it/	chromecache_179.2.dr	false		high
https://github.com/cozylife/audio-fingerprint	chromecache_179.2.dr	false		high
https://lpcdn.lpsnmedia.net/le/apps/campaigns/1.2.1-release_122345/img/engagementWindow/no-image2.pn	chromecache_243.2.dr	false		high
https://github.com/karanlyons/murmurHash3.js/blob/a33d0723127e2e5415056c455f8aed2451ace208/murmurHas	chromecache_179.2.dr	false		high
https://fpjs.dev/pro	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_142.2.dr	false		high
http://unlicense.org/UNLICENSE	chromecache_231.2.dr	false	Avira URL Cloud: safe	unknown
http://ptapjmp.com/	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_180.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_142.2.dr	false		high
https://go.alvexo.com/	chromecache_179.2.dr	false		high
https://use.typekit.net/af/74ffb1/000000000000000000017702/27/	chromecache_236.2.dr	false		high
https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/Array/indexOf	chromecache_180.2.dr	false		high
https://github.com/hij1nx/EventEmitter2	chromecache_210.2.dr	false		high
https://st1.dialogtech.com/st/	chromecache_231.2.dr	false		high
https://github.com/louisremi/jquery-smartresize	chromecache_180.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_179.2.dr, chromecache_180.2.dr	false		high
http://www.trizer.pl/?utm_source	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://yearli.com/legal/terms-of-use	chromecache_225.2.dr	false	Avira URL Cloud: safe	unknown
http://malsup.com/jquery/block/	chromecache_180.2.dr	false		high
https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=db83a22a-ea25-487e-aef2-abd14ab092d7&gd	chromecache_220.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_252.2.dr	false		high
https://ya-distrib.ru/r/	chromecache_179.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/issues/254	chromecache_179.2.dr	false		high
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/canvas/winding.js	chromecache_179.2.dr	false		high
http://alertifyjs.com	chromecache_238.2.dr	false		high
http://www.hw-area.com/?dp=	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://affiliazioniads.snai.it/	chromecache_179.2.dr	false		high
https://l.profitshare.ro/	chromecache_179.2.dr	false		high
https://stackoverflow.com/questions/46363048/onaudioprocess-not-called-on-ios11#46534088	chromecache_179.2.dr	false		high
https://github.com/jsdom/jsdom).	chromecache_179.2.dr	false		high
http://devadmin.filetaxes.com/dr/contentstyle.css	chromecache_228.2.dr	false	Avira URL Cloud: safe	unknown
http://affiliazioniads.snai.it/	chromecache_179.2.dr	false		high
http://hitcounter.ru/top/stat.php	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=531915	chromecache_179.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/blob/master/contributing.md#how-to-make-an-entropy-so	chromecache_179.2.dr	false		high
http://www.lalit.org/lab/javascript-css-font-detect/	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://netmarketshare.com/browser-market-share.aspx?options=%7B%22filter%22%3A%7B%22%24and%22%3A%5B	chromecache_179.2.dr	false		high
http://typekit.com/eulas/0000000000000000000176ff	chromecache_236.2.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker/	chromecache_223.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/issues/592	chromecache_179.2.dr	false		high
http://top.mail.ru/jump	chromecache_179.2.dr	false		high
https://aff.sendhub.pl/	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://zbet.vn/	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
http://imagesloaded.desandro.com/	chromecache_180.2.dr	false		high
http://kenwheeler.github.io/slick	chromecache_180.2.dr	false	URL Reputation: safe	unknown
http://www.greatland.com/	chromecache_207.2.dr	false		high
https://cdn.getambassador.com	chromecache_213.2.dr	false		high
http://promo.vador.com/	chromecache_179.2.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/eaf09c/000000000000000000017703/27/	chromecache_236.2.dr	false		high
https://ads.sunmaker.com/tracking.php?	chromecache_179.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/issues/103	chromecache_179.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/issues/583	chromecache_179.2.dr	false		high
https://opensource.org/licenses/gpl-3.0	chromecache_238.2.dr	false		high
https://github.com/Modernizr/Modernizr/issues/548	chromecache_179.2.dr	false		high
https://td.doubleclick.net	chromecache_252.2.dr, chromecache_176.2.dr, chromecache_235.2.dr	false		high
http://bestiejs.github.io/json3	chromecache_231.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/iconic/SVGInjector	chromecache_210.2.dr	false		high
https://github.com/fingerprintjs/fingerprintjs/commit/945633e7c5f67ae38eb0fea37349712f0e669b18	chromecache_179.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
63.140.38.189	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
172.253.63.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
23.40.179.42	hb.yahoo.net	United States	16625	AKAMAI-ASUS	false
142.251.40.132	www.google.com	United States	15169	GOOGLEUS	false
12.133.122.170	manage.hawksearch.com	United States	27482	AECP-ASUS	false
34.120.154.120	lpcdn.lpsnmedia.net	United States	15169	GOOGLEUS	false
50.19.240.225	st2.dialogtech.com	United States	14618	AMAZON-AESUS	false
13.82.175.96	retrieval.greatland.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.33.220.150	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
63.141.128.23	greatland.com	United States	36351	SOFTLAYERUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
12.133.121.70	tracking.hawksearch.com	United States	27482	AECP-ASUS	false
52.2.35.17	unknown	United States	14618	AMAZON-AESUS	false
18.173.130.175	d31y97ze264gaa.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
63.140.39.248	marketlive.122.2o7.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
3.215.125.159	alb-ext-ingress-group-95161440.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
52.45.37.25	collect.tealiumiq.com	United States	14618	AMAZON-AESUS	false
54.230.160.114	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
142.251.111.155	unknown	United States	15169	GOOGLEUS	false
142.250.65.196	unknown	United States	15169	GOOGLEUS	false
142.250.65.194	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.210.134.220	st1.dialogtech.com	United States	14618	AMAZON-AESUS	false
34.111.131.117	bes.gcp.data.bigcommerce.com	United States	15169	GOOGLEUS	false
151.101.2.133	getambassador.map.fastly.net	United States	54113	FASTLYUS	false
18.173.132.100	dzfq4ouujrxm8.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
44.212.167.254	unknown	United States	14618	AMAZON-AESUS	false
34.117.232.248	microapp-cdn.gcp.bigcommerce.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false

Private

IP
192.168.2.8
192.168.2.9
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1402808
Start date and time:	2024-03-04 17:00:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/213@92/34
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://retrieval.greatland.com/Content/GetContent?contentName=FAQ Browse: https://retrieval.greatland.com/Content/GetContent?contentName=About_Us Browse: http://www.greatland.com/category/corporate.do Browse: http://get.adobe.com/reader/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.67, 142.251.179.84, 142.251.40.206, 34.104.35.123, 72.21.81.200, 142.250.176.202, 142.251.40.170, 142.251.40.106, 142.250.65.202, 142.251.40.138, 142.251.40.202, 142.250.81.234, 142.251.32.106, 142.250.80.106, 142.250.80.74, 142.250.80.42, 142.250.65.170, 142.250.72.106, 142.251.35.170, 142.251.40.234, 142.250.65.234, 52.188.247.149, 20.12.23.50, 23.40.179.13, 72.21.81.240, 192.229.211.108, 20.242.39.171, 20.3.187.198, 192.200.160.253, 63.141.128.3, 142.250.80.35, 142.250.80.72, 142.251.32.110, 204.79.197.200, 13.107.21.200, 208.89.12.153, 142.250.176.206, 208.89.12.91, 208.89.12.87, 69.173.151.100, 23.48.224.109, 23.48.224.105, 23.223.209.54, 23.223.209.41, 23.40.179.173, 23.40.179.200, 142.251.40.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, use-stls.adobe.com.edgesuite.net, hlb.apr-52dd2-0.edgecastdns.net, e29329.dsca.akamaiedge.net, update.googleapis.com, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, stls.adobe.com-cn.edgesuite.net.globalredir.akadns.net, ajax.googleapis.com, dual-a-0001.a-msedge.net, geo.va-v.livepersonk.akadns.net, az416426.vo.msecnd.net, edgedl.me.gvt1.com, a1815.dscr.akamai.net, cdn11.bigcommerce.com.cdn.cloudflare.net, clients.l.google.com, cs9.wpc.v0cdn.net, pixel.rubiconproject.net.akadns.net, wu.azureedge.net, get.adobe.com, www.googletagmanager.com, rdc.acrobat.adobe.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, azurefd-t-prod.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, geo.accdn.liveperso
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Mar 4 15:01:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977877428107003
Encrypted:	false
SSDEEP:	48:8ZEdvTHH4HhidAKZdA19ehwiZUklqehHy+3:8KzScy
MD5:	C83C1FB17E35185C2F911DB28D9B4008
SHA1:	DF484C0A34A6E98C0FFA244B6152D9C4F1D9AFE9
SHA-256:	177C3A8329BA2A6EEDBEE0DBA91A00F0227A003E54C29A49B5FBFF9C0715F913
SHA-512:	72608D9B6D19EFF8ECF2C793E07741D079CC9A30C13BC32F562CE4422B31A43422D987F0B497984E3641C5ECEF1807EC445774F16BBE407270FB7E961FA42E15
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....{$F8Mn..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IdX,.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VdX,.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VdX,.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VdX,............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VdX/............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..........._N......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 4, 2024 17:01:27.973753929 CET	53	64099	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:28.091933966 CET	53	57873	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:28.855098009 CET	53	53856	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:29.437681913 CET	49759	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:29.437855005 CET	64545	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:29.526654959 CET	53	49759	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:29.529774904 CET	53	64545	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:30.651190042 CET	65056	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:30.652333975 CET	63335	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:30.739537954 CET	53	65056	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:30.741245985 CET	53	63335	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:31.172416925 CET	53	64098	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:31.577833891 CET	64785	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:31.579125881 CET	58898	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:31.666665077 CET	53	64785	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:31.668905020 CET	53	58898	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:32.570151091 CET	63560	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:32.570725918 CET	51472	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:33.800350904 CET	64922	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:33.801198959 CET	62308	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:46.000909090 CET	53	63340	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:56.362469912 CET	59243	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:56.363039970 CET	50238	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:56.455492020 CET	53	59243	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:56.457937956 CET	53	50238	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:57.172950983 CET	50971	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:57.173130989 CET	53009	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:57.265327930 CET	53	50971	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:57.265544891 CET	53	53009	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.185050964 CET	58251	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.185810089 CET	55782	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.197431087 CET	63381	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.197890997 CET	55826	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.275588989 CET	53	55782	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.276355028 CET	53	54249	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.283919096 CET	53	53781	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.287944078 CET	53	55826	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.287992954 CET	53	63381	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.825037003 CET	65104	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.825407028 CET	61504	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.914087057 CET	53	61504	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:58.976540089 CET	63963	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.977962971 CET	63321	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.978449106 CET	50302	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.979058027 CET	50710	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.990835905 CET	62627	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:58.991141081 CET	64103	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:01:59.065973997 CET	53	63963	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:59.067747116 CET	53	63321	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:59.068135023 CET	53	50710	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:59.068761110 CET	53	50302	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:59.577476025 CET	53	61253	1.1.1.1	192.168.2.5
Mar 4, 2024 17:01:59.779943943 CET	53	52405	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.199181080 CET	63168	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.199666977 CET	53932	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.287905931 CET	53	63168	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.287919998 CET	53	53932	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.357686996 CET	64719	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.358475924 CET	55825	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.448872089 CET	53	64719	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.529275894 CET	53	55896	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.584008932 CET	53	55825	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.749293089 CET	54852	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.750008106 CET	54772	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.836982012 CET	53	54852	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.841337919 CET	53	54772	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.874494076 CET	64040	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.875130892 CET	52792	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:00.963483095 CET	53	52792	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:00.963592052 CET	53	64040	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.484698057 CET	61250	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.485044956 CET	49734	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.575619936 CET	53	49734	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.611541033 CET	53	61250	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.658317089 CET	58475	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.659302950 CET	63074	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.746596098 CET	53	58475	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.748234987 CET	53	63074	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.805510044 CET	58831	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.806395054 CET	54114	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.894897938 CET	53	58831	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.895822048 CET	53	54114	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:01.908251047 CET	63463	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.909252882 CET	58323	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.959280014 CET	49749	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.959979057 CET	64341	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:01.999603033 CET	53	58323	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.048506975 CET	53	49749	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.049005985 CET	53	64341	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.203241110 CET	52236	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.204349041 CET	61760	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.291457891 CET	53	52236	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.294054031 CET	53	61760	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.318698883 CET	53342	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.319897890 CET	56238	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.339735031 CET	64252	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.340536118 CET	63011	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.398260117 CET	56082	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.398986101 CET	49932	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:02.410017014 CET	53	53342	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.412400007 CET	53	56238	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.430526018 CET	53	64252	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.430568933 CET	53	63011	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.489233017 CET	53	56082	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:02.489300013 CET	53	49932	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.085613966 CET	62330	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.086477041 CET	62776	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.095366001 CET	55103	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.095705986 CET	53371	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.174993992 CET	53	62330	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.176887035 CET	53	62776	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.183576107 CET	53	55103	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.184017897 CET	53	53371	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.592609882 CET	63738	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.593847990 CET	52114	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:04.681544065 CET	53	63738	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:04.684204102 CET	53	52114	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.048228979 CET	54013	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.048677921 CET	65027	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.066591024 CET	53235	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.068089962 CET	51195	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.086050987 CET	50107	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.087141991 CET	59760	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.089492083 CET	49493	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.089906931 CET	63712	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:05.127350092 CET	53	56057	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.137906075 CET	53	54013	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.140588999 CET	53	65027	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.155045033 CET	53	53235	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.158162117 CET	53	51195	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.177287102 CET	53	50107	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.177758932 CET	53	59760	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.178200960 CET	53	49493	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.178994894 CET	53	63712	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:05.428303957 CET	53	63544	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:06.214382887 CET	53138	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:06.214790106 CET	62081	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:06.215689898 CET	54053	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:06.215930939 CET	52496	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:06.306896925 CET	53	62081	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:06.307164907 CET	53	54053	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:06.308044910 CET	53	52496	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:07.096298933 CET	57072	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:07.096760988 CET	49847	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:07.185128927 CET	53	49847	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:07.186530113 CET	53	57072	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:08.239131927 CET	56764	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:08.239641905 CET	49682	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:08.327485085 CET	53	49682	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:08.327537060 CET	53	56764	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:08.875833988 CET	56743	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:08.877058983 CET	52107	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:08.964781046 CET	53	56743	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:08.965348959 CET	53	52107	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:09.377443075 CET	55019	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.377813101 CET	58034	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.466222048 CET	53	55019	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:09.467106104 CET	53	58034	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:09.817060947 CET	51205	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.817704916 CET	64622	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.847882986 CET	54585	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.848859072 CET	50769	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:09.907866001 CET	53	64622	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:09.937175035 CET	53	50769	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:10.060220957 CET	56427	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:10.061114073 CET	60599	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:10.148646116 CET	53	56427	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:10.148895025 CET	53	60599	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:10.302690029 CET	51007	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:10.303333044 CET	58969	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:10.391171932 CET	53	51007	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:10.392443895 CET	53	58969	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:15.117659092 CET	57038	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:15.118005037 CET	52762	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:27.753526926 CET	53	57585	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:28.139085054 CET	53	52054	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:35.790949106 CET	60910	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:35.791407108 CET	59797	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:35.880224943 CET	53	60910	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:35.880244970 CET	53	59797	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:36.282221079 CET	51252	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:36.282872915 CET	63254	53	192.168.2.5	1.1.1.1
Mar 4, 2024 17:02:36.372086048 CET	53	63254	1.1.1.1	192.168.2.5
Mar 4, 2024 17:02:36.376287937 CET	53	51252	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
Mar 4, 2024 17:01:56.870279074 CET	453	OUT	GET /category/corporate.do HTTP/1.1 Host: www.greatland.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 4, 2024 17:01:57.170353889 CET	885	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 04 Mar 2024 16:01:57 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 114 Connection: keep-alive location: https://www.greatland.com/about-us-old/ x-content-type-options: nosniff x-permitted-cross-domain-policies: none x-request-id: a1fc11a6a2dbfde0cbe946128db22b3a CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CKk6NUyehVoVrkbJaUWJ0ucWYaefrP2nQ5GceS3MiYUGTR1Do%2FGDWhkfULYn7Wqt2%2BDin%2F13oUgF5im2YQ3hJs5KfHJtRL9QUhL6k9URRIXsVDAvuqQ82WqPH%2F3GW3I9x7xj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} BC-Ray: 1 Server: cloudflare CF-RAY: 85f3167ab87fc3f5-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 54 68 69 73 20 61 6e 64 20 61 6c 6c 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 73 68 6f 75 6c 64 20 62 65 20 64 69 72 65 63 74 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 65 61 74 6c 61 6e 64 2e 63 6f 6d 2f 61 62 6f 75 74 2d 75 73 2d 6f 6c 64 2f 22 3e 74 68 69 73 20 55 52 49 3c 2f 61 3e 2e Data Ascii: This and all future requests should be directed to <a href="https://www.greatland.com/about-us-old/">this URI</a>.
Mar 4, 2024 17:02:42.177227020 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:29 UTC	702	OUT	GET /afe8ce2d-9b07-4f37-bfe3-d5380beea89a HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:01:30 UTC	1166	IN	HTTP/1.1 200 OK Content-Length: 6271 Connection: close Content-Type: text/html; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:29 GMT Server: Cache-Control: private Set-Cookie: RecipientId=37937670; path=/; secure Set-Cookie: RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; path=/; secure Set-Cookie: SecurityToken=; path=/; secure Set-Cookie: __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; path=/; HttpOnly Set-Cookie: ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372;Path=/;HttpOnly;Secure;Domain=retrieval.greatland.com Set-Cookie: ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372;Path=/;HttpOnly;SameSite=None;Secure;Domain=retrieval.greatland.com Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	2930	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 20 50 61 67 65 20 2d 20 4f 6e 6c 69 6e 65 20 52 65 74 72 69 65 76 61 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 0d 0a 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <title>Home Page - Online Retrieval</title> <link href="/favicon.ico" rel="shortcut icon" type="image/x-icon"/> <meta name="viewport" content="width=device-width"/>
2024-03-04 16:01:30 UTC	107	IN	Data Raw: 46 6b 58 65 33 50 66 44 52 77 56 79 44 39 34 53 4f 76 78 76 7a 77 35 57 49 6d 45 6c 6b 38 6a 68 6b 6b 31 22 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 44 49 56 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 42 75 74 74 6f 6e 22 Data Ascii: FkXe3PfDRwVyD94SOvxvzw5WImElk8jhkk1" /> <div id="logoDIV"> <div id="logoButton"
2024-03-04 16:01:30 UTC	3234	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 66 6f 72 6d 3e 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 35 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 46 61 69 6c 65 64 4c 6f 67 69 6e 53 53 Data Ascii: > </div> </div></form> </div> <div id="body" style="padding-left: 35px;"> <section> <script type="text/javascript"> $(document).ready(function () { $("#FailedLoginSS

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1038	OUT	GET /Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	533	IN	HTTP/1.1 200 OK Content-Length: 5571 Connection: close Content-Type: text/css; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:29 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	3348	IN	Data Raw: 2e 66 6c 6f 61 74 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 74 64 2c 6c 61 62 65 6c 2c 70 2c 68 2c 61 2c 64 69 76 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 64 33 65 33 66 7d 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 57 72 61 70 70 65 72 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 34 37 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b Data Ascii: .float-right{float:right}td,label,p,h,a,div{font-family:Arial}html{background-color:#3d3e3f}.errorMessageWrapper{font-weight:normal}.errorMessage{overflow-y:auto;width:auto;height:475px;margin-left:30px;margin-right:65px;font-size:14px;font-weight:normal;
2024-03-04 16:01:30 UTC	2223	IN	Data Raw: 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 33 70 78 3b 68 65 69 67 68 74 3a 32 33 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 35 70 78 7d 23 63 6f 6e 66 69 72 6d 2d 6f 76 65 72 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 75 72 73 6f 72 3a 77 61 69 74 7d 23 63 6f 6e 66 69 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 38 30 70 78 3b 77 69 64 74 68 3a 34 37 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 27 54 72 65 62 75 63 68 65 74 20 4d 53 27 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 39 65 39 65 39 7d 23 63 6f 6e 66 69 72 6d 2d Data Ascii: line-block;width:23px;height:23px;position:relative;top:5px}#confirm-overlay{background-color:#000;cursor:wait}#confirm-container{height:180px;width:470px;font-family:Arial,Verdana,'Trebuchet MS';font-size:14px;text-align:left;background:#e9e9e9}#confirm-

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1027	OUT	GET /bundles/jquery?v=dnh4CNLvAE-7b8jMEp_ifW1aAnsMY_uAuKfqaBWUVPU1 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	542	IN	HTTP/1.1 200 OK Content-Length: 101438 Connection: close Content-Type: text/javascript; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	3339	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 3a 74 28 6e 29 7d 29 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 Data Ascii: (function(n,t){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=n.document?t(n,!0):function(n){if(!n.document)throw new Error("jQuery requires a window with a document");return t(n)}:t(n)})(typeof window!="undefined"?wi
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 3d 3d 22 6f 62 6a 65 63 74 22 29 69 2e 6d 65 72 67 65 28 79 2c 65 2e 6e 6f 64 65 54 79 70 65 3f 5b 65 5d 3a 65 29 3b 65 6c 73 65 20 69 66 28 6c 75 2e 74 65 73 74 28 65 29 29 7b 66 6f 72 28 6f 3d 6f 7c 7c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 70 3d 28 68 75 2e 65 78 65 63 28 65 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 3d 63 5b 70 5d 7c 7c 63 2e 5f 64 65 66 61 75 6c 74 2c 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 61 5b 31 5d 2b 69 2e 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 65 29 2b 61 5b 32 5d 2c 76 3d 61 5b 30 5d 3b 76 2d 2d 3b 29 6f 3d 6f 2e 6c 61 73 74 43 68 69 6c 64 3b 69 2e 6d 65 72 67 65 28 79 2c 6f 2e 63 68 69 6c 64 4e 6f 64 65 73 Data Ascii: =="object")i.merge(y,e.nodeType?[e]:e);else if(lu.test(e)){for(o=o\|\|h.appendChild(t.createElement("div")),p=(hu.exec(e)\|\|["",""])[1].toLowerCase(),a=c[p]\|\|c._default,o.innerHTML=a[1]+i.htmlPrefilter(e)+a[2],v=a[0];v--;)o=o.lastChild;i.merge(y,o.childNodes
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 22 29 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 3b 6f 3c 34 3b 6f 2b 3d 32 29 72 3d 3d 3d 22 6d 61 72 67 69 6e 22 26 26 28 73 2b 3d 69 2e 63 73 73 28 6e 2c 72 2b 62 5b 6f 5d 2c 21 30 2c 66 29 29 2c 75 3f 28 72 3d 3d 3d 22 63 6f 6e 74 65 6e 74 22 26 26 28 73 2d 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 62 5b 6f 5d 2c 21 30 2c 66 29 29 2c 72 21 3d 3d 22 6d 61 72 67 69 6e 22 26 26 28 73 2d 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 62 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 30 2c 66 29 29 29 3a 28 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 70 61 64 64 69 6e 67 22 2b 62 5b 6f 5d 2c 21 30 2c 66 29 2c 72 21 3d 3d 22 70 61 64 64 69 6e 67 22 3f 73 2b 3d 69 2e 63 73 73 28 6e 2c 22 62 6f 72 64 65 72 22 2b 62 5b 6f 5d 2b 22 57 69 64 74 68 22 2c 21 Data Ascii: "))return 0;for(;o<4;o+=2)r==="margin"&&(s+=i.css(n,r+b[o],!0,f)),u?(r==="content"&&(s-=i.css(n,"padding"+b[o],!0,f)),r!=="margin"&&(s-=i.css(n,"border"+b[o]+"Width",!0,f))):(s+=i.css(n,"padding"+b[o],!0,f),r!=="padding"?s+=i.css(n,"border"+b[o]+"Width",!
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 70 74 73 2e 73 74 61 72 74 29 26 26 66 2e 6f 70 74 73 2e 73 74 61 72 74 2e 63 61 6c 6c 28 6e 2c 66 29 2c 66 2e 70 72 6f 67 72 65 73 73 28 66 2e 6f 70 74 73 2e 70 72 6f 67 72 65 73 73 29 2e 64 6f 6e 65 28 66 2e 6f 70 74 73 2e 64 6f 6e 65 2c 66 2e 6f 70 74 73 2e 63 6f 6d 70 6c 65 74 65 29 2e 66 61 69 6c 28 66 2e 6f 70 74 73 2e 66 61 69 6c 29 2e 61 6c 77 61 79 73 28 66 2e 6f 70 74 73 2e 61 6c 77 61 79 73 29 2c 69 2e 66 78 2e 74 69 6d 65 72 28 69 2e 65 78 74 65 6e 64 28 6c 2c 7b 65 6c 65 6d 3a 6e 2c 61 6e 69 6d 3a 66 2c 71 75 65 75 65 3a 66 2e 6f 70 74 73 2e 71 75 65 75 65 7d 29 29 2c 66 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 6d 61 74 63 68 28 61 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 Data Ascii: pts.start)&&f.opts.start.call(n,f),f.progress(f.opts.progress).done(f.opts.done,f.opts.complete).fail(f.opts.fail).always(f.opts.always),i.fx.timer(i.extend(l,{elem:n,anim:f,queue:f.opts.queue})),f}function nt(n){var t=n.match(a)\|\|[];return t.join(" ")}fu
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 65 64 26 26 28 6e 5b 66 5d 3d 74 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 69 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 77 72 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6e 29 3b 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 69 3b 72 65 74 75 72 6e 21 6e 7c 7c 76 72 2e 63 61 6c 6c 28 6e 29 21 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3f 21 31 3a 28 74 3d 6c 72 28 6e 29 2c 21 74 29 3f 21 30 3a 28 69 3d 69 69 Data Ascii: ed&&(n[f]=t));return n};i.extend({expando:"jQuery"+(wr+Math.random()).replace(/\D/g,""),isReady:!0,error:function(n){throw new Error(n);},noop:function(){},isPlainObject:function(n){var t,i;return!n\|\|vr.call(n)!=="[object Object]"?!1:(t=lr(n),!t)?!0:(i=ii
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 6c 5b 66 5d 29 26 26 63 5b 30 5d 3d 3d 3d 76 26 26 63 5b 31 5d 3d 3d 3d 73 29 72 65 74 75 72 6e 20 79 5b 32 5d 3d 63 5b 32 5d 3b 69 66 28 6c 5b 66 5d 3d 79 2c 79 5b 32 5d 3d 6e 28 74 2c 69 2c 68 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 69 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6c 65 6e 67 74 68 3e 31 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 66 6f 72 28 76 61 72 20 75 3d 6e 2e 6c 65 6e 67 74 68 3b 75 2d 2d 3b 29 69 66 28 21 6e 5b 75 5d 28 74 2c 69 2c 72 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3a 6e 5b 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 6e 2c 74 2c 69 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 66 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 66 3b 72 2b 2b 29 75 28 6e 2c 74 5b Data Ascii: l[f])&&c[0]===v&&c[1]===s)return y[2]=c[2];if(l[f]=y,y[2]=n(t,i,h))return!0}return!1}}function ui(n){return n.length>1?function(t,i,r){for(var u=n.length;u--;)if(!n[u](t,i,r))return!1;return!0}:n[0]}function wr(n,t,i){for(var r=0,f=t.length;r<f;r++)u(n,t[
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 6e 7d 2c 62 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 29 7d 2c 76 72 3d 77 74 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 21 30 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 66 69 65 6c 64 73 65 74 22 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 6b 2e 61 70 70 6c 79 28 67 3d 61 69 2e 63 61 6c 6c 28 63 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 63 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3b 67 5b 63 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 Data Ascii: ength-1).toString(16)+" ":"\\"+n},bi=function(){b()},vr=wt(function(n){return n.disabled===!0&&n.nodeName.toLowerCase()==="fieldset"},{dir:"parentNode",next:"legend"});try{k.apply(g=ai.call(c.childNodes),c.childNodes);g[c.childNodes.length].nodeType}catch
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 69 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 6e 3d 3d 3d 69 7c 7c 21 21 28 69 26 26 69 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 28 72 2e 63 6f 6e 74 61 69 6e 73 3f 72 2e 63 6f 6e 74 61 69 6e 73 28 69 29 3a 6e 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 6e 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 69 29 26 31 36 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 74 29 77 68 69 6c 65 28 74 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 66 28 74 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 64 74 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 20 75 74 3d 21 30 2c 30 3b 76 61 Data Ascii: i=t&&t.parentNode;return n===i\|\|!!(i&&i.nodeType===1&&(r.contains?r.contains(i):n.compareDocumentPosition&&n.compareDocumentPosition(i)&16))}:function(n,t){if(t)while(t=t.parentNode)if(t===n)return!0;return!1},dt=v?function(n,t){if(n===t)return ut=!0,0;va
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 69 71 75 65 49 44 5d 7c 7c 28 79 5b 63 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 70 3d 77 5b 6e 5d 7c 7c 5b 5d 2c 61 3d 70 5b 30 5d 3d 3d 3d 76 26 26 70 5b 31 5d 2c 6c 3d 61 26 26 70 5b 32 5d 2c 63 3d 61 26 26 64 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 61 5d 3b 63 3d 2b 2b 61 26 26 63 26 26 63 5b 6b 5d 7c 7c 28 6c 3d 61 3d 30 29 7c 7c 62 2e 70 6f 70 28 29 3b 29 69 66 28 63 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 2b 2b 6c 26 26 63 3d 3d 3d 74 29 7b 77 5b 6e 5d 3d 5b 76 2c 61 2c 6c 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 67 26 26 28 63 3d 74 2c 79 3d 63 5b 65 5d 7c 7c 28 63 5b 65 5d 3d 7b 7d 29 2c 77 3d 79 5b 63 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 79 5b 63 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 70 3d 77 5b 6e 5d 7c 7c 5b 5d 2c 61 3d Data Ascii: iqueID]\|\|(y[c.uniqueID]={}),p=w[n]\|\|[],a=p[0]===v&&p[1],l=a&&p[2],c=a&&d.childNodes[a];c=++a&&c&&c[k]\|\|(l=a=0)\|\|b.pop();)if(c.nodeType===1&&++l&&c===t){w[n]=[v,a,l];break}}else if(g&&(c=t,y=c[e]\|\|(c[e]={}),w=y[c.uniqueID]\|\|(y[c.uniqueID]={}),p=w[n]\|\|[],a=
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 69 76 65 5b 6c 3d 65 2e 74 79 70 65 5d 29 62 72 65 61 6b 3b 69 66 28 28 61 3d 74 2e 66 69 6e 64 5b 6c 5d 29 26 26 28 75 3d 61 28 65 2e 6d 61 74 63 68 65 73 5b 30 5d 2e 72 65 70 6c 61 63 65 28 79 2c 70 29 2c 74 69 2e 74 65 73 74 28 66 5b 30 5d 2e 74 79 70 65 29 26 26 72 69 28 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 69 29 29 29 7b 69 66 28 66 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 6e 3d 75 2e 6c 65 6e 67 74 68 26 26 70 74 28 66 29 2c 21 6e 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 72 2c 75 29 2c 72 3b 62 72 65 61 6b 7d 7d 7d 72 65 74 75 72 6e 28 63 7c 7c 6b 74 28 6e 2c 73 29 29 28 75 2c 69 2c 21 68 2c 72 2c 21 69 7c 7c 74 69 2e 74 65 73 74 28 6e 29 26 26 72 69 28 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 69 29 2c 72 7d 2c 66 2e 73 6f 72 74 53 Data Ascii: ive[l=e.type])break;if((a=t.find[l])&&(u=a(e.matches[0].replace(y,p),ti.test(f[0].type)&&ri(i.parentNode)\|\|i))){if(f.splice(o,1),n=u.length&&pt(f),!n)return k.apply(r,u),r;break}}}return(c\|\|kt(n,s))(u,i,!h,r,!i\|\|ti.test(n)&&ri(i.parentNode)\|\|i),r},f.sortS

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1030	OUT	GET /bundles/jqueryval?v=mkS8U9dwJq4AB8r0mhcPRDKSs3b164TkP_0S8JOy-g01 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	541	IN	HTTP/1.1 200 OK Content-Length: 84516 Connection: close Content-Type: text/javascript; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	3340	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 66 74 42 74 4f 6e 28 6e 29 7b 28 24 28 6e 29 2e 64 61 74 61 28 22 74 69 70 56 69 73 69 62 6c 65 22 29 3d 3d 21 31 7c 7c 24 28 6e 29 2e 64 61 74 61 28 22 70 72 65 76 69 6f 75 73 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 29 21 3d 24 28 6e 29 2e 64 61 74 61 28 22 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 29 29 26 26 28 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 21 3d 6e 5b 30 5d 26 26 6e 2e 66 6f 63 75 73 28 29 2c 6e 2e 62 74 4f 6e 28 29 29 3b 24 28 6e 29 2e 64 61 74 61 28 22 74 69 70 56 69 73 69 62 6c 65 22 2c 21 30 29 3b 24 28 6e 29 2e 64 61 74 61 28 22 70 72 65 76 69 6f 75 73 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 24 28 6e 29 2e 64 61 74 61 28 22 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 29 29 7d 66 75 Data Ascii: function ftBtOn(n){($(n).data("tipVisible")==!1\|\|$(n).data("previousValidationError")!=$(n).data("validationError"))&&(activeElement!=n[0]&&n.focus(),n.btOn());$(n).data("tipVisible",!0);$(n).data("previousValidationError",$(n).data("validationError"))}fu
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 6e 28 74 68 69 73 29 2e 64 61 74 61 28 74 29 7c 7c 5b 5d 2c 75 3d 6e 28 74 68 69 73 29 2e 64 61 74 61 28 72 29 2c 6f 3d 75 26 26 75 2e 68 61 73 43 6c 61 73 73 28 22 63 61 6e 63 65 6c 22 29 3b 28 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6f 7c 7c 68 28 74 68 69 73 29 29 26 26 66 28 74 68 69 73 2c 7b 75 72 6c 3a 74 68 69 73 2e 61 63 74 69 6f 6e 2c 74 79 70 65 3a 74 68 69 73 2e 6d 65 74 68 6f 64 7c 7c 22 47 45 54 22 2c 64 61 74 61 3a 65 2e 63 6f 6e 63 61 74 28 6e 28 74 68 69 73 29 2e 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 28 29 29 7d 29 7d 29 7d 29 28 6a 51 75 65 72 79 29 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: unction(i){var e=n(this).data(t)\|\|[],u=n(this).data(r),o=u&&u.hasClass("cancel");(i.preventDefault(),o\|\|h(this))&&f(this,{url:this.action,type:this.method\|\|"GET",data:e.concat(n(this).serializeArray())})})})(jQuery);!function(n){"function"==typeof define&
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 74 2e 6e 61 6d 65 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 72 29 3a 6e 28 74 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 72 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 74 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 74 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 73 73 28 72 29 3a 6e 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 73 73 28 72 29 7d 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6e 2e 65 78 74 65 6e 64 28 6e 2e 76 61 6c 69 Data Ascii: e?this.findByName(t.name).addClass(i).removeClass(r):n(t).addClass(i).removeClass(r)},unhighlight:function(t,i,r){"radio"===t.type?this.findByName(t.name).removeClass(i).addClass(r):n(t).removeClass(i).addClass(r)}},setDefaults:function(t){n.extend(n.vali
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 6f 72 73 28 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 28 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 70 72 65 76 69 6f 75 73 56 61 6c 75 65 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 29 3b 74 68 69 73 2e 72 65 73 65 74 45 6c 65 6d 65 6e 74 73 28 74 29 7d 2c 72 65 73 65 74 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 6e 68 69 67 68 6c 69 67 68 74 29 66 6f 72 28 74 3d 30 3b 6e 5b 74 5d 3b 74 2b 2b 29 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 6e 68 69 67 68 6c 69 67 68 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 5b 74 5d 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2c 22 22 29 2c 74 Data Ascii: ors();var t=this.elements().removeData("previousValue").removeAttr("aria-invalid");this.resetElements(t)},resetElements:function(n){var t;if(this.settings.unhighlight)for(t=0;n[t];t++)this.settings.unhighlight.call(this,n[t],this.settings.errorClass,""),t
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 5c 24 3f 5c 7b 28 5c 64 2b 29 5c 7d 2f 67 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 3f 72 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 2c 74 29 3a 75 2e 74 65 73 74 28 72 29 26 26 28 72 3d 6e 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 72 2e 72 65 70 6c 61 63 65 28 75 2c 22 7b 24 31 7d 22 29 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 29 29 2c 72 7d 2c 66 6f 72 6d 61 74 41 6e 64 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 6e 2c 74 29 3b 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 70 75 73 68 28 7b 6d 65 73 73 61 67 65 3a 69 2c 65 6c 65 6d 65 6e 74 3a 6e 2c 6d 65 74 68 6f 64 3a 74 2e 6d 65 74 68 Data Ascii: \$?\{(\d+)\}/g;return"function"==typeof r?r=r.call(this,i.parameters,t):u.test(r)&&(r=n.validator.format(r.replace(u,"{$1}"),i.parameters)),r},formatAndAdd:function(n,t){var i=this.defaultMessage(n,t);this.errorList.push({message:i,element:n,method:t.meth
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 61 6e 64 6c 65 72 28 22 69 6e 76 61 6c 69 64 2d 66 6f 72 6d 22 2c 5b 74 68 69 73 5d 29 2c 74 68 69 73 2e 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 3d 21 31 29 7d 2c 70 72 65 76 69 6f 75 73 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 7c 7c 22 72 65 6d 6f 74 65 22 2c 6e 2e 64 61 74 61 28 74 2c 22 70 72 65 76 69 6f 75 73 56 61 6c 75 65 22 29 7c 7c 6e 2e 64 61 74 61 28 74 2c 22 70 72 65 76 69 6f 75 73 56 61 6c 75 65 22 2c 7b 6f 6c 64 3a 6e 75 6c 6c 2c 76 61 6c 69 64 3a 21 30 2c 6d 65 73 73 61 67 65 3a 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 74 2c 7b 6d 65 74 68 6f 64 3a 69 7d 29 7d 29 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: andler("invalid-form",[this]),this.formSubmitted=!1)},previousValue:function(t,i){return i="string"==typeof i&&i\|\|"remote",n.data(t,"previousValue")\|\|n.data(t,"previousValue",{old:null,valid:!0,message:this.defaultMessage(t,{method:i})})},destroy:function
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 2d 5d 28 30 3f 5b 31 2d 39 5d 7c 5b 31 32 5d 5b 30 2d 39 5d 7c 33 5b 30 31 5d 29 24 2f 2e 74 65 73 74 28 6e 29 7d 2c 6e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 28 74 29 7c 7c 2f 5e 28 3f 3a 2d 3f 5c 64 2b 7c 2d 3f 5c 64 7b 31 2c 33 7d 28 3f 3a 2c 5c 64 7b 33 7d 29 2b 29 3f 28 3f 3a 5c 2e 5c 64 2b 29 3f 24 2f 2e 74 65 73 74 28 6e 29 7d 2c 64 69 67 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 28 74 29 7c 7c 2f 5e 5c 64 2b 24 2f 2e 74 65 73 74 28 6e 29 7d 2c 6d 69 6e 6c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 6e 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6c 65 6e 67 74 Data Ascii: -](0?[1-9]\|[12][0-9]\|3[01])$/.test(n)},number:function(n,t){return this.optional(t)\|\|/^(?:-?\d+\|-?\d{1,3}(?:,\d{3})+)?(?:\.\d+)?$/.test(n)},digits:function(n,t){return this.optional(t)\|\|/^\d+$/.test(n)},minlength:function(t,i,r){var u=n.isArray(t)?t.lengt
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 76 61 6c 69 64 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 66 69 65 6c 64 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 75 6e 6f 62 74 72 75 73 69 76 65 43 6f 6e 74 61 69 6e 65 72 22 29 2e 66 69 6e 64 28 22 3e 2a 22 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 75 6e 6f 62 74 72 75 73 69 76 65 43 6f 6e 74 61 69 6e 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 76 61 72 20 69 3d 6e 28 74 29 2c 66 3d 69 2e 64 61 74 61 28 75 29 2c 73 3d 6e 2e 70 72 6f 78 79 28 76 2c 74 29 2c 65 3d 72 2e 75 6e 6f 62 74 72 75 73 69 76 65 2e 6f 70 74 69 6f 6e 73 7c 7c 7b 7d 2c 6f Data Ascii: validation-error").addClass("field-validation-valid").removeClass("field-validation-error").removeData("unobtrusiveContainer").find(">*").removeData("unobtrusiveContainer")}}function s(t){var i=n(t),f=i.data(u),s=n.proxy(v,t),e=r.unobtrusive.options\|\|{},o
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 6c 65 63 74 22 29 2e 66 6f 63 75 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 7d 29 3b 24 28 22 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 22 29 2e 66 6f 63 75 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 2d 69 63 6f 6e 22 29 7d 29 3b 24 28 22 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 22 29 2e 62 6c 75 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 22 69 6e 70 75 74 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 22 29 3f 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 2d 69 63 6f 6e 22 29 3a 24 28 74 68 69 73 29 Data Ascii: lect").focus(function(){activeElement=this});$("input, select").focus(function(){$(this).removeClass("validation-error-icon")});$("input, select").blur(function(){$(this).hasClass("input-validation-error")?$(this).addClass("validation-error-icon"):$(this)
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 72 75 6c 65 50 61 72 61 6d 73 2e 4d 69 6e 4c 65 6e 67 74 68 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 28 6f 70 74 69 6f 6e 73 2e 6d 61 78 6c 65 6e 67 74 68 3d 72 75 6c 65 50 61 72 61 6d 73 2e 4d 61 78 4c 65 6e 67 74 68 2c 65 72 72 6f 72 54 65 78 74 3d 65 72 72 6f 72 54 65 78 74 7c 7c 78 56 61 6c 2e 4d 65 73 73 61 67 65 73 2e 53 74 72 69 6e 67 4c 65 6e 67 74 68 5f 4d 61 78 2c 65 72 72 6f 72 54 65 78 74 21 3d 6e 75 6c 6c 26 26 28 6f 70 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 73 3d 7b 6d 61 78 6c 65 6e 67 74 68 3a 6e 2e 66 6f 72 6d 61 74 28 65 72 72 6f 72 54 65 78 74 29 7d 29 29 3a 74 79 70 65 6f 66 20 72 75 6c 65 50 61 72 61 6d 73 2e 4d 61 78 4c 65 6e 67 74 68 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 28 6f 70 74 69 6f 6e 73 2e 6d 69 6e 6c 65 6e 67 74 68 3d Data Ascii: ruleParams.MinLength=="undefined"?(options.maxlength=ruleParams.MaxLength,errorText=errorText\|\|xVal.Messages.StringLength_Max,errorText!=null&&(options.messages={maxlength:n.format(errorText)})):typeof ruleParams.MaxLength=="undefined"?(options.minlength=

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1030	OUT	GET /bundles/modernizr?v=KGygLU_Ygx-27Szx0BNU49_4N_lJnUmNs2RbUl05ER01 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	540	IN	HTTP/1.1 200 OK Content-Length: 1298 Connection: close Content-Type: text/javascript; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	1298	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 75 2c 6e 2c 66 2c 65 2c 6f 2c 63 2c 74 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 72 29 69 66 28 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 7b 69 66 28 75 3d 5b 5d 2c 6e 3d 72 5b 6c 5d 2c 6e 2e 6e 61 6d 65 26 26 28 75 2e 70 75 73 68 28 6e 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 2e 6f 70 74 69 6f 6e 73 26 26 6e 2e 6f 70 74 69 6f 6e 73 2e 61 6c 69 61 73 65 73 26 26 6e 2e 6f 70 74 69 6f 6e 73 2e 61 6c 69 61 73 65 73 2e 6c 65 6e 67 74 68 29 29 66 6f 72 28 66 3d 30 3b 66 3c 6e 2e 6f 70 74 69 6f 6e 73 2e 61 6c 69 61 73 Data Ascii: !function(n,t){function h(n,t){return typeof n===t}function c(){var u,n,f,e,o,c,t;for(var l in r)if(r.hasOwnProperty(l)){if(u=[],n=r[l],n.name&&(u.push(n.name.toLowerCase()),n.options&&n.options.aliases&&n.options.aliases.length))for(f=0;f<n.options.alias

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1026	OUT	GET /bundles/modal?v=-a4TryEKwD6_l2KoDb4knH7rIkrny3QIHNOq2F-8J1I1 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	541	IN	HTTP/1.1 200 OK Content-Length: 16739 Connection: close Content-Type: text/javascript; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	3340	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 6e 29 3a 6e 28 6a 51 75 65 72 79 29 7d 29 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 5b 5d 2c 65 3d 6e 28 64 6f 63 75 6d 65 6e 74 29 2c 75 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 6e 28 77 69 6e 64 6f 77 29 2c 69 3d 5b 5d 2c 74 3d 7b 69 65 51 75 69 72 6b 73 3a 6e 75 6c 6c 2c 6d 73 69 65 3a 2f 6d 73 69 65 2f 2e 74 65 73 74 28 75 29 26 26 21 2f 6f 70 65 72 61 2f 2e 74 65 73 74 28 75 29 2c 6f 70 65 72 61 3a 2f 6f 70 65 72 61 2f 2e 74 65 73 74 28 75 29 7d 3b 74 2e 69 65 36 Data Ascii: (function(n){typeof define=="function"&&define.amd?define(["jquery"],n):n(jQuery)})(function(n){var r=[],e=n(document),u=navigator.userAgent.toLowerCase(),f=n(window),i=[],t={ieQuirks:null,msie:/msie/.test(u)&&!/opera/.test(u),opera:/opera/.test(u)};t.ie6
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 63 6c 69 63 6b 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 75 2e 63 6c 6f 73 65 28 29 7d 29 3b 65 2e 62 69 6e 64 28 22 6b 65 79 64 6f 77 6e 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 75 2e 6f 2e 6d 6f 64 61 6c 26 26 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 39 3f 75 2e 77 61 74 63 68 54 61 62 28 6e 29 3a 75 2e 6f 2e 63 6c 6f 73 65 26 26 75 2e 6f 2e 65 73 63 43 6c 6f 73 65 26 26 6e 2e 6b 65 79 43 6f 64 65 3d 3d 3d 32 37 26 26 28 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 63 6c 6f 73 65 28 29 29 7d 29 3b 66 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 20 6f 72 69 65 6e 74 61 74 69 6f 6e 63 Data Ascii: click.simplemodal",function(n){n.preventDefault();u.close()});e.bind("keydown.simplemodal",function(n){u.o.modal&&n.keyCode===9?u.watchTab(n):u.o.close&&u.o.escClose&&n.keyCode===27&&(n.preventDefault(),u.close())});f.bind("resize.simplemodal orientationc
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 21 68 2e 69 67 6e 6f 72 65 49 66 42 6c 6f 63 6b 65 64 7c 7c 21 6e 28 73 29 2e 64 61 74 61 28 22 62 6c 6f 63 6b 55 49 2e 69 73 42 6c 6f 63 6b 65 64 22 29 29 7b 69 66 28 68 2e 6f 76 65 72 6c 61 79 43 53 53 3d 6e 2e 65 78 74 65 6e 64 28 7b 7d 2c 6e 2e 62 6c 6f 63 6b 55 49 2e 64 65 66 61 75 6c 74 73 2e 6f 76 65 72 6c 61 79 43 53 53 2c 68 2e 6f 76 65 72 6c 61 79 43 53 53 7c 7c 7b 7d 29 2c 72 74 3d 6e 2e 65 78 74 65 6e 64 28 7b 7d 2c 6e 2e 62 6c 6f 63 6b 55 49 2e 64 65 66 61 75 6c 74 73 2e 63 73 73 2c 68 2e 63 73 73 7c 7c 7b 7d 29 2c 68 2e 6f 6e 4f 76 65 72 6c 61 79 43 6c 69 63 6b 26 26 28 68 2e 6f 76 65 72 6c 61 79 43 53 53 2e 63 75 72 73 6f 72 3d 22 70 6f 69 6e 74 65 72 22 29 2c 75 74 3d 6e 2e 65 78 74 65 6e 64 28 7b 7d 2c 6e 2e 62 6c 6f 63 6b 55 49 2e 64 65 Data Ascii: !h.ignoreIfBlocked\|\|!n(s).data("blockUI.isBlocked")){if(h.overlayCSS=n.extend({},n.blockUI.defaults.overlayCSS,h.overlayCSS\|\|{}),rt=n.extend({},n.blockUI.defaults.css,h.css\|\|{}),h.onOverlayClick&&(h.overlayCSS.cursor="pointer"),ut=n.extend({},n.blockUI.de
2024-03-04 16:01:30 UTC	4096	IN	Data Raw: 63 6b 26 26 68 2e 6f 6e 42 6c 6f 63 6b 28 29 3b 63 28 31 2c 73 2c 68 29 3b 70 3f 28 74 3d 77 5b 30 5d 2c 69 3d 6e 28 68 2e 66 6f 63 75 73 61 62 6c 65 45 6c 65 6d 65 6e 74 73 2c 74 29 2c 68 2e 66 6f 63 75 73 49 6e 70 75 74 26 26 73 65 74 54 69 6d 65 6f 75 74 28 61 2c 32 30 29 29 3a 79 28 77 5b 30 5d 2c 68 2e 63 65 6e 74 65 72 58 2c 68 2e 63 65 6e 74 65 72 59 29 3b 68 2e 74 69 6d 65 6f 75 74 26 26 28 61 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 3f 6e 2e 75 6e 62 6c 6f 63 6b 55 49 28 68 29 3a 6e 28 73 29 2e 75 6e 62 6c 6f 63 6b 28 68 29 7d 2c 68 2e 74 69 6d 65 6f 75 74 29 2c 6e 28 73 29 2e 64 61 74 61 28 22 62 6c 6f 63 6b 55 49 2e 74 69 6d 65 6f 75 74 22 2c 61 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 75 29 7b 76 Data Ascii: ck&&h.onBlock();c(1,s,h);p?(t=w[0],i=n(h.focusableElements,t),h.focusInput&&setTimeout(a,20)):y(w[0],h.centerX,h.centerY);h.timeout&&(at=setTimeout(function(){p?n.unblockUI(h):n(s).unblock(h)},h.timeout),n(s).data("blockUI.timeout",at))}}function e(r,u){v
2024-03-04 16:01:30 UTC	1111	IN	Data Raw: 63 65 73 2f 59 65 61 72 6c 69 2f 64 6f 74 73 2e 67 69 66 22 20 77 69 64 74 68 3d 22 31 35 37 70 78 22 20 68 65 69 67 68 74 3d 22 37 70 78 22 20 61 6c 74 3d 22 6c 6f 61 64 69 6e 67 20 64 6f 74 73 22 20 2f 3e 3c 70 3e 4c 6f 61 64 69 6e 67 3c 5c 2f 70 3e 3c 5c 2f 64 69 76 3e 27 2c 74 69 74 6c 65 3a 6e 75 6c 6c 2c 64 72 61 67 67 61 62 6c 65 3a 21 30 2c 74 68 65 6d 65 3a 21 31 2c 63 73 73 3a 7b 70 61 64 64 69 6e 67 3a 30 2c 6d 61 72 67 69 6e 3a 30 2c 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 74 6f 70 3a 22 34 30 25 22 2c 6c 65 66 74 3a 22 33 35 25 22 2c 74 65 78 74 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 63 6f 6c 6f 72 3a 22 23 30 30 30 22 2c 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 63 75 72 73 6f 72 3a 22 77 61 69 74 22 7d 2c 74 68 65 6d 65 64 43 53 53 3a Data Ascii: ces/Yearli/dots.gif" width="157px" height="7px" alt="loading dots" /><p>Loading<\/p><\/div>',title:null,draggable:!0,theme:!1,css:{padding:0,margin:0,width:"auto",top:"40%",left:"35%",textAlign:"center",color:"#000",border:"none",cursor:"wait"},themedCSS:

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:30 UTC	1027	OUT	GET /bundles/Common?v=iv-wMx9JW9PONMa62erC7xTxZejViXqRf7JNiAKcC7Y1 HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:30 UTC	540	IN	HTTP/1.1 200 OK Content-Length: 1459 Connection: close Content-Type: text/javascript; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Cache-Control: public Expires: Tue, 04 Mar 2025 16:01:30 GMT Last-Modified: Mon, 04 Mar 2024 16:01:30 GMT Vary: User-Agent Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:30 UTC	1459	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 4f 4b 28 6e 2c 74 2c 69 2c 72 29 7b 76 61 72 20 75 3d 22 22 2c 65 2c 66 3b 72 3d 72 7c 7c 22 43 6f 6e 66 69 72 6d 22 3b 65 3d 22 4f 4b 22 3b 75 2b 3d 22 3c 64 69 76 20 69 64 3d 27 63 6f 6e 66 69 72 6d 27 3e 22 3b 75 2b 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 68 65 61 64 65 72 27 3e 3c 73 70 61 6e 3e 22 2b 72 2b 22 3c 5c 2f 73 70 61 6e 3e 3c 5c 2f 64 69 76 3e 22 3b 75 2b 3d 22 3c 70 20 63 6c 61 73 73 3d 27 6d 65 73 73 61 67 65 27 3e 22 2b 6e 2b 22 3c 5c 2f 70 3e 22 3b 66 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 6f 6b 27 20 69 64 3d 27 6f 6b 42 75 74 74 6f 6e 27 3e 20 20 3c 5c 2f 64 69 76 3e 22 3b 75 2b 3d 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 62 75 74 74 6f 6e 73 27 3e 22 2b 66 2b 22 3c 5c 2f 64 69 76 3e Data Ascii: function confirmOK(n,t,i,r){var u="",e,f;r=r\|\|"Confirm";e="OK";u+="<div id='confirm'>";u+="<div class='header'><span>"+r+"<\/span><\/div>";u+="<p class='message'>"+n+"<\/p>";f="<div class='ok' id='okButton'> <\/div>";u+="<div class='buttons'>"+f+"<\/div>

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1070	OUT	GET /Images/corner-left.png HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	250	IN	HTTP/1.1 200 OK Content-Length: 1004 Connection: close Content-Type: image/png Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	1004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1065	OUT	GET /Images/rrfill.png HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	249	IN	HTTP/1.1 200 OK Content-Length: 194 Connection: close Content-Type: image/png Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	194	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 0a 08 06 00 00 00 75 d2 34 4a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 dd 03 0f 13 24 12 61 86 42 10 00 00 00 1d 69 54 58 74 43 6f 6d 6d 65 6e 74 00 00 00 00 00 43 72 65 61 74 65 64 20 77 69 74 68 20 47 49 4d 50 64 2e 65 07 00 00 00 19 49 44 41 54 08 d7 63 f8 fd fb f7 4f 26 06 06 06 36 26 06 06 06 06 22 08 00 bc d8 04 03 6b 5d bb ae 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRu4JsRGBbKGDpHYstIME$aBiTXtCommentCreated with GIMPd.eIDATcO&6&"k]IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1071	OUT	GET /Images/corner-right.png HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	250	IN	HTTP/1.1 200 OK Content-Length: 1011 Connection: close Content-Type: image/png Date: Mon, 04 Mar 2024 16:01:30 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	1011	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1069	OUT	GET /Images/background.jpg HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	252	IN	HTTP/1.1 200 OK Content-Length: 67390 Connection: close Content-Type: image/jpeg Date: Mon, 04 Mar 2024 16:01:31 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	3656	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: 13 61 25 c4 f6 49 18 7b 1c c3 0d 39 d5 bb 86 2e b2 eb c9 77 97 d5 4e 7d de 3f 21 ea 1c ef 70 f5 82 73 54 5c 82 73 55 98 c8 84 bc c6 41 0a 00 00 00 00 00 00 00 23 70 4d 2d c6 5b 92 6b 3b a1 10 00 00 0c cd b0 5c 5c e8 4a 19 4c aa 11 64 bb 4c 08 08 2c 6a 4b ab aa 55 49 06 c5 00 4f 68 ab 2c 92 c4 c8 86 82 9f c9 71 31 6e ab b9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 84 d8 49 71 3d 92 58 4d a4 83 68 10 00 00 00 00 00 00 00 00 00 28 0d 24 1a b2 16 5f 95 92 2e c0 28 00 00 00 00 02 01 40 9a 05 00 00 00 00 00 00 00 00 00 00 00 00 02 80 d1 6f 5c 3d 4b 05 ba d9 bf 27 6f 69 a4 55 53 dd 9d a4 c8 ab 3c ce fe 5b b1 bf c8 9d bf 23 6b 8a 7c 0c 89 cc a6 2d be 0b 83 44 00 00 00 00 00 00 00 19 e6 ba Data Ascii: a%I{9.wN}?!psT\sUA#pM-[k;\\JLdL,jKUIOh,q1n$Iq=XMh($_.(@o\=K'oiUS<[#k\|-D
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: d7 99 ea 4b 96 db 77 da 6b 19 ea 9c dd a3 05 e6 58 78 6d 03 13 49 dd da 31 9d e9 a4 94 d3 b7 c8 0b 36 58 e3 70 d8 7e 99 75 a5 9b f2 45 d3 f4 9c d2 44 b6 b2 ea 58 3f 52 c8 9f be c9 ce b1 ef 8b 07 af c1 ae 6f 51 5f 38 c7 0f 53 5e a5 b3 c3 8d 5a 91 36 ab ee 5f 38 66 e4 67 5c 2a d6 7b b8 6e ef 2c e2 9a c3 d6 85 7e 13 6e ee cc 49 7e 57 bb cb a9 d4 35 2e a6 a3 73 8b bc ce 77 b3 53 7c 3c 95 75 6e b8 4a e5 10 a6 dd d8 5e 79 f9 5f e4 ef 32 3d 54 36 d2 75 42 4a 2c 77 b8 c5 99 9c 37 ad 4b cf e1 e9 7a d2 92 51 76 18 71 37 22 78 74 d0 d3 d4 ea 35 29 d3 a2 2d fc 9c 59 4a c5 b1 90 fe af d7 74 da 14 f4 fa 6b 4f 4d 7f e7 5b be a7 99 ca dd 6b ac 7b 29 4a fa 9c bd ef 84 58 66 ef 86 b3 e5 ae 69 b2 ed f7 f8 64 4c c1 ba 5d be af 1e 04 f2 d4 74 2b 51 ba 5d a4 b1 ab 66 36 61 97 Data Ascii: KwkXxmI16Xp~uEDX?RoQ_8S^Z6_8fg\*{n,~nI~W5.swS\|<unJ^y_2=T6uBJ,w7KzQvq7"xt5)-YJtkOM[k{)JXfidL]t+Q]f6a
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: e6 d1 d1 aa ed 25 64 57 55 37 73 bf 03 8f d9 f6 7a ff 00 6f 1f f7 79 bf fc 3a 70 e1 bd 6f 67 ed 4f 33 b2 c8 5d 6b 7f a6 7b db bd 99 5d ad d3 df 9e 58 78 92 b5 37 5d 69 a8 c5 85 8d a7 bf bb 7e 64 65 41 1b 34 db 74 38 9c a0 85 b1 d5 32 6a c6 d3 db 12 35 dd d5 3d 91 83 5a 4e 1a 0d 47 69 30 2a 23 53 bb b2 b9 18 a5 ee da b8 b1 62 95 5b 4e 55 b9 99 ac d7 44 65 a9 d8 0a 00 00 00 00 00 00 00 00 00 04 78 16 33 c9 02 4c 50 bb 3c 24 84 96 c7 27 7b 36 d0 00 00 12 42 6c 24 1a 48 36 12 09 54 28 00 00 00 00 00 00 00 00 0d 2e ee d7 76 57 91 29 37 78 67 db c4 61 86 1b e6 17 60 3c a4 f1 18 62 15 40 2e db b7 11 10 aa bb ac ec da 48 16 70 28 6d db 39 91 0d bc 4a a8 05 e1 69 03 8d 96 14 4c 80 b1 78 10 00 00 00 00 03 00 24 84 d5 0b d8 02 15 9b d1 02 6f 50 17 00 80 5d 00 04 02 Data Ascii: %dWU7szoy:pogO3]k{]Xx7]i~deA4t82j5=ZNGi0*#Sb[NUDex3LP<$'{6Bl$H6T(.vW)7xga`<b@.Hp(m9JiLx$oP]
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: 9d 7a b4 50 a6 ba d2 8c d9 a9 c6 de 91 9b ca 47 83 57 dc 74 e9 9e 44 ea 79 bb 11 d6 7d 57 cb 9d fb 27 8e ef 9b ab d7 6a d7 fc 9a 4f 05 67 8c 1d 78 fd 7c 63 9d e7 6b c7 5e ad 4f 16 f7 59 b4 9d 24 66 d7 37 53 cf 72 5c 2c b0 b8 cf b3 2e ab f3 f5 e3 6a 2e 7f 24 d1 a7 83 b3 6b 65 39 1d 11 a4 c9 5b e2 df 2a 76 a6 97 1c c9 d4 fe aa 94 3b 21 f9 2e d8 19 55 b9 78 26 9e 2d db d9 bf b0 86 ac c2 f2 b7 76 37 83 56 64 1b a9 3d 99 6f 03 15 54 d5 d8 3f 20 33 ce e6 fd bb 4a 9b 13 9e fd f8 61 85 b1 d8 0d f8 61 d5 10 fb 0b 26 a6 f9 61 d7 7c 41 a9 c5 2d 61 d4 dd 92 5c 88 e6 eb 4a eb 73 34 39 55 a8 e3 2b 2f 59 ef 2c 89 ae 2e b7 81 af 5f 96 75 cd ea 46 39 d8 8b ea 9a e7 56 a4 ce 5b 4c c1 64 f1 0d 72 7a 99 42 9b fe 66 a4 ac eb 8b d5 4a fa a6 30 92 fa a5 ac 55 d4 26 a2 9b f8 f8 Data Ascii: zPGWtDy}W'jOgx\|ck^OY$f7Sr\,.j.$ke9[*v;!.Ux&-v7Vd=oT? 3Jaa&a\|A-a\Js49U+/Y,._uF9V[LdrzBfJ0U&
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: 0a 71 aa b7 6d 55 bb db 76 b3 cd cb 95 bf a7 7e 13 27 e5 ee 31 3b 8d 95 b5 4e 01 7a ba 2c 0c 56 67 76 88 d8 00 00 00 00 00 00 02 3b 8b 12 b9 f3 77 9a c4 c6 4a a0 00 31 53 8d 91 2c 4e ee 6d cf 01 22 c8 c3 34 c5 ee a9 c0 b3 51 24 2e a3 b9 96 13 bb 99 a6 af 66 4a c2 aa 9e d8 65 04 c4 55 54 5b 8e 33 e7 37 c0 c0 e6 7b 6d 23 06 95 5b b8 13 0d f9 56 a9 a9 5a 93 5b c9 d6 2f 77 9e ae 99 3f c2 ae 5d d8 1b 9c fe 59 f5 8e 15 69 ea d1 7a e6 5b ad 35 2f 1a ce 58 e5 cf 0e d5 1c 6f 35 eb f0 9a ab fd 35 76 3f 22 7e e0 bc cd 5e bb 50 c9 7b 2e d5 55 27 f0 25 94 8d 49 17 6f 75 90 ba 2a 9a 09 d2 aa a9 94 e8 da ac 1f a5 e6 b3 e8 30 ea aa a1 8b b6 35 24 5d 81 05 01 20 5e 67 dc 4c 83 5c db 65 f1 26 1d 57 9b 6d c3 0d ab cc 89 86 a8 50 80 05 00 00 00 10 0a 00 aa 00 22 05 02 08 00 Data Ascii: qmUv~'1;Nz,Vgv;wJ1S,Nm"4Q$.fJeUT[37{m#[VZ[/w?]Yiz[5/Xo55v?"~^P{.U'%Iou*05$] ^gL\e&WmP"
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: e9 db b0 b9 53 5a e7 ab 06 aa 44 5d a7 ec 8b ec ec 18 82 d5 9c 50 cf 95 d6 b9 c9 d0 ea d2 d4 df 1d a3 21 b5 be 77 9e dd c4 f5 86 aa d4 79 a7 03 d5 75 a5 5e 68 9e aa d7 32 cd 19 ca 7e 1a 4f 26 0d ad 73 b0 2f 3e e0 bd 15 54 81 9f 0b cc 5c 30 55 61 df f2 21 82 ae e0 a7 32 18 99 57 99 0c 3a c5 9f 88 c3 af 72 77 8c 3a 92 0d e8 4c 5e 10 90 12 00 08 dc 0c d2 42 56 d8 8c 2c 25 67 b7 a0 ca 2c f8 81 1c c5 97 81 cd bc cd 46 ad c2 64 b8 92 c4 90 9a 92 4d 34 1a 12 34 d0 82 10 4b 9f 1f 3b 37 01 9e 6b ac 89 c6 fb bb a4 b8 8a ea 51 e5 b6 e1 95 5c db b6 7c f2 c8 d6 74 47 3a f5 f4 e8 9f d9 a9 4a dd cd e9 69 a9 c2 de d1 2f 29 3b be 7e af b9 e8 d3 2b 49 73 3c 1b b8 eb c7 e9 e5 ff 00 93 9d fb 67 87 ca d7 f7 0d 7d 45 54 38 59 25 11 8d f3 6a 83 b7 1f ab 8c 72 bf 65 af 9b 5d 5c Data Ascii: SZD]P!wyu^h2~O&s/>T\0Ua!2W:rw:L^BV,%g,FdM44K;7kQ\\|tG:Ji/);~+Is<g}ET8Y%jre]\
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: 0e 66 ba d0 c9 c9 bd 76 4c 91 65 75 a6 e3 37 b9 b9 5d 69 70 c9 7b 35 5d 53 93 0a dd 2e e3 35 b9 d6 3a ab cc ce e9 3b b6 69 a6 a9 c8 95 2b a7 c0 c9 ff 00 65 23 40 00 00 00 00 00 06 4a e6 e7 55 e6 a7 66 a7 64 2a 80 47 71 2a 56 08 c8 13 35 21 e1 62 f1 07 e9 87 4c 1a 95 a9 11 a2 99 58 85 e8 5d 4d ae 4f 1c b6 b4 da 00 40 00 0a 98 03 20 04 f0 0c f5 02 e7 4f ca 15 90 00 14 8b b0 b0 1d 3c ad 81 7a 01 7a 50 80 53 02 28 00 20 53 00 99 f0 40 5c 65 ae d0 ce 57 2a f4 34 ab fc a8 a5 f6 23 53 95 9d 92 c9 e5 e4 d4 f6 cd 1a ad a1 ba 1e eb bc 0d cf b7 94 ee cd fa f8 de cf 1d 7e db d4 d1 3f af 59 54 b2 a9 5f b8 e9 3e ee 37 bc 62 fd 7c a7 6a f1 ea 69 75 1a 7f f2 68 73 45 f5 51 c4 dc e5 c2 f6 ac d9 ca 77 8f 3b ae 97 67 35 7a 4f 2a 94 ae d6 6f 3f 12 b3 bf 1d 15 3a ff 00 8d 54 Data Ascii: fvLeu7]ip{5]S.5:;i+e#@JUfdGqV5!bLX]MO@ O<zzPS( S@\eW4#S~?YT_>7b\|jiuhsEQw;g5zOo?:T
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: 17 ef f5 1a 69 0b 8f a2 1d 4e ac 95 a0 08 05 02 00 00 00 00 00 00 00 00 08 41 4c 00 98 06 6f 64 09 d5 43 5e 14 2c 9f cc 09 7a 20 4a 40 30 08 05 cf 84 2a 00 00 cd b7 2f a6 fe d2 a8 e6 3d 57 c0 74 26 33 66 31 dc 99 57 bb 96 a7 4f a1 5c aa b4 e9 aa 6f fb 55 b9 96 72 e5 3b 56 7d 65 ef 1f 3f 57 d9 fa 1d 49 6f 4b 95 bf ea e0 e9 3e ff 00 b2 79 62 fd 1f 5d 78 b5 3f c7 f4 ff 00 f6 f5 6b 59 2a 9c af a1 d2 7f ca e5 e6 39 df f8 f3 c5 7c cd 7f 60 ea 25 c2 a3 51 5f 74 36 76 e3 ff 00 2b 8f e9 cf 97 d1 c9 f1 f5 fd 9f 5b 4e 79 b4 6b a6 fb 9c ed 07 7e 3f f2 25 ed 5c 79 7d 36 77 8f 8d af a5 fa 1b 6b 52 b5 52 9b 1c e1 dc 7a 38 df 67 2b 3d 5f 26 bf 72 eb 34 9f fb 6d a8 6f 09 46 39 5e bd a3 52 7e 5c 2a f7 7f 70 aa fd 56 96 e5 1e a6 3d bf 11 ac fc bc d5 7b 8e bc fd f5 ba b3 4d Data Ascii: iNALodC^,z J@0/=Wt&3f1WO\oUr;V}e?WIoK>yb]x?kY9\|`%Q_t6v+[Nyk~?%\y}6wkRRz8g+=_&r4moF9^R~\*pV={M
2024-03-04 16:01:31 UTC	4096	IN	Data Raw: e5 69 e9 4f 23 3d d7 b5 74 4e 38 19 ad d9 ae 94 b6 f0 e0 64 68 be aa f4 19 00 00 00 00 00 04 61 2c f3 e5 97 53 59 46 46 b2 54 94 55 2c 54 0c ab 8c d5 9a b4 b0 cc 64 a0 04 77 0a 5e cc 98 60 00 06 2a 35 1a 8c 95 6b 25 73 00 80 0a 95 87 b9 4c 63 e8 59 f9 4f e8 cb 56 49 74 d2 5c 78 4e ec 8a a9 38 81 6c fa 0e a7 54 9b 64 00 00 a8 05 02 00 00 00 00 02 a5 02 6e 00 80 50 00 00 00 00 11 40 80 50 20 07 9f 57 ab e9 f4 14 ea ea d1 4e e9 4d f7 5e 6f 8f 0e 5c bb 46 6f 3e 3c 7b d7 cb d5 f7 bd 25 2b 43 4a bd 47 9b fb 69 f1 83 b7 1f f8 f7 ff 00 2b 8e 57 ef 9f f8 c7 cc d5 f7 2e b7 59 b4 aa 5a 54 e5 4d fd fb 8e dc 7e 9e 13 f3 5c af d9 ce fe 1e 27 45 7a 8e 6b ae ba ff 00 f2 a9 c7 8b 3a ec 9d 26 33 96 f7 75 a7 4e 94 ae 5b cc de 55 64 6d 2c 12 33 68 df 23 27 b4 5c 69 69 e6 36 Data Ascii: iO#=tN8dha,SYFFTU,Tdw^`*5k%sLcYOVIt\xN8lTdnP@P WNM^o\Fo><{%+CJGi+W.YZTM~\'Ezk:&3uN[Udm,3h#'\ii6

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1063	OUT	GET /Images/logo.png HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	250	IN	HTTP/1.1 200 OK Content-Length: 5361 Connection: close Content-Type: image/png Date: Mon, 04 Mar 2024 16:01:31 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	3658	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 00 6d 08 06 00 00 00 31 88 d0 56 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 14 93 49 44 41 54 78 da ec 9d ed 71 db b8 16 86 b1 3b fb 3f ea 60 79 2b 58 6e 05 66 2a b0 52 81 99 0a a2 54 60 b9 02 c5 15 48 ae 40 76 05 56 2a b0 b6 02 73 2b b0 3a f0 15 e7 02 63 46 97 38 04 40 f0 43 e2 f3 cc 60 76 23 f3 03 00 cf 01 5e 1c 10 a0 52 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRm1VtEXtSoftwareAdobe ImageReadyqe<IDATxq;?`y+XnfRT`H@vVs+:cF8@C`v#^R
2024-03-04 16:01:31 UTC	1703	IN	Data Raw: 16 f9 9b 09 75 b0 89 e4 13 7b 3d 78 31 ff 6f 6c ba 88 dc cf 9c 0e e6 f6 ea 42 f8 6d c2 23 ba e4 44 d1 17 ea 7c a7 79 00 da 30 53 bf 46 81 0e 23 6c e4 2e aa e1 1d e8 19 cf 68 e3 b0 c3 0b eb c3 b1 67 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 85 df a8 02 00 00 18 80 f9 31 dd 1e d3 fd 31 6d 1a 8e 5d 1d 53 7a 4c df 8f 69 df 70 ec fa 98 66 c7 f4 c5 33 3f 89 ce d3 95 3e ff 70 4c 3f 75 de 0e 91 ca 6c ee 71 68 28 73 79 ff bc 92 97 b2 cc 4f c7 b4 73 b8 47 76 4c d7 ba be 54 a5 0c 45 c3 79 a7 f7 2c 2a e7 c6 22 d5 e5 df 35 94 25 a9 e4 c5 a7 0c 21 e5 9f 55 8e b5 b1 8f 68 03 Data Ascii: u{=x1olBm#D\|y0SF#l.hg11m]SzLipf3?>pL?ulqh(syOsGvLTEy,*"5%!Uh

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1071	OUT	GET /Images/btn-retrieve.png HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:31 UTC	250	IN	HTTP/1.1 200 OK Content-Length: 2426 Connection: close Content-Type: image/png Date: Mon, 04 Mar 2024 16:01:31 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:31 UTC	2426	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 1e 08 06 00 00 00 b2 a8 39 cb 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRT9tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:31 UTC	1070	OUT	GET /Images/footer-tile.jpg HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/Content/css?v=yyNGwusDeMzUnH-8r5Gg5u9Bhugskba-HJsokSW0zKw1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372
2024-03-04 16:01:32 UTC	251	IN	HTTP/1.1 200 OK Content-Length: 1179 Connection: close Content-Type: image/jpeg Date: Mon, 04 Mar 2024 16:01:31 GMT Server: Accept-Ranges: bytes ETag: "9c628a4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:56 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:32 UTC	1179	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:32 UTC	1077	OUT	GET /favicon.ico HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z
2024-03-04 16:01:33 UTC	254	IN	HTTP/1.1 200 OK Content-Length: 32038 Connection: close Content-Type: image/x-icon Date: Mon, 04 Mar 2024 16:01:32 GMT Server: Accept-Ranges: bytes ETag: "c4769d4a9e27da1:0" Last-Modified: Tue, 05 Dec 2023 17:12:57 GMT X-Powered-By: ASP.NET
2024-03-04 16:01:33 UTC	3654	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 d2 d1 83 cf cd cc 85 cf cc cb 85 cf cc cb 85 cf cc ca 85 ce cb ca 85 ce cb c9 85 bf bd bc b9 ce cc cb dd cd ca c9 dd cc c8 c6 dd cb c6 c4 dd cc c5 c3 db cb c5 c1 db cb c4 c1 db b6 b0 ae c1 f1 ee ec ff f4 e7 d6 ff f1 e1 ca ff ee e1 d0 ff ea e6 e4 ff e9 e5 e3 ff e9 e4 e2 ff e5 e2 e0 ff fd fb fa ff fc f9 f7 ff fb f6 f4 ff fa f4 f1 ff fa f2 ef ff f9 f1 ed ff f9 f1 ed ff df d7 d4 df f1 ee ee ff db b3 75 ff d0 9d 4c ff d0 ab 6e ff fc Data Ascii: hF 00 %V@@ (B:( @uLn
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: fc f8 f5 ff fc f7 f4 ff bb bc bb 87 00 00 00 05 e7 e7 e7 ff ff ff ff ff ed d4 b4 ff d9 a6 61 ff dd af 72 ff d9 a6 61 ff d8 a5 5f ff d4 ba 98 ff ff ff ff ff ff ff ff ff ff ff fe ff f5 f3 f3 ff ec e9 e6 ff ec e9 e6 ff ec e8 e6 ff f5 f2 f1 ff f5 f2 f1 ff ec e8 e6 ff ec e8 e5 ff ec e8 e4 ff ec e7 e4 ff ec e7 e4 ff ec e6 e3 ff ec e6 e2 ff ec e5 e1 ff ec e5 e1 ff f4 ef ec ff fc f9 f7 ff fc f9 f6 ff fc f8 f6 ff bd bd bd 87 00 00 00 05 e7 e7 e7 ff ff ff ff ff ed d5 b6 ff db a9 67 ff de b2 77 ff db aa 69 ff da a9 67 ff d5 bd 9c ff ff ff ff ff ff ff ff ff ff ff ff ff f6 f4 f3 ff ec ea e6 ff ed e9 e6 ff ec e9 e6 ff f5 f3 f1 ff f5 f3 f1 ff ec e8 e6 ff ec e8 e5 ff ec e7 e5 ff ec e7 e3 fd ec e8 e4 fd ec e7 e3 ff ec e6 e2 ff ec e5 e1 ff eb e4 e1 ff f4 ef ec fb fc f9 f7 Data Ascii: ara_gwig
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: f5 f1 ef ff f5 f1 ee ff f5 f0 ed ff f4 ef ed ff f4 ef ed ff f4 ef ed ff f7 f2 f0 ff fb f5 f3 ff fb f5 f3 ff fb f5 f3 ff fb f5 f3 ff fb f5 f3 ff fb f6 f3 ff 89 87 87 9f db db da ff fd fc fa ff fd fc fa ff f2 e5 d1 ff d2 a0 53 ff d1 9e 4f ff d2 a2 55 ff d7 ac 67 ff d1 9e 4e ff d0 9d 4c ff d1 9f 50 ff d0 c3 af ff fd fa f8 ff fd fa f9 ff fd fa f8 ff fd fa f8 ff fd f9 f8 ff f0 ea e7 ff ec e5 e2 ff eb e5 e1 ff eb e5 e1 ff dd d7 d2 ff d8 d5 d3 ff fd fd fd ff fe fd fc ff fd fd fc ff fe fc fb ff fe fc fb ff fd fb fa ff fd fb fa ff fd fa f9 ff fd f9 f8 ff fd f9 f8 ff fc f9 f7 ff fc f8 f7 ff fc f8 f6 ff fc f7 f5 ff fc f7 f5 ff fc f7 f5 ff fc f7 f4 ff fc f6 f4 ff fc f6 f4 ff fc f6 f4 ff fc f6 f4 ff fc f6 f4 ff fc f7 f4 ff fc f7 f4 ff 8a 88 88 9f db da da ff fc fc fa Data Ascii: SOUgNLP
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: ff ff ff ff f6 ea da ff db a9 6a ff db a8 66 ff db ab 6c ff df b5 7c ff da a8 66 ff da a7 64 ff db aa 68 ff d2 c6 b5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 ef ed ff ed ea e7 ff ed e9 e7 ff ec e9 e7 ff ec e9 e7 ff ec e9 e6 ff f9 f9 f8 ff f9 f9 f8 ff ed ea e6 ff ed e9 e7 ff ed ea e7 ff ed ea e7 ff ed e9 e7 ff ed ea e7 ff ed ea e7 ff ed e9 e7 ff ec ea e6 ff ec e9 e5 ff ec e9 e5 ff eb e7 e2 ff ec e7 e3 fd ec e7 e3 fd f0 ed e9 ff fd f9 f7 ff fc f8 f7 ff fc f9 f6 ff fb f8 f5 ff fa f7 f5 ff c8 c8 c8 c3 00 00 00 0b 00 00 00 03 db db db ff ff ff ff ff ff ff ff ff f6 ea db ff dc ac 6e ff dc aa 6b ff dd ae 71 ff e1 b6 80 ff db aa 6b ff db aa 6a ff dc ac 6c ff d3 c7 b6 ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff f8 f7 f6 Data Ascii: jfl\|fdhnkqkjl
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: fc f8 f4 ff fc f7 f4 ff fb f6 f4 ff fb f6 f4 ff fb f6 f3 ff fb f6 f3 ff fc f5 f3 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f5 f2 ff fb f4 f2 ff fb f4 f1 ff fa f4 f1 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f4 f0 ff fa f3 f0 ff f9 f3 f0 ff fa f3 f0 ff ba b5 b3 ff fe fc fc ff fe fc fb ff fe fc fb ff fd fb fa ff fd fb fa ff fd fa f9 ff fd fa f8 ff fd f9 f8 ff fc f8 f6 ff fc f8 f6 ff fc f7 f5 ff fc f7 f4 ff fb f6 f4 ff fb f5 f3 ff fb f5 f2 ff fb f4 f1 ff fa f4 f1 ff fa f3 f0 ff fa f3 ef ff fa f2 ef ff fa f2 ee ff fa f1 ee ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff f9 f0 ed ff f9 f0 ec ff f9 f0 ec ff f9 f0 ec ff f9 f0 ed ff f9 f1 ed ff f9 f1 ed ff f9 f1 ed ff 3d 3d 3d 7f d0 d0 d0 ff fd f8 f6 ff fd f8 f6 ff fd f8 f6 ff fd f8 f6 ff fc f9 f6 ff fc f8 f5 ff fc f8 f5 Data Ascii: ===
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: d1 9c 4a ff dc b4 78 ff d3 a2 56 ff d0 9d 4b ff d0 9d 4a ff d2 9f 51 ff d1 9e 4f ff d0 d0 d0 ff fd fb fa ff fd fb fa ff fd fb fa ff fd fb fa ff fd fb fa ff fd fa f9 ff fd fb f9 ff ec e7 e2 ff ec e7 e2 ff ec e6 e2 ff ec e6 e2 ff ec e6 e2 ff ec e5 e2 ff b2 ad ab ff e2 e2 e1 ff fe fe fd ff e2 e1 e1 ff fe fd fd ff e2 e1 e0 ff fe fd fc ff e2 e1 e0 ff fe fc fc ff e2 e0 df ff fe fc fb ff e2 df df ff fd fb fa ff e1 df df ff fd fa f9 ff e1 df de ff fd fa f9 ff e1 df dd ff fd f9 f8 ff e1 de dd ff fd f9 f7 ff e1 de dc ff fc f9 f7 ff e0 dd dc ff fc f8 f7 ff e0 dd db ff fc f8 f6 ff e0 dd db ff fc f8 f6 ff e0 dd db ff fc f8 f6 ff e0 dd db ff fc f8 f7 ff e0 dd dc ff 3f 3f 3f 7f d0 d0 d0 ff fd fd fb ff fd fd fb ff fd fd fb ff fd fd fb ff d6 a7 5e ff d5 a3 59 ff d4 a4 5a Data Ascii: JxVKJQO???^YZ
2024-03-04 16:01:33 UTC	4096	IN	Data Raw: d6 a2 5b ff e2 bb 85 ff d9 a8 65 ff d7 a2 5b ff d6 a2 5b ff d9 a6 61 ff d6 a3 5a ff d0 d0 d0 ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff fe ff fe ff ff ff fe ff fe fe fe ff ec e9 e6 ff ed e9 e6 ff ec e8 e6 ff ec e9 e6 ff ec e8 e6 ff ec e8 e6 ff ec e8 e6 ff ec e8 e6 ff fe fd fd ff fe fd fd ff ec e8 e6 ff ec e8 e5 ff ec e8 e4 ff ec e7 e4 ff ec e7 e4 ff ec e7 e4 ff ec e7 e4 ff ec e7 e3 ff ec e7 e3 ff ec e7 e2 ff ec e7 e2 ff ec e6 e2 ff ec e6 e2 ff ec e5 e2 ff ec e6 e2 ff ec e5 e2 ff ec e5 e2 ff eb e5 e2 ff ec e5 e1 ff ec e5 e0 ff fd f8 f6 ff fc f9 f6 ff fc f8 f6 ff fc f8 f5 ff fc f7 f5 ff fc f7 f4 ff fc f7 f4 ff c4 c4 c4 ff 00 00 00 0f 00 00 00 09 ff ff ff 01 d0 d0 d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff db ab 69 ff d9 a6 62 ff d9 a7 62 Data Ascii: [e[[aZibb
2024-03-04 16:01:33 UTC	3808	IN	Data Raw: dc a8 68 ff dc ab 6e ff db a7 66 ff db a6 64 ff da a6 63 ff dc aa 6b ff de b0 74 ff d0 d0 d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ed ea e7 ff ea e7 e4 ff ea e7 e4 ff ea e7 e4 ff ea e7 e4 ff ea e7 e4 ff e4 e0 de ff d6 d3 d0 ff d4 d1 ce ff d8 d5 d2 ff da d7 d4 ff e8 e8 e8 ff e7 e7 e7 ff e3 e3 e3 ff dd dd dd ff d5 d5 d5 ff c6 c6 c6 ff bc bc bc ff e7 e7 e7 ff ff ff ff 01 ff ff ff 01 ff ff ff 01 d0 d0 d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff dd ad 70 ff dc a8 69 ff dc a9 6a Data Ascii: hnfdcktpij

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-04 16:01:33 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=98639 Date: Mon, 04 Mar 2024 16:01:33 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:34 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-04 16:01:34 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=98657 Date: Mon, 04 Mar 2024 16:01:34 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-04 16:01:34 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:42 UTC	1169	OUT	GET /Content/GetContent?contentName=FAQ HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905.6\|1709568091905.6
2024-03-04 16:01:42 UTC	486	IN	HTTP/1.1 200 OK Content-Length: 9527 Connection: close Content-Type: text/html; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:42 GMT Server: Cache-Control: private Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:42 UTC	3407	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 41 51 20 2d 20 4f 6e 6c 69 6e 65 20 52 65 74 72 69 65 76 61 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <title>FAQ - Online Retrieval</title> <link href="/favicon.ico" rel="shortcut icon" type="image/x-icon"/> <meta name="viewport" content="width=device-width"/> <link
2024-03-04 16:01:42 UTC	4096	IN	Data Raw: 64 65 76 61 64 6d 69 6e 2e 66 69 6c 65 74 61 78 65 73 2e 63 6f 6d 2f 64 72 2f 63 6f 6e 74 65 6e 74 73 74 79 6c 65 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 2c 20 70 72 69 6e 74 22 20 2f 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 3c 68 32 3e 49 73 20 74 68 69 73 20 73 69 74 65 20 73 65 63 75 72 65 3f 3c 2f 68 32 3e 0d 0a 3c 70 3e 47 72 65 61 74 6c 61 6e 64 26 61 70 6f 73 3b 73 20 57 2d 32 20 26 61 6d 70 3b 20 31 30 39 39 20 52 65 74 72 69 65 76 61 6c 20 69 73 20 73 65 63 75 72 65 64 20 77 69 74 68 20 61 20 4e 65 74 77 6f 72 6b 20 53 6f 6c 75 74 69 6f 6e 73 20 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 2e 20 41 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 73 65 6e 74 20 75 73 65 73 20 48 Data Ascii: devadmin.filetaxes.com/dr/contentstyle.css" media="screen, print" /></div><div class="content"><h2>Is this site secure?</h2><p>Greatland's W-2 & 1099 Retrieval is secured with a Network Solutions SSL Certificate. All information sent uses H
2024-03-04 16:01:42 UTC	2024	IN	Data Raw: 74 74 65 6d 70 74 73 2c 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 77 69 6c 6c 20 62 65 63 6f 6d 65 20 6c 6f 63 6b 65 64 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 70 75 72 70 6f 73 65 73 2e 20 59 6f 75 20 63 61 6e 20 72 65 74 75 72 6e 20 62 61 63 6b 20 74 6f 20 74 68 65 20 73 69 74 65 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 20 61 66 74 65 72 20 33 30 20 6d 69 6e 75 74 65 73 20 61 6e 64 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 77 69 6c 6c 20 62 65 20 75 6e 6c 6f 63 6b 65 64 2e 3c 2f 70 3e 0d 0a 3c 68 32 3e 44 6f 20 49 20 6e 65 65 64 20 41 64 6f 62 65 20 41 63 72 6f 62 61 74 20 52 65 61 64 65 72 20 74 6f 20 70 72 69 6e 74 20 6d 79 20 57 2d 32 20 6f 72 20 31 30 39 39 20 66 6f 72 6d 3f 20 49 66 20 73 6f 2c 20 68 6f 77 20 64 6f 20 49 20 67 65 74 20 74 68 69 Data Ascii: ttempts, your account will become locked for security purposes. You can return back to the site and try again after 30 minutes and your account will be unlocked.</p><h2>Do I need Adobe Acrobat Reader to print my W-2 or 1099 form? If so, how do I get thi

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Windows Analysis Report
https://retrieval.greatland.com/afe8ce2d-9b07-4f37-bfe3-d5380beea89a

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:44 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1709568071017&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-03-04 16:01:44 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-03-04 16:01:44 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-03-04 16:01:44 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D56CB16984A54063ABD8F042A941C3A1 Ref B: PAOEDGE0615 Ref C: 2024-03-04T16:01:44Z Date: Mon, 04 Mar 2024 16:01:44 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1709568104.39d4e073

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:46 UTC	1172	OUT	GET /Content/GetContent?contentName=About_Us HTTP/1.1 Host: retrieval.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RecipientId=37937670; RecipientGUID=afe8ce2d-9b07-4f37-bfe3-d5380beea89a; SecurityToken=; __RequestVerificationToken=23bKN6Qvm8QukJjHGIGWrooYRkhe3m3qDoWFsFYcg-eZ2nGPWGeEuZu5pYJaC9c9BUpK_ichB59mhC9ObxPtSiliA2cjaICH_e6uiYr7wM41; ARRAffinity=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ARRAffinitySameSite=02c4ece4e8f95366a2921e60c4d13697249ca28f8e9a77cbc3da0d768ff15372; ai_user=HnCB+\|2024-03-04T16:01:31.092Z; ai_session=5tme5\|1709568091905\|1709568102902.3
2024-03-04 16:01:46 UTC	486	IN	HTTP/1.1 200 OK Content-Length: 4574 Connection: close Content-Type: text/html; charset=utf-8 Date: Mon, 04 Mar 2024 16:01:46 GMT Server: Cache-Control: private Strict-Transport-Security: max-age=63072000 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Frame-Options: SAMEORIGIN X-AspNetMvc-Version: 5.2 X-AspNet-Version: 4.0.30319 Request-Context: appId=cid-v1:67d67441-da85-4964-bc49-2ce4bb17dd65 X-Powered-By: ASP.NET
2024-03-04 16:01:46 UTC	3407	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 62 6f 75 74 20 55 73 20 2d 20 4f 6e 6c 69 6e 65 20 52 65 74 72 69 65 76 61 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 0d 0a 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <title>About Us - Online Retrieval</title> <link href="/favicon.ico" rel="shortcut icon" type="image/x-icon"/> <meta name="viewport" content="width=device-width"/>
2024-03-04 16:01:46 UTC	1167	IN	Data Raw: 52 65 74 72 69 65 76 61 6c 3c 2f 68 32 3e 0d 0a 3c 70 3e 57 2d 32 2c 20 31 30 39 39 20 26 61 6d 70 3b 20 31 30 39 35 20 52 65 74 72 69 65 76 61 6c 20 69 73 20 61 20 73 65 72 76 69 63 65 20 6f 70 65 72 61 74 65 64 20 62 79 20 47 72 65 61 74 6c 61 6e 64 2c 20 74 68 65 20 6c 65 61 64 69 6e 67 20 70 72 6f 76 69 64 65 72 20 6f 66 20 57 2d 32 2c 20 31 30 39 39 20 61 6e 64 20 31 30 39 35 20 70 72 6f 64 75 63 74 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 20 66 6f 72 20 73 6d 61 6c 6c 20 61 6e 64 20 6d 65 64 69 75 6d 20 73 69 7a 65 20 62 75 73 69 6e 65 73 73 65 73 2e 20 47 72 65 61 74 6c 61 6e 64 20 73 70 65 63 69 61 6c 69 7a 65 73 20 69 6e 20 57 2d 32 2c 20 31 30 39 39 20 61 6e 64 20 31 30 39 35 20 72 65 70 6f 72 74 69 6e 67 20 61 6e 64 20 6d 61 6e 79 20 62 75 73 Data Ascii: Retrieval</h2><p>W-2, 1099 & 1095 Retrieval is a service operated by Greatland, the leading provider of W-2, 1099 and 1095 products and services for small and medium size businesses. Greatland specializes in W-2, 1099 and 1095 reporting and many bus

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:57 UTC	653	OUT	GET /about-us-old/ HTTP/1.1 Host: www.greatland.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:01:58 UTC	1292	IN	HTTP/1.1 200 OK Date: Mon, 04 Mar 2024 16:01:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-content-type-options: nosniff x-permitted-cross-domain-policies: none set-cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; Expires=Wed, 04 Mar 2026 16:01:57 GMT; Path=/; Secure; SameSite=None set-cookie: athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Expires=Mon, 04 Mar 2024 16:31:57 GMT; Path=/; Secure; HttpOnly; SameSite=None set-cookie: Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; Expires=Mon, 11 Mar 2024 16:01:58 GMT; Path=/; HttpOnly set-cookie: XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; path=/; Secure; SameSite=none set-cookie: SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; Path=/; Secure; SameSite=Strict set-cookie: SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507; Expires=Mon, 11 Mar 2024 16:01:58 GMT; Path=/; Secure; HttpOnly; SameSite=None expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache strict-transport-security: max-age=0 x-frame-options: deny x-request-id: 6d7dfab670c3f53d79e4d85a0c314f5c
2024-03-04 16:01:58 UTC	1019	IN	Data Raw: 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 64 6e 31 31 2e 62 69 67 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 73 2d 33 30 75 77 36 77 68 6c 64 30 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 61 73 3d 66 6f 6e 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 61 73 3d 66 6f 6e 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f 75 73 2c 20 3c 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 61 73 3d 66 6f 6e 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 61 6e 6f 6e 79 6d 6f Data Ascii: link: <https://cdn11.bigcommerce.com/s-30uw6whld0>; rel=preconnect; as=font; crossorigin=anonymous, <https://fonts.googleapis.com/>; rel=preconnect; as=font; crossorigin=anonymous, <https://fonts.gstatic.com/>; rel=preconnect; as=font; crossorigin=anonymo
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 41 62 6f 75 74 20 55 73 20 2d 20 4f 4c 44 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 31 31 2e 62 69 67 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 73 2d 33 30 75 77 36 77 68 6c 64 30 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d Data Ascii: 7ffa<!DOCTYPE html><html class="no-js" lang="en"> <head> <title>About Us - OLD</title> <link rel="dns-prefetch preconnect" href="https://cdn11.bigcommerce.com/s-30uw6whld0" crossorigin><link rel="dns-prefetch preconnect" href=
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 61 74 75 72 65 73 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 77 69 6e 64 6f 77 2e 66 65 74 63 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 77 69 6e 64 6f 77 2e 55 52 4c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 77 69 6e 64 6f 77 2e 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 77 69 6e 64 6f 77 2e 57 65 61 6b 4d 61 70 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 6f 62 6a 65 63 74 2d 66 69 74 20 73 75 70 70 6f 72 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 26 26 20 28 27 6f 62 6a 65 63 74 46 69 74 27 20 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 Data Ascii: atures() { return window.Promise && window.fetch && window.URL && window.URLSearchParams && window.WeakMap // object-fit support && ('objectFit' in document.documentEle
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 63 69 6c 2f 34 36 36 38 63 35 38 30 2d 66 38 63 63 2d 30 31 33 62 2d 36 65 33 63 2d 32 32 36 63 61 39 36 30 65 33 31 38 2f 65 2f 33 62 33 62 33 65 63 30 2d 66 38 63 39 2d 30 31 33 62 2d 34 30 33 66 2d 34 61 35 33 30 34 34 66 39 32 34 64 2f 63 73 73 2f 74 68 65 6d 65 2d 63 61 62 39 63 34 64 30 2d 62 38 38 31 2d 30 31 33 63 2d 63 32 34 32 2d 32 36 32 31 63 36 39 66 32 63 64 37 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 74 61 72 74 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 66 6f 72 20 61 6e 61 6c 79 74 69 63 73 5f 67 6f 6f 67 6c 65 61 6e 61 6c 79 74 69 63 73 20 2d 2d 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 6e 61 6c 79 Data Ascii: cil/4668c580-f8cc-013b-6e3c-226ca960e318/e/3b3b3ec0-f8c9-013b-403f-4a53044f924d/css/theme-cab9c4d0-b881-013c-c242-2621c69f2cd7.css" rel="stylesheet"> ... Start Tracking Code for analytics_googleanalytics --><script> !function(){var analy
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 61 6c 79 74 69 63 73 22 3a 20 7b 22 65 6e 68 61 6e 63 65 64 4c 69 6e 6b 41 74 74 72 69 62 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 68 61 6e 63 65 64 45 63 6f 6d 6d 65 72 63 65 22 3a 74 72 75 65 2c 22 69 6e 63 6c 75 64 65 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 73 65 6e 64 55 73 65 72 49 64 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 49 64 22 3a 22 55 41 2d 34 37 32 31 39 35 34 2d 31 22 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 5b 5d 2c 22 6d 65 74 72 69 63 73 22 3a 5b 5d 7d 20 7d 2c 20 7b 7d 2c 20 22 61 6e 61 6c 79 74 69 63 73 22 29 3b 0a 20 20 20 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 69 64 65 6e 74 69 66 79 28 29 3b 0a 20 20 20 20 20 20 20 20 61 6e 61 6c 79 74 69 63 73 2e 70 61 67 65 28 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 Data Ascii: alytics": {"enhancedLinkAttribution":true,"enhancedEcommerce":true,"includeSearch":true,"sendUserId":true,"trackingId":"UA-4721954-1","dimensions":[],"metrics":[]} }, {}, "analytics"); analytics.identify(); analytics.page();
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 64 33 31 48 70 51 46 4e 6b 2f 61 78 39 4f 4c 5a 70 6c 4b 52 39 36 34 39 66 47 55 38 33 51 65 68 75 76 46 50 6d 53 6d 47 62 59 3d 22 20 2f 3e 0a 20 0a 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 32 33 38 34 32 34 30 35 42 34 36 31 30 46 36 33 45 44 31 31 39 45 35 43 46 36 36 33 43 33 30 36 22 20 2f 3e 0a 0a 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 79 5f 6b 65 79 22 20 63 6f 6e 74 65 6e 74 3d 22 66 34 66 38 30 39 38 32 35 36 61 38 36 63 62 62 22 20 2f 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 0a 20 20 20 20 20 20 20 20 63 5b 61 5d 3d 63 5b Data Ascii: d31HpQFNk/ax9OLZplKR9649fGU83QehuvFPmSmGbY=" /> <meta name="msvalidate.01" content="23842405B4610F63ED119E5CF663C306" /> <meta name="y_key" content="f4f8098256a86cbb" /><script type="text/javascript"> (function(c,l,a,r,i,t,y){ c[a]=c[
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 3d 20 27 2f 2f 72 65 63 73 2e 68 61 77 6b 73 65 61 72 63 68 2e 63 6f 6d 27 3b 0d 0a 48 61 77 6b 53 65 61 72 63 68 2e 43 6c 69 65 6e 74 47 75 69 64 20 3d 20 27 32 63 65 37 65 65 32 30 63 33 61 32 34 30 34 33 61 33 37 30 31 34 35 36 31 32 39 33 61 31 36 62 27 3b 0d 0a 7d 28 77 69 6e 64 6f 77 2e 48 61 77 6b 53 65 61 72 63 68 20 3d 20 77 69 6e 64 6f 77 2e 48 61 77 6b 53 65 61 72 63 68 20 7c 7c 20 7b 7d 29 29 3b 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 73 2c 20 69 64 2c 20 65 6e 29 20 7b 0d 0a 76 61 72 20 6a 73 2c 20 68 73 6a 73 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 3b 0d 0a 69 66 20 28 64 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 64 29 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 0d 0a 6a Data Ascii: = '//recs.hawksearch.com';HawkSearch.ClientGuid = '2ce7ee20c3a24043a37014561293a16b';}(window.HawkSearch = window.HawkSearch \|\| {}));(function (d, s, id, en) {var js, hsjs = d.getElementsByTagName(s)[0];if (d.getElementById(id)) { return; }j
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 73 74 79 6c 65 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 63 73 73 27 3b 0d 0a 20 20 20 20 73 74 79 6c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 63 73 73 29 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 61 70 70 73 2e 62 69 67 63 6f 6d 6d 65 72 63 65 2e 63 6f 6d 2f 62 6f 64 6c 2d 65 76 65 6e 74 73 2f 69 6e 64 65 78 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 63 66 61 73 79 6e 63 3d 22 66 61 6c 73 65 22 3e 0a 20 20 20 77 69 6e 64 6f 77 2e 62 6f 64 6c 20 3d 20 4a 53 4f Data Ascii: style); style.type = 'text/css'; style.appendChild(document.createTextNode(css));</script> <script data-cfasync="false" src="https://microapps.bigcommerce.com/bodl-events/index.js"></script> <script data-cfasync="false"> window.bodl = JSO
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 6f 67 67 6c 65 3d 22 6d 65 6e 75 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 4d 65 6e 75 2d 74 6f 67 67 6c 65 49 63 6f 6e 22 3e 54 6f 67 67 6c 65 20 6d 65 6e 75 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 6f 67 6f 20 68 65 61 64 65 72 2d 6c 6f 67 6f 2d 2d 6c 65 66 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 65 61 74 6c 61 6e 64 2e 63 6f 6d 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 6c 6f 67 6f 2d 69 6d Data Ascii: oggle="menu"> <span class="mobileMenu-toggleIcon">Toggle menu</span> </a> <div class="header-logo header-logo--left"> <a href="https://www.greatland.com/"> <div class="header-logo-im
2024-03-04 16:01:58 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 50 61 67 65 73 2d 6c 69 73 74 20 6e 61 76 50 61 67 65 73 2d 6c 69 73 74 2d 64 65 70 74 68 2d 6d 61 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 50 61 67 65 73 2d 69 74 65 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 50 61 67 65 73 2d 61 63 74 69 6f 6e 20 6e 61 76 50 61 67 65 73 2d 61 63 74 69 6f 6e 2d 64 65 70 74 68 2d 6d 61 78 20 68 61 73 2d 73 75 62 4d 65 6e 75 20 69 73 2d 72 6f 6f 74 22 0d 0a 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 65 61 74 6c 61 6e 64 2e 63 6f 6d 2f 73 68 6f 70 2f 22 20 Data Ascii: </div> <ul class="navPages-list navPages-list-depth-max"> <li class="navPages-item"> <a class="navPages-action navPages-action-depth-max has-subMenu is-root" href="https://www.greatland.com/shop/"

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:58 UTC	546	OUT	GET /bodl-events/index.js HTTP/1.1 Host: microapps.bigcommerce.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:01:58 UTC	858	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqebmstQBybJMhS_HOA9UjS0BZckSKPJ2GdlSujPkc0rlxNlyYeaqiAK_yNmGVgPsR1HcZmP8r5YQ Date: Mon, 04 Mar 2024 16:01:58 GMT Cache-Control: no-cache, max-age=0 Expires: Mon, 04 Mar 2024 16:01:58 GMT Last-Modified: Fri, 09 Feb 2024 13:39:50 GMT ETag: "1941131612d2eaa8dab57ffbd65c5c0e" x-goog-generation: 1707485990471504 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 10515 Content-Type: application/javascript; charset=UTF-8 x-goog-hash: crc32c=9spBHw== x-goog-hash: md5=GUETFhLS6qjatX/71lxcDg== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 10515 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Server: UploadServer Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-04 16:01:58 UTC	394	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 6f 64 6c 45 76 65 6e 74 73 3d 28 28 29 3d 3e 7b 76 61 72 20 6e 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 45 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 72 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 6f 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 69 65 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 61 65 3d 28 74 2c 65 29 3d 3e 28 29 3d 3e 28 65 7c 7c 74 28 28 65 3d 7b 65 78 70 6f 72 74 73 Data Ascii: "use strict";var bodlEvents=(()=>{var ne=Object.create;var E=Object.defineProperty;var re=Object.getOwnPropertyDescriptor;var oe=Object.getOwnPropertyNames;var ie=Object.getPrototypeOf,se=Object.prototype.hasOwnProperty;var ae=(t,e)=>()=>(e\|\|t((e={exports
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 22 29 66 6f 72 28 6c 65 74 20 6f 20 6f 66 20 6f 65 28 65 29 29 21 73 65 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 6f 21 3d 3d 6e 26 26 45 28 74 2c 6f 2c 7b 67 65 74 3a 28 29 3d 3e 65 5b 6f 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 72 3d 72 65 28 65 2c 6f 29 29 7c 7c 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 64 65 3d 28 74 2c 65 2c 6e 29 3d 3e 28 6e 3d 74 21 3d 6e 75 6c 6c 3f 6e 65 28 69 65 28 74 29 29 3a 7b 7d 2c 4e 28 65 7c 7c 21 74 7c 7c 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 45 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 3a 6e 2c 74 29 29 2c 6c 65 3d 74 3d 3e 4e 28 45 28 7b 7d 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 Data Ascii: nction")for(let o of oe(e))!se.call(t,o)&&o!==n&&E(t,o,{get:()=>e[o],enumerable:!(r=re(e,o))\|\|r.enumerable});return t};var de=(t,e,n)=>(n=t!=null?ne(ie(t)):{},N(e\|\|!t\|\|!t.__esModule?E(n,"default",{value:t,enumerable:!0}):n,t)),le=t=>N(E({},"__esModule",{v
2024-03-04 16:01:58 UTC	1144	IN	Data Raw: 78 4c 69 73 74 65 6e 65 72 73 22 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 20 49 74 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 6e 65 67 61 74 69 76 65 20 6e 75 6d 62 65 72 2e 20 52 65 63 65 69 76 65 64 20 27 2b 74 2b 22 2e 22 29 3b 44 3d 74 7d 7d 29 3b 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 3d 3d 76 6f 69 64 20 30 7c 7c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 3d 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 2e 5f 65 76 65 6e 74 73 29 26 26 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 3d 30 29 2c 74 68 69 73 2e 5f 6d 61 78 4c 69 73 74 65 6e 65 72 Data Ascii: xListeners" is out of range. It must be a non-negative number. Received '+t+".");D=t}});s.init=function(){(this._events===void 0\|\|this._events===Object.getPrototypeOf(this)._events)&&(this._events=Object.create(null),this._eventsCount=0),this._maxListener
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 3d 74 2e 5f 65 76 65 6e 74 73 2c 61 3d 3d 3d 76 6f 69 64 20 30 3f 28 61 3d 74 2e 5f 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 3d 30 29 3a 28 61 2e 6e 65 77 4c 69 73 74 65 6e 65 72 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 2e 65 6d 69 74 28 22 6e 65 77 4c 69 73 74 65 6e 65 72 22 2c 65 2c 6e 2e 6c 69 73 74 65 6e 65 72 3f 6e 2e 6c 69 73 74 65 6e 65 72 3a 6e 29 2c 61 3d 74 2e 5f 65 76 65 6e 74 73 29 2c 69 3d 61 5b 65 5d 29 2c 69 3d 3d 3d 76 6f 69 64 20 30 29 69 3d 61 5b 65 5d 3d 6e 2c 2b 2b 74 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 69 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 69 3d 61 5b 65 5d 3d 72 3f 5b 6e 2c 69 5d 3a 5b 69 2c 6e 5d 3a Data Ascii: =t._events,a===void 0?(a=t._events=Object.create(null),t._eventsCount=0):(a.newListener!==void 0&&(t.emit("newListener",e,n.listener?n.listener:n),a=t._events),i=a[e]),i===void 0)i=a[e]=n,++t._eventsCount;else if(typeof i=="function"?i=a[e]=r?[n,i]:[i,n]:
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 61 2c 69 2c 6c 3b 69 66 28 6d 28 6e 29 2c 6f 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 2c 6f 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 72 3d 6f 5b 65 5d 2c 72 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 72 3d 3d 3d 6e 7c 7c 72 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 6e 29 2d 2d 74 68 69 73 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 3d 3d 3d 30 3f 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 28 64 65 6c 65 74 65 20 6f 5b 65 5d 2c 6f 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 72 2e 6c 69 Data Ascii: r=function(e,n){var r,o,a,i,l;if(m(n),o=this._events,o===void 0)return this;if(r=o[e],r===void 0)return this;if(r===n\|\|r.listener===n)--this._eventsCount===0?this._events=Object.create(null):(delete o[e],o.removeListener&&this.emit("removeListener",e,r.li
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 6f 6e 20 57 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 5f 65 76 65 6e 74 73 3b 69 66 28 72 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 72 5b 65 5d 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 76 6f 69 64 20 30 3f 5b 5d 3a 74 79 70 65 6f 66 20 6f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 3f 5b 6f 2e 6c 69 73 74 65 6e 65 72 7c 7c 6f 5d 3a 5b 6f 5d 3a 6e 3f 63 65 28 6f 29 3a 71 28 6f 2c 6f 2e 6c 65 6e 67 74 68 29 7d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 57 28 74 68 69 73 2c 65 2c 21 30 29 7d 3b 73 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 77 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 57 28 74 68 69 73 2c 65 Data Ascii: on W(t,e,n){var r=t._events;if(r===void 0)return[];var o=r[e];return o===void 0?[]:typeof o=="function"?n?[o.listener\|\|o]:[o]:n?ce(o):q(o,o.length)}s.prototype.listeners=function(e){return W(this,e,!0)};s.prototype.rawListeners=function(e){return W(this,e
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 2e 6f 6e 63 65 26 26 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6f 29 2c 6e 28 61 29 7d 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 54 68 65 20 22 65 6d 69 74 74 65 72 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 6f 66 20 74 79 70 65 20 45 76 65 6e 74 45 6d 69 74 74 65 72 2e 20 52 65 63 65 69 76 65 64 20 74 79 70 65 20 27 2b 74 79 70 65 6f 66 20 74 29 7d 7d 29 3b 76 61 72 20 67 65 3d 7b 7d 3b 49 28 67 65 2c 7b 41 64 64 43 61 72 74 49 74 65 6d 45 76 65 6e 74 3a 28 29 3d 3e 6b 2c 43 68 65 63 6b 6f 75 74 42 65 67 69 6e 45 76 65 6e 74 3a Data Ascii: ="function")t.addEventListener(e,function o(a){r.once&&t.removeEventListener(e,o),n(a)});else throw new TypeError('The "emitter" argument must be of type EventEmitter. Received type '+typeof t)}});var ge={};I(ge,{AddCartItemEvent:()=>k,CheckoutBeginEvent:
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 72 28 65 2c 6e 29 7b 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 3d 65 3b 74 68 69 73 2e 68 69 73 74 6f 72 79 4d 61 6e 61 67 65 72 3d 6e 7d 65 6d 69 74 28 65 2c 6e 29 7b 76 61 72 20 6f 3b 62 2e 64 65 62 75 67 28 60 45 6d 69 74 20 65 76 65 6e 74 20 24 7b 65 7d 20 77 69 74 68 20 64 61 74 61 3a 20 60 2c 6e 29 3b 6c 65 74 20 72 3d 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 74 74 65 72 2e 65 6d 69 74 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 72 26 26 74 68 69 73 2e 75 70 64 61 74 65 42 6f 64 6c 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 6e 29 2c 28 6f 3d 74 68 69 73 2e 68 69 73 74 6f 72 79 4d 61 6e 61 67 65 72 29 3d 3d 6e 75 6c 6c 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 28 65 2c 6e 29 2c 72 7d 6f 6e 28 65 2c 6e 29 7b 69 66 28 74 68 69 73 2e 65 76 65 6e 74 45 6d 69 Data Ascii: r(e,n){this.eventEmitter=e;this.historyManager=n}emit(e,n){var o;b.debug(`Emit event ${e} with data: `,n);let r=this.eventEmitter.emit(e,n);return r&&this.updateBodl(e.toString(),n),(o=this.historyManager)==null\|\|o.addEvent(e,n),r}on(e,n){if(this.eventEmi
2024-03-04 16:01:58 UTC	1252	IN	Data Raw: 76 69 65 77 65 64 22 2c 65 29 7d 7d 3b 76 61 72 20 4d 3d 28 65 3d 3e 28 65 2e 43 52 45 41 54 45 3d 22 62 6f 64 6c 5f 76 31 5f 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 22 2c 65 29 29 28 4d 7c 7c 7b 7d 29 2c 6a 3d 28 65 3d 3e 28 65 2e 43 52 45 41 54 45 3d 22 62 6f 64 6c 5f 76 31 5f 6f 72 64 65 72 5f 70 75 72 63 68 61 73 65 64 22 2c 65 29 29 28 6a 7c 7c 7b 7d 29 3b 76 61 72 20 43 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 64 7b 65 6d 69 74 43 68 65 63 6b 6f 75 74 42 65 67 69 6e 45 76 65 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6d 69 74 28 22 62 6f 64 6c 5f 76 31 5f 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 22 2c 65 29 7d 65 6d 69 74 4f 72 64 65 72 50 75 72 63 68 61 73 65 64 45 76 65 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 Data Ascii: viewed",e)}};var M=(e=>(e.CREATE="bodl_v1_begin_checkout",e))(M\|\|{}),j=(e=>(e.CREATE="bodl_v1_order_purchased",e))(j\|\|{});var C=class extends d{emitCheckoutBeginEvent(e){return this.emit("bodl_v1_begin_checkout",e)}emitOrderPurchasedEvent(e){return this.e
2024-03-04 16:01:58 UTC	213	IN	Data Raw: 76 29 2c 5a 3d 6e 65 77 20 5f 28 66 2c 76 29 2c 65 65 3d 6e 65 77 20 67 28 66 2c 76 29 2c 79 65 3d 6e 65 77 20 79 28 68 65 29 3b 79 65 2e 72 75 6e 28 29 3b 76 61 72 20 62 65 3d 7b 63 61 72 74 3a 51 2c 63 68 65 63 6b 6f 75 74 3a 58 2c 70 72 6f 64 75 63 74 3a 59 2c 62 61 6e 6e 65 72 3a 5a 2c 63 6f 6e 73 65 6e 74 3a 65 65 2c 76 65 72 73 69 6f 6e 3a 22 36 38 36 33 65 30 36 35 62 61 62 65 63 62 66 34 39 61 66 38 31 31 33 66 62 35 32 64 64 31 32 65 63 31 33 33 65 39 38 30 22 7d 3b 72 65 74 75 72 6e 20 6c 65 28 67 65 29 3b 7d 29 28 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 69 6e 64 65 78 2e 6a 73 2e 6d 61 70 Data Ascii: v),Z=new _(f,v),ee=new g(f,v),ye=new y(he);ye.run();var be={cart:Q,checkout:X,product:Y,banner:Z,consent:ee,version:"6863e065babecbf49af8113fb52dd12ec133e980"};return le(ge);})();//# sourceMappingURL=index.js.map

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:59 UTC	968	OUT	GET /api/storefront/carts HTTP/1.1 Host: www.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.greatland.com/about-us-old/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507
2024-03-04 16:02:00 UTC	1311	IN	HTTP/1.1 200 OK Date: Mon, 04 Mar 2024 16:02:00 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close x-content-type-options: nosniff x-permitted-cross-domain-policies: none set-cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; Expires=Wed, 04 Mar 2026 16:01:59 GMT; Path=/; Secure; SameSite=None set-cookie: athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Expires=Mon, 04 Mar 2024 16:31:59 GMT; Path=/; Secure; HttpOnly; SameSite=None set-cookie: Shopper-Pref=521AB95DB6716B26613F4C98C5BDEF6F617B1B2A-1710172920096-x%7B%22cur%22%3A%22USD%22%7D; Expires=Mon, 11 Mar 2024 16:02:00 GMT; Path=/; HttpOnly set-cookie: SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507; Expires=Mon, 11 Mar 2024 16:02:00 GMT; Path=/; Secure; HttpOnly; SameSite=None expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache strict-transport-security: max-age=0 x-request-id: 89243594c3368e111a7efe07d4e4c301 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=20ENbdteUiLAQyU1SEKUzenN%2FJMBaOvzSW3R5Nay%2BJj6MwJQugTYuC6%2F4UhcZ2Hj2qswFb%2BN0AjcyldYKjev%2FuOwdquf0sqUuMIh%2BlozmdrbIN9zooEl%2FKDWxaxdjJnLf7Xa"}],"group":"cf-nel","max_age":604800}
2024-03-04 16:02:00 UTC	160	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 42 43 2d 52 61 79 3a 20 31 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 35 66 33 31 36 38 61 36 65 65 61 30 66 33 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}BC-Ray: 1Server: cloudflareCF-RAY: 85f3168a6eea0f3b-EWRalt-svc: h3=":443"; ma=86400
2024-03-04 16:02:00 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-03-04 16:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:59 UTC	529	OUT	GET /tag/9mpew7vfbm HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.greatland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:01:59 UTC	256	IN	HTTP/1.1 204 No Content Date: Mon, 04 Mar 2024 16:01:59 GMT Connection: close Request-Context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0 x-azure-ref: 20240304T160159Z-9wrpyeycuh5npbv139hxzerk4800000001x0000000001ufv X-Cache: CONFIG_NOCACHE

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:59 UTC	595	OUT	GET /sites/greatland/includes/hawksearch.css?bust=13042021023502 HTTP/1.1 Host: manage.hawksearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.greatland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:01:59 UTC	467	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Thu, 28 Jan 2021 03:14:03 GMT Accept-Ranges: bytes ETag: "4bcf62a123f5d61:0" Server: Microsoft-IIS/8.5 X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Content-Security-Policy: frame-ancestors .hawksearch.com .hawksearch.net *.roccommerce.com Date: Mon, 04 Mar 2024 16:01:58 GMT Connection: close Content-Length: 72206
2024-03-04 16:01:59 UTC	15917	IN	Data Raw: 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2f 73 69 74 65 73 2f 73 68 61 72 65 64 2f 69 63 6f 6e 73 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2f 73 69 74 65 73 2f 73 68 61 72 65 64 2f 68 61 77 6b 2d 72 65 63 6f 6d 6d 65 6e 64 65 72 2d 63 6f 6d 6d 6f 6e 2e 63 73 73 22 29 3b 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2f 73 69 74 65 73 2f 73 68 61 72 65 64 2f 69 6e 63 6c 75 64 65 73 2f 68 61 77 6b 73 65 61 72 63 68 5f 70 6c 75 67 69 6e 73 2e 63 73 73 22 29 3b 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 2e 68 61 77 6b 2d 76 69 73 75 61 6c 6c 79 48 69 64 64 65 6e 20 7b 20 62 6f 72 64 65 72 3a 20 30 3b 20 63 6c 69 70 3a 20 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 20 68 65 69 67 68 74 3a 20 31 70 78 3b 20 6d 61 72 67 69 6e 3a 20 Data Ascii: @import url("/sites/shared/icons/style.css");@import url("/sites/shared/hawk-recommender-common.css");@import url("/sites/shared/includes/hawksearch_plugins.css");.hawk-visuallyHidden { border: 0; clip: rect(0 0 0 0); height: 1px; margin:
2024-03-04 16:01:59 UTC	16384	IN	Data Raw: 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 61 77 6b 2d 63 6f 6c 6c 61 70 73 65 53 74 61 74 65 20 2b 20 2e 68 61 77 6b 2d 66 61 63 65 74 67 72 6f 75 70 2e 68 61 77 6b 2d 63 6f 6c 6c 61 70 73 65 2e 69 6e 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 61 77 6b 2d 66 61 63 65 74 67 72 6f 75 70 2e 68 61 77 6b 2d 63 6f 6c 6c 61 70 73 65 20 2b 20 2e 68 61 77 6b 2d 66 61 63 65 74 67 72 6f 75 70 2e 68 61 77 6b 2d 63 6f 6c 6c 61 70 73 65 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2f 2a 20 23 23 20 63 75 72 72 65 6e 74 20 73 65 6c 65 63 74 69 6f 6e 73 20 23 23 20 2a 2f 0d 0a 0d 0a 2e 68 61 77 6b 2d 67 75 69 64 65 64 4e 61 76 Data Ascii: { display:none;}.hawk-collapseState + .hawk-facetgroup.hawk-collapse.in { display:block;}.hawk-facetgroup.hawk-collapse + .hawk-facetgroup.hawk-collapse { display:none;}/* ## current selections ## */.hawk-guidedNav
2024-03-04 16:01:59 UTC	16384	IN	Data Raw: 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 30 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 62 32 33 30 30 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 61 77 6b 2d 73 65 61 72 63 68 51 75 65 72 79 20 2e 68 61 77 6b 2d 73 71 41 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 62 32 33 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 65 6d Data Ascii: display: block; margin: 0; padding: 6px 10px; color: #8b2300; text-decoration: none; border: 1px solid #fff; cursor: pointer; zoom: 1;}.hawk-searchQuery .hawk-sqActive { border-color: #8b2300;}/* em
2024-03-04 16:01:59 UTC	16384	IN	Data Raw: 6f 6e 65 3b 0d 0a 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 0d 0a 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 20 62 75 74 74 6f 6e 0d 0a 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 Data Ascii: one; text-align: center;}.slick-dots li{ position: relative; display: inline-block; width: 20px; height: 20px; margin: 0 5px; padding: 0; cursor: pointer;}.slick-dots li button{ font-size: 0
2024-03-04 16:01:59 UTC	467	IN	Data Raw: 6e 3a 20 72 69 67 68 74 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 2c 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 2c 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 0d 0a 7d 0d 0a 2e 6f 6e 6f 66 66 73 77 69 74 63 68 2d 73 77 69 74 63 68 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 2d 32 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b Data Ascii: n: right;-webkit-box-shadow: inset 0 2px 4px rgba(0,0,0,.15),0 1px 2px rgba(0,0,0,.05);box-shadow: inset 0 2px 4px rgba(0,0,0,.15),0 1px 2px rgba(0,0,0,.05)}.onoffswitch-switch {width: 19px;height: 19px;margin: -2px;background: #fff;
2024-03-04 16:01:59 UTC	6670	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 34 66 34 66 34 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 31 30 30 25 2c 66 72 6f 6d 28 23 66 66 66 29 2c 74 6f 28 23 65 65 65 29 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 66 66 2c 23 65 65 65 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 74 6f 70 20 6c 65 66 74 2c 62 6f 74 74 6f 6d 20 6c 65 66 74 2c 66 72 6f 6d 28 23 66 66 66 29 2c 74 6f 28 23 65 65 65 29 29 3b 0d 0a 09 62 61 63 6b 67 Data Ascii: kground-color: #f4f4f4;background-image: -webkit-gradient(linear,0 0,0 100%,from(#fff),to(#eee));background-image: -webkit-linear-gradient(top,#fff,#eee);background-image: -webkit-gradient(linear,top left,bottom left,from(#fff),to(#eee));backg

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:59 UTC	1056	OUT	GET /index.php?action=track_visitor&1709568118830 HTTP/1.1 Host: www.greatland.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.greatland.com/about-us-old/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fornax_anonymousId=fcccdee4-b1a7-46fb-bfc2-02b1f5c5ea72; athena_short_visit_id=45c9099b-5c77-43f9-98ea-cf118d01c462:1709568117; Shopper-Pref=ABAB5012B66982A3906A83EEBA8D4F107E62782E-1710172918062-x%7B%22cur%22%3A%22USD%22%7D; XSRF-TOKEN=7a403fc7015de284e66ae6ddc6f2381d1c5f30abe6bcffab1e4c8828c6b635f4; SF-CSRF-TOKEN=a5cb31a3-4cf2-4ac6-bdd3-b0ead97e4c2a; SHOP_SESSION_TOKEN=c04dde47-badb-4700-b1ab-9573f4b80507
2024-03-04 16:02:00 UTC	837	IN	HTTP/1.1 200 OK Date: Mon, 04 Mar 2024 16:02:00 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close x-content-type-options: nosniff x-permitted-cross-domain-policies: none x-request-id: b2084e918edcce76d644366c8804a614 strict-transport-security: max-age=0 set-cookie: STORE_VISITOR=1; expires=Tue, 05-Mar-2024 16:01:59 GMT; path=/; Secure; SameSite=none CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QtdGf8V%2Fv6mcewAl%2BM%2F1q3XL%2BlauCEGAte2GIViSwqJk%2FHeqL2GPvm45uB6%2F8YgpmCg%2BVld1K8exkORpCMoZcGIkPT0tSIbgp3yWaZQ912%2FDlShPw9o8q82KDQ0qtrNwKTRI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} BC-Ray: 1 Server: cloudflare CF-RAY: 85f3168d0a1e43dc-EWR alt-svc: h3=":443"; ma=86400
2024-03-04 16:02:00 UTC	91	IN	Data Raw: 35 35 0d 0a 47 49 46 38 39 61 01 00 01 00 b3 00 00 00 00 00 80 00 00 00 80 00 80 80 00 00 00 80 80 00 80 00 80 80 c0 c0 c0 80 80 80 ff 00 00 00 ff 00 ff ff 00 00 00 ff ff 00 ff 00 ff ff 00 62 64 21 f9 04 01 00 00 0f 00 2c 00 00 00 00 01 00 01 00 00 04 02 f0 45 00 3b 0d 0a Data Ascii: 55GIF89abd!,E;
2024-03-04 16:02:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:01:59 UTC	522	OUT	OPTIONS /nobot HTTP/1.1 Host: bes.gcp.data.bigcommerce.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.greatland.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.greatland.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:02:00 UTC	502	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 allow: POST, OPTIONS access-control-allow-origin: https://www.greatland.com access-control-allow-headers: content-type access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT vary: Origin X-Cloud-Trace-Context: 49731e244bf60b81a9cb51ce7d78f9c6 Date: Mon, 04 Mar 2024 16:02:00 GMT Server: Google Frontend Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-03-04 16:02:00 UTC	627	OUT	GET /sites/shared/icons/style.css HTTP/1.1 Host: manage.hawksearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://manage.hawksearch.com/sites/greatland/includes/hawksearch.css?bust=13042021023502 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-04 16:02:00 UTC	496	IN	HTTP/1.1 200 OK Cache-Control: max-age=86400 Content-Type: text/css Last-Modified: Mon, 17 Oct 2016 11:59:15 GMT Accept-Ranges: bytes ETag: "3263c5e16d28d21:0" Server: Microsoft-IIS/8.5 X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Content-Security-Policy: frame-ancestors .hawksearch.com .hawksearch.net *.roccommerce.com Date: Mon, 04 Mar 2024 16:01:59 GMT Connection: close Content-Length: 4567
2024-03-04 16:02:00 UTC	4567	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 73 6c 69 63 6b 22 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 73 6c 69 63 6b 2e 65 6f 74 22 29 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 66 6f 6e 74 73 2f 73 6c 69 63 6b 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 22 66 6f 6e 74 73 2f 73 6c 69 63 6b 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 0a 20 20 20 20 20 20 20 20 20 75 72 6c 28 22 66 6f 6e 74 73 2f 73 6c 69 63 6b 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 20 0a 20 20 20 20 20 20 20 20 20 75 72 Data Ascii: @font-face { font-family: "slick"; src: url("fonts/slick.eot"); src: url("fonts/slick.eot?#iefix") format("embedded-opentype"), url("fonts/slick.woff") format("woff"), url("fonts/slick.ttf") format("truetype"), ur