{"report_id":"c5f96914-606b-42f1-bcdc-690b4bc2ac3a","version":6,"status":"done","tags":[],"date":"2026-03-27T13:32:54Z","url":{"schema":"http","addr":"adminportal.greenshield.ca/","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":0,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"adminportal.greenshield.ca/login","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"title":"Log in | GreenShield","dom":{"size":86801,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (32266)","md5":"d3137a7a92c628d0be120f2444e3e967","sha1":"53a13d248ede7d4eb1b5bde5194ccc08dafc1500","sha256":"1c604b34b5f7757a1376c9acecf5371668dfac6614efd9eeeeac571831bcb1cf","sha512":"dfac79b1ae55c8e3fc00ba706d65a15c853067e923d763380eba95e649f0a472fe9d8bf0b27f2ad355446c7056cd0c8b5218e2737a4aad4127108615acf1100f","ssdeep":"768:fP2UViTb5CYBGPxC7VySShWC4Lwemq+EPo8AKITF4gVDm:fuKWjShX2wO+ZKpgVDm","tlshash":"d883d8e0c101242aa69749af10d8ff21aed5dcd1c505722bf5f44eacdecfdaa52ac721","dom_hash":"domhashd0ac5e6e9144390fa39b327397f202e5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"adminportal.greenshield.ca/","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":0,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T13:32:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.onlineweb.ca","ip":{"addr":"34.36.123.198","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-01-31","domain_rank":6346533,"first_seen":"2024-10-17T18:29:18.553154Z","last_seen":"2026-02-25T15:00:45.523169Z","alert_count":0,"request_count":2,"received_data":292848,"sent_data":1133,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":441234,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adminportal.greenshield.ca","ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"domain_registered":"2000-10-19","domain_rank":0,"first_seen":"2024-03-15T23:57:57Z","last_seen":"2025-11-27T15:30:10.711484Z","alert_count":0,"request_count":12,"received_data":5567935,"sent_data":8779,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Dynatrace","description":"Dynatrace is a technology company that produces a software intelligence platform based on artificial intelligence to monitor and optimise application performance and development, IT infrastructure, and user experience for businesses and government agencies throughout the world.","website":"https://www.dynatrace.com","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["Analytics"]},{"name":"Dynatrace RUM","description":"Dynatrace RUM is a AI powered, full stack, automated real user monutoring platform built by Dynatrace.","website":"https://www.dynatrace.com/platform/real-user-monitoring","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"adminportal.greenshield.ca/","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"cafa2c2099ec273b180387164970a45d","sha1":"43542a8273f208b4e5c8c638789efaee8c166c3e","sha256":"ddd3b7c3b63e3efafc9cdb8cf498a8069b811abc6030135984f4aa6030f8aa7e","sha512":"6ab9bd9fbd2eb11e748bd25645e9d6b436572c7c236e1927a42c56cca2a1d8b07e86e8b885b303ca7b973112a42b62f48a8ab33811a9ca17a2ede82cc7963449","ssdeep":"","tlshash":"92c0928826974ca051f73a954f3f72097012a22360e1ce313e0ea6889f31d2beba4948","size":151,"data":"","first_seen":"2023-03-14T17:24:52Z","last_seen":"2026-04-01T04:31:43.477656Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/runtime.d8373f93632468d7.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9fc8969ed4f952c0d8b574bde4225fd","sha1":"7a523dea7bdaf772e2681a518179e901a3b55622","sha256":"e44d170429327dc29943c25170a3702bbad5e02f07d4e4f9cf2fde9e841eacd6","sha512":"94439c07ade06bb450815ab76763621287eac06a95025de59716997e6ce90e16315c87b116cbd0f973ebc2f69a6d870f177d1aa81569e15660a6e77c76424677","ssdeep":"","tlshash":"15810ab12674edb62bf544c0583e9492e71c7036045f98b1bb4bce6a6064ed20826ff1","size":3906,"data":"","first_seen":"2026-03-27T13:33:06.428549Z","last_seen":"2026-03-27T13:33:06.428549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/polyfills.18212239a72ec150.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33bd27315ee980c96c845dcb68b9c75","sha1":"f853cdd94d4ee8648546cca0fb11616b8468a87c","sha256":"3df589d11cad80dfdc17fe57c26ff4977fa01c72bb30f182273629f49f5f5b01","sha512":"3fadc268efdcf6b6661f4a4c106562d8c36071965b2cc6bd45d8e2e6723524ca4712af90f6670288c1333207e848202aa5f9d9f08415a072694963ef93b69c06","ssdeep":"768:le+21vId1Ml1nJCcAqviA5RyIHQNcsWZPvkMB+3KbLcdmNx52Ac6cjC/n3P4fPdj:JA5EEcMHHtSTPn","tlshash":"c2e207da33a2b0b687fa55b1903b4107f63665a0784c48e4f12c99db3d3b049e5a7f2d","size":33859,"data":"","first_seen":"2025-11-27T15:30:18.603786Z","last_seen":"2026-03-27T13:33:06.45934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-05T06:48:13.341327Z","times_seen":234275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/main.04be0d3741e81e8b.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a29bef3d19e5288a62c33789c1bef2f","sha1":"2acf3a0586932390440b0bd3338596f4ab610951","sha256":"2c150a84427b5a147417308946a06b1c22e643d056de7c5c79d9b1b92040b2f8","sha512":"1a812fd521e4420d4dea9039b6322920493decdd889314c520a542a52d3975de68fc823e8ab581d33a86add2e984d4b7a732c7d880143539572b07c7ac836ab6","ssdeep":"49152:D9OdzDFOU/XATlQv+rTrzQqV/pKeRu7G+SyBkL3g7rQ3m1GuiNo36ScBo1DFwn56:KwTrzQqV/pKeRu7OLc","tlshash":"47e54ac6725134aa13a650b1d4ba090b66ac5d80a41dc06cfbac8dcebb9dd4c737f739","size":3085245,"data":"","first_seen":"2026-03-27T13:33:06.468512Z","last_seen":"2026-03-27T13:33:06.468512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YLW1QMX40S","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97395564eb71dffd4d51923d8f6e8b9d","sha1":"7cc99d496833195a5e7436a07b8cdd6ccf34a718","sha256":"9c57748ff35eb588c16a1187f9947b41b9b24010be35f0f2c7ee3c130c76b11b","sha512":"cf71a7b5d8e7c6a8d8187de7389350ad06ecfd56cc542e26dbb3a7dde641a3e8a21c636272a5a9957b67d77d01056aeadda14a4b8dbc94979dcae70cf45a6ac6","ssdeep":"6144:VORjaFCC9VJlQGXHIzs8WVP1W+rwkQddQtYrc0HdZgQ9:rCCfJlbIY8Cb+p9","tlshash":"2e941aceb3d674624396f478903f018ba57b29e2b44cc899f189c8e42e7465a4277f7c","size":440630,"data":"","first_seen":"2026-03-27T13:33:06.448169Z","last_seen":"2026-03-27T13:33:06.448169Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/ruxitagentjs_ICA7NVfqrux_10333260303165926.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fc1a32515559d4124ed5ed0ec81ddbf","sha1":"7fe5c34a7ceede1fea520d9ba496ffc869a5aa5c","sha256":"f042162fd2862577cfd164e161da4753ad95c25db4b3a218d7627bcbfc6adb56","sha512":"a61d00863ec5550062e5c65a61c9005592fb58b906ebf6f93aa21292c036f015dc98cdc3288f7e63a6495defd315ec61c5beb21b86b082e11338368c3744d13f","ssdeep":"3072:jqQOxaZxboGJtqlEh6KVtdlGB9KJAyAtNaQ:LOxaZXJtGEcKVE90AyAyQ","tlshash":"42144b99771270664b9321b950bf020bf3b8bd94984c84a4e191e5e83d74efe42f7f29","size":208765,"data":"","first_seen":"2026-03-18T20:30:12.633756Z","last_seen":"2026-04-04T22:22:12.876067Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"adminportal.greenshield.ca/runtime.d8373f93632468d7.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:31.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /runtime.d8373f93632468d7.js HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3906\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:08 GMT\r\nETag: \"69c2d470-f42\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-1830222902\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3906,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3906), with no line terminators","md5":"f9fc8969ed4f952c0d8b574bde4225fd","sha1":"7a523dea7bdaf772e2681a518179e901a3b55622","sha256":"e44d170429327dc29943c25170a3702bbad5e02f07d4e4f9cf2fde9e841eacd6","sha512":"94439c07ade06bb450815ab76763621287eac06a95025de59716997e6ce90e16315c87b116cbd0f973ebc2f69a6d870f177d1aa81569e15660a6e77c76424677","ssdeep":"","tlshash":"15810ab12674edb62bf544c0583e9492e71c7036045f98b1bb4bce6a6064ed20826ff1","first_seen":"2026-03-27T13:33:06.428549Z","last_seen":"2026-03-27T13:33:06.428549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":329,"dns":1,"connect":108,"send":0,"wait":137,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/main.04be0d3741e81e8b.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:31.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /main.04be0d3741e81e8b.js HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3085245\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:08 GMT\r\nETag: \"69c2d470-2f13bd\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-350594201\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3085245,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bfbd1bbf78d982719ff7dca22a254193","sha1":"429ece74ac7b667e9ea4996b62335630d7c847f3","sha256":"f49c8501c654887ec6c66b423c69c377e6be0a4e6a0b2cc5e6231403e511e7c3","sha512":"36a6ce8e080404cdae6372fbe8b4062e24c0709a52962b2d750dda0ca784854b329e14a18612c29cecbe92d501e7a7e756eb1a9f97da21d8a3b93260d8671004","ssdeep":"12288:lTc29Kk55hDidyrqB5w5ygDm94pWsTW7ltJVXIeqDxUYR:D9Kk5Pedz3e6cWOW7/XAxUYR","tlshash":"1e251983542421fa23f361b1e6ab09022a9c9c01652dd558f79cce9eb7ddd8d336b23d","first_seen":"2026-03-27T13:33:06.431086Z","last_seen":"2026-03-27T13:33:06.431086Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3635,"timings":{"blocked":326,"dns":1,"connect":109,"send":0,"wait":139,"receive":2834,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/styles.33d6c7a4e0919791.css","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:31.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /styles.33d6c7a4e0919791.css HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h1vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620151720|1774618351715; dtSa=-\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: text/css\r\nContent-Length: 800027\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:08 GMT\r\nETag: \"69c2d470-c351b\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1449445422\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c1d80aa3ae68538422dd9bd931dbdd85","sha1":"61fcc194ac4c6ae4d2e3f48feb2c5067f7a587eb","sha256":"b5f82d22677ce79dddd206beee66b42dba756bb769c5a30752cc2dff471e6739","sha512":"d19ed1b4131551349876ede938527205476501e5a9da137abc8d218ba47ab15523e2f212c93dc427e881733a6c7863f6703dbb2bedd3755ab0fc8bdee5df5fd0","ssdeep":"6144:TtSpz600I4h5THGW0yL9qyqLC2FVg682G/Oi3moM1ghM:b5THGW0anqLXemH","tlshash":"7f05aba1e00520ddb3a3d64f5f41f638a9f7f72ec9804e4af0c54c5e0dd6a687185baa","first_seen":"2026-03-27T13:33:06.434209Z","last_seen":"2026-03-27T13:33:06.434209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/assets/img/favicon_Spinner.ico","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:33.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /assets/img/favicon_Spinner.ico HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h1vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620151720|1774618351715; dtSa=-\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:33 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 101769\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:13 GMT\r\nETag: \"69c2d475-18d89\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"294026155\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101769,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit gray+alpha, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"5ee7d8e5abe61ad43e96bb8d0aa0d5e0","sha1":"8825e8474aa9729602d65acb655ee8d4285df4fb","sha256":"8f93b0ee367ceab9c17560951a4b7865dc8017c884aad0873dc73bdd6f8dec13","sha512":"79336cbd482fa3175cd37860d7ab7974726ac64551cb48e4ec0fde25b0b05f01435631cbf5b47493c07a7c14298b879246953a52eef2fb93f978d281e1df5c57","ssdeep":"768:uOqHHHHH3nvE7gXvHXXHHHH+nXnln6x3XnyVy:7qHHHHH3nvE7gXvHXXHHHHay","tlshash":"bfa3ba01eb858943cca90bb4ceebc3b53934ce597b13065366e07e6f3db63a45a941c6","first_seen":"2025-11-27T15:30:18.577286Z","last_seen":"2026-03-27T13:33:06.436883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/assets/img/EN_GreenShield_Insurance_Logo.svg","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:36.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /assets/img/EN_GreenShield_Insurance_Logo.svg HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/login\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h4vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620155969|1774618351715; dtSa=-\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:36 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4541\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:13 GMT\r\nETag: \"69c2d475-11bd\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1693329685\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4541,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e5dd71ede73388baa6a84547f3186b8","sha1":"9c1bc3000109c4fe2a33e9c6983e7419585ae282","sha256":"598a8955df0116bc017355c8facb1979d934b5cb87320b8e038542fa1924e4c8","sha512":"fdceb169e39d0f07995c5e4a7ef4992f6ce461a8aaa4f6fa7211e68ebe2f0dd583078beedcc82928ac68655de723fc6353f13af479a7400433f418e9125fffd8","ssdeep":"48:cvAv22lJvpbhjOBBsVpIe8QAkPlSjvTJlEChruhsm9mixCLe5psyCTtL+Ah/NlGj:zvBVIeNB3Chruhs+Jk/yQh/nh0wjJa","tlshash":"83914766531e3afd944305444aba2ae276ef686fe244d6dcea732c127046cf08874d79","first_seen":"2025-11-27T15:30:18.581944Z","last_seen":"2026-03-27T13:33:06.43984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/GSC_Desktop_Background.8e1f7602499846a1.jpg","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:36.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /GSC_Desktop_Background.8e1f7602499846a1.jpg HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/login\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h4vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620155969|1774618351715; dtSa=-\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 757125\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:08 GMT\r\nETag: \"69c2d470-b8d85\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-1181971194\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":757125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 9300x4500, components 3","md5":"772fad8ae89afde3f1b6ffbd8ff3c810","sha1":"a9f4ad2365e4bfb041496e58235ed7c82c34517f","sha256":"5dc36f79aac8090b5c24e3fc2e2b5785b7832c1e01a9d48b511882d36d4d999b","sha512":"ebc229bf837a1e167289a1f8ab39393374bc127ec7be9672ac995f435129c8806c153cb4aadd5309cbc4b04a02ab3f1a2adc7d780893f3b0e8e4f23b152b5eed","ssdeep":"3072:nyrngIvujLFSHC+hFCk3i5QBrMLXHekrWcEkqT5Jn1pX0AGvN0Zl:yrngPFSHhzVNBrMLWcEZTtpXZGql","tlshash":"e4f49d3ecfe56f9ac5e61bb2a20f46fe8f59718990981dd0f04d28f66b0f21658b140d","first_seen":"2025-11-27T15:30:18.592798Z","last_seen":"2026-03-27T13:33:06.442685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":776,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.onlineweb.ca/pmos-api-b2c/api/v1/Configurations/adminportal.greenshield.ca","fqdn":"api.onlineweb.ca","domain":"onlineweb.ca","tld":"ca"},"ip":{"addr":"34.36.123.198","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:35.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-gcp.onlineweb.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 10:09:45 GMT","end":"Mon, 08 Jun 2026 11:03:57 GMT"},"fingerprint":{"sha1":"FD:02:CB:02:12:A8:4B:E8:64:7A:5C:F8:A1:97:DF:C7:A0:1F:01:BF","sha256":"9B:67:6D:3F:50:AD:78:09:35:45:5B:1E:17:02:3D:B7:0B:85:C6:45:22:98:2F:FE:86:D4:4D:31:36:78:CF:6E"}}},"request":{"raw":"GET /pmos-api-b2c/api/v1/Configurations/adminportal.greenshield.ca HTTP/1.1\r\nHost: api.onlineweb.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://adminportal.greenshield.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 27 Mar 2026 13:32:35 GMT\r\naccess-control-allow-origin: https://adminportal.greenshield.ca\r\ncontent-encoding: gzip\r\nset-cookie: dtCookie=v_4_srv_4_sn_435AD6CB21C2EBF3CDFFBCCAE2F33F41_perc_100000_ol_0_mul_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.greenshield.ca\r\nvary: Accept-Encoding\r\nserver-timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-1986254341\", dtTao;desc=\"1\"\r\ntiming-allow-origin: *\r\nx-response-time-ms: 3\r\nvia: 1.1 google, 1.1 google\r\nx-routed-backend: canary\r\naccess-control-allow-credentials: true\r\nx-request-id: 7b959a3b-42a0-488e-80cd-0ebe2bade20b\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":186125,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42903b36da06927eec81308d59571b83","sha1":"fab5a60abe93eacf8dea5c0145f6758ef76525b2","sha256":"c694db74141e4bc03f8f9c76f08d3325fb885ca4fe5efd27c099474a696a156c","sha512":"7e21969eaa028bdd61c2ee37943de50f84375ffab37613dc4631d037df40868d58f0e340e3aea7a84ce31d02de1a07452eee9fad1dd9ba95dee61bd5096922bc","ssdeep":"1536:wQER8nb2+aYpqhAsyj1ZoPZ05Ju/mEkX5I6z:Zy+T/Rj1usJI6z","tlshash":"2904c4f2c18e25b4c84724f293282b338d6fa99365157b417b77e909ce69f5f248ac13","first_seen":"2026-03-27T13:33:06.445571Z","last_seen":"2026-03-27T13:33:06.445571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":288,"dns":43,"connect":12,"send":0,"wait":515,"receive":27,"ssl":230},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YLW1QMX40S","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:35.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-YLW1QMX40S HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 27 Mar 2026 13:32:36 GMT\r\nexpires: Fri, 27 Mar 2026 13:32:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148948\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":440630,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"97395564eb71dffd4d51923d8f6e8b9d","sha1":"7cc99d496833195a5e7436a07b8cdd6ccf34a718","sha256":"9c57748ff35eb588c16a1187f9947b41b9b24010be35f0f2c7ee3c130c76b11b","sha512":"cf71a7b5d8e7c6a8d8187de7389350ad06ecfd56cc542e26dbb3a7dde641a3e8a21c636272a5a9957b67d77d01056aeadda14a4b8dbc94979dcae70cf45a6ac6","ssdeep":"6144:VORjaFCC9VJlQGXHIzs8WVP1W+rwkQddQtYrc0HdZgQ9:rCCfJlbIY8Cb+p9","tlshash":"2e941aceb3d674624396f478903f018ba57b29e2b44cc899f189c8e42e7465a4277f7c","first_seen":"2026-03-27T13:33:06.448169Z","last_seen":"2026-03-27T13:33:06.448169Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":83,"dns":1,"connect":8,"send":0,"wait":39,"receive":38,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/assets/img/favicon_GSC.ico","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:36.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /assets/img/favicon_GSC.ico HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/login\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h-vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620155969|1774618351715; dtSa=-; _ga_YLW1QMX40S=GS2.1.s1774618356$o1$g0$t1774618356$j60$l0$h0; _ga=GA1.1.195206432.1774618356\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:36 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 102409\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:13 GMT\r\nETag: \"69c2d475-19009\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1616791636\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102409,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"152be983fddc1eabcc5770fe5b7384b3","sha1":"47e78191bb15a5e459bf8983bc413105d9142ab9","sha256":"89b2912699293027d49719835b36816b83fabd5f839bfa75c2bf50e8f9ac84ae","sha512":"712c4c461febe6ce8326f83eb639bf13543118a72b204bd9aac738d49a8a2398922528b596b47a36c1f6fd5f7d3b11bc0261dc1b99f8ede70543e8ba57c401f3","ssdeep":"192:hguemd+dFQnc4ZI79OSiHP9lgEEJ+mVVZui55iKKBK/+Cc3hMKh88Y6o:CtT5VVZui55iKKBKG1R88A","tlshash":"3ca31520e20ae893d7775df90a89f8307a52cd60b97f59862d9db35f2174d3a202f349","first_seen":"2025-11-27T15:30:18.60583Z","last_seen":"2026-03-27T13:33:06.451291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/rb_bf75905bhb?type=js3\u0026sn=v_4_srv_-2D9683_sn_92O4D4TH9QUR7O615U5H8D9FJES5KMDO\u0026svrid=-9683\u0026flavor=post\u0026vi=MNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0\u0026modifiedSince=1773843463076\u0026bp=3\u0026app=9edbc07df398b050\u0026crc=1739839719\u0026en=qcjw60q8\u0026end=1","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:37.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"POST /rb_bf75905bhb?type=js3\u0026sn=v_4_srv_-2D9683_sn_92O4D4TH9QUR7O615U5H8D9FJES5KMDO\u0026svrid=-9683\u0026flavor=post\u0026vi=MNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0\u0026modifiedSince=1773843463076\u0026bp=3\u0026app=9edbc07df398b050\u0026crc=1739839719\u0026en=qcjw60q8\u0026end=1 HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nx-dtreferer: https://adminportal.greenshield.ca/\r\nContent-Length: 2348\r\nOrigin: https://adminportal.greenshield.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/login\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h-vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620155969|1774618351715; dtSa=-; _ga_YLW1QMX40S=GS2.1.s1774618356$o1$g0$t1774618356$j60$l0$h0; _ga=GA1.1.195206432.1774618356\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2348,"data":"$a=1%7C1%7C_load_%7C_load_%7C-%7C1774618350768%7C1774618357052%7Cdn%7C85%7Csvn%7C%2F%7Csvt%7C1774618350768%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci2%5Esk1%5Esh0%2C2%7C5%7C_event_%7C1774618350768%7C_vc_%7CV%7C6284%5Epc%7CVCD%7C1096%7CVCDS%7C1%7CVCS%7C5467%7CVCO%7C6468%7CVCI%7C0%7CTS%7C0%7CVE%7C0%5Ep64%5Ep1228800%5Eps%5Esdiv.gsc-background.ng-star-inserted%7CS%7C4324%2C2%7C6%7C_event_%7C1774618350768%7C_wv_%7ClcpT%7C-3%7Cfcp%7C5174%7Cfp%7C-5%7Ccls%7C-3%7Clt%7C-3%7Cinp%7C-3%2C2%7C2%7Cx%7Cxhr%7Cx%7C1774618355074%7C1774618356158%7Cdn%7C85%7Cxu%7Chttps%3A%2F%2Fapi.onlineweb.ca%2Fpmos-api-b2c%2Fapi%2Fv1%2FConfigurations%2Fadminportal.greenshield.ca%7Csvn%7C%2F%7Csvt%7C1774618350768%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci2%5Esk1%5Esh0%7Cxrt%7Cb1774618355076e0f4g47h47i292j62k292l807m835u40927v40210w186125T-2z11I1M-1986254341V0W1%7Cxcs%7C812%7Cxce%7C839%2C3%7C4%7Cx%7Cxhr%7Cx%7C1774618355969%7C1774618356158%7Cdn%7C85%7Cxu%7Chttps%3A%2F%2Fapi.onlineweb.ca%2Ftranslation-api%2Fapi%2Fv1%2FTranslations%3Fapplication%3DAdminConnectPortal%26languageIso%3Den%26filter_OrgCode%3DGSC%7Csvn%7C%2F%7Csvt%7C1774618350768%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci2%5Esk1%5Esh0%7Cxrt%7Cb1774618355971e0m180T-1z11I1%7Cxcs%7C177%7Cxce%7C189%2C2%7C3%7C_onload_%7C_load_%7C-%7C1774618355087%7C1774618355087%7Cdn%7C21%7Csvn%7C%2F%7Csvt%7C1774618350768%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci2%5Esk1%5Esh0%2C1%7C7%7C_event_%7C1774618350768%7C_view_%7Ctvn%7C%2F%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C1%7C8%7C_event_%7C1774618356006%7C_view_%7Csvn%7C%2F%7Csvt%7C1774618350768%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci2%5Esk1%5Esh0$rId=RID_2418$rpId=-1184966433$domR=1774618355086$tvn=%2Flogin$tvt=1774618356006$tvm=i2%3Bk1%3Bh0$tvtrg=1$w=1280$h=1024$sw=1280$sh=1024$nt=a0b1774618350768e18f19g37h37i368j148k368l503m503o973p4313q4317r4318s4319t4319u40555v39774w39774M-1184966433V0$fd=g16.2.2^sb6-10^sgoogleanalytics$url=https%3A%2F%2Fadminportal.greenshield.ca%2Flogin$title=Log%20in%20%7C%20GreenShield$sUrl=https%3A%2F%2Fadminportal.greenshield.ca%2F$latC=0$app=9edbc07df398b050$vi=MNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0$dnt=1$fId=418351710_81$v=10333260303165926$vID=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK$nV=1$nVAT=1$rf=https%3A%2F%2Fadminportal.greenshield.ca%2F$time=1774618357336"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:37 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 143\r\nConnection: keep-alive\r\nSet-Cookie: dtCookie=v_4_srv_2_sn_92O4D4TH9QUR7O615U5H8D9FJES5KMDO_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; Path=/; Domain=.greenshield.ca; secure; httponly\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"090d6a621a76d3e5284942132e586c00","sha1":"cae481ce71a0898a7dd6d7279f4cdd8e9b4e515e","sha256":"f896ec747d1030e6cb24230cd605aeb76405732fb471fa9226e911d7ede1e964","sha512":"fdb694a5eb2dd4f24fbe72be484074f255abdeb69befcfc116d57efa107b2ac8571e316eb28ac9c1eeb3bd8aa1f93d6406e804b444bf4b1bf14bd7b4f971f881","ssdeep":"","tlshash":"0ac02ba21f14c83c2587b4a7f0fccd360273fae5c000dd388163760d8a8214513600a3","first_seen":"2026-03-27T13:33:06.455944Z","last_seen":"2026-03-27T13:33:06.455944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/fa-light-300.cc4a38cba417c477.woff2","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:36.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /fa-light-300.cc4a38cba417c477.woff2 HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/styles.33d6c7a4e0919791.css\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; rxVisitor=1774618351714KT83DRH2AGVU7TRNJ69BPFAPV9135GTK; dtPC=-9683$418351710_81h4vMNPCTGABCRDFGFMFIRBFKLVFNQUCJQMM-0e0; rxvt=1774620155969|1774618351715; dtSa=-\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:36 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 424536\r\nConnection: keep-alive\r\nETag: \"69c2d470-67a58:dtagent10333260303165926hsSf\"\r\nLast-Modified: Tue, 24 Mar 2026 18:14:07 GMT\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1477309785\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 424536, version 769.768","md5":"b7412eb0b0d0a37deffbb70250b4011d","sha1":"b89ad9dfe0720d47eb134b6a32806f185cc12ee3","sha256":"515954fe1dc163277d36b51f79fe56265f6b6cf79f99e307bbf6e52b477b9c87","sha512":"c5dae743bad81c8cfcd0a2601a2cd3bbcd2309c585e2d1adfe29c0080a164f7765dc195e8888eafe0f74440e36c0935c2e9cf79fc2403356746b250644e3f945","ssdeep":"12288:KkKyDxLL2erLD0ZAvB71RJ8zfLtZI4M5zLs6:99rv0WB7omH","tlshash":"369423b1c45e589f1f2c51b183406b4a43d46ac8e24cbe360b32bdee797fd1095a63a7","first_seen":"2023-04-15T00:32:17Z","last_seen":"2026-04-05T06:53:06.93859Z","times_seen":3248,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":543,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/polyfills.18212239a72ec150.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:31.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /polyfills.18212239a72ec150.js HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33859\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Mar 2026 18:14:08 GMT\r\nETag: \"69c2d470-8443\"\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"1175247491\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33859), with no line terminators","md5":"f33bd27315ee980c96c845dcb68b9c75","sha1":"f853cdd94d4ee8648546cca0fb11616b8468a87c","sha256":"3df589d11cad80dfdc17fe57c26ff4977fa01c72bb30f182273629f49f5f5b01","sha512":"3fadc268efdcf6b6661f4a4c106562d8c36071965b2cc6bd45d8e2e6723524ca4712af90f6670288c1333207e848202aa5f9d9f08415a072694963ef93b69c06","ssdeep":"768:le+21vId1Ml1nJCcAqviA5RyIHQNcsWZPvkMB+3KbLcdmNx52Ac6cjC/n3P4fPdj:JA5EEcMHHtSTPn","tlshash":"c2e207da33a2b0b687fa55b1903b4107f63665a0784c48e4f12c99db3d3b049e5a7f2d","first_seen":"2025-11-27T15:30:18.603786Z","last_seen":"2026-03-27T13:33:06.45934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":911,"timings":{"blocked":332,"dns":0,"connect":114,"send":0,"wait":130,"receive":109,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.onlineweb.ca/translation-api/api/v1/Translations?application=AdminConnectPortal\u0026languageIso=en\u0026filter_OrgCode=GSC","fqdn":"api.onlineweb.ca","domain":"onlineweb.ca","tld":"ca"},"ip":{"addr":"34.36.123.198","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:35.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-gcp.onlineweb.ca","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Mar 2026 10:09:45 GMT","end":"Mon, 08 Jun 2026 11:03:57 GMT"},"fingerprint":{"sha1":"FD:02:CB:02:12:A8:4B:E8:64:7A:5C:F8:A1:97:DF:C7:A0:1F:01:BF","sha256":"9B:67:6D:3F:50:AD:78:09:35:45:5B:1E:17:02:3D:B7:0B:85:C6:45:22:98:2F:FE:86:D4:4D:31:36:78:CF:6E"}}},"request":{"raw":"GET /translation-api/api/v1/Translations?application=AdminConnectPortal\u0026languageIso=en\u0026filter_OrgCode=GSC HTTP/1.1\r\nHost: api.onlineweb.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://adminportal.greenshield.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 27 Mar 2026 13:32:35 GMT\r\naccess-control-allow-origin: https://adminportal.greenshield.ca\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nvia: 1.1 google, 1.1 google\r\nx-routed-backend: canary\r\naccess-control-allow-credentials: true\r\nx-request-id: 4a7f00b0-1fa6-4cf9-848f-732fdea98359\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105566,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8a57d4e1afd013c38f90a2f90ba06c8","sha1":"d56ba17f0be858f2085860f6570baa472c134ed9","sha256":"40fea0caabcf305659d795805ea37da4facfbc585ecccc005d7b8e7ef11a2221","sha512":"96b138810f6b294c0735f3416a097f30441dbca2e82b0b75d416e626d92e125057b547f4c2f66ad49ac4ccc55af4b9330b6daea264c6d1ccbf1d703d0662297a","ssdeep":"1536:DjIjMl4iIFzroWA4I3aLkptURzIQ2eDSCO3eY:HEndQptUFh2eeCO3eY","tlshash":"cea3b84b64182e395f9f03e779de79113bf9d0c2d199581ca8b89c1e0b6ed89321f12e","first_seen":"2026-03-27T13:33:06.461462Z","last_seen":"2026-03-27T13:33:06.461462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T13:32:30.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: \"69c2d476-99ce:dtagent10333260303165926hsSf\"\r\nX-OneAgent-JS-Injection: true\r\nX-ruxit-JS-Agent: true\r\nLast-Modified: Tue, 24 Mar 2026 18:14:13 GMT\r\nServer-Timing: dtSInfo;desc=\"0\", dtRpid;desc=\"-1184966433\"\r\nSet-Cookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0; Path=/; Domain=.greenshield.ca; secure; httponly\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Dynatrace","description":"Dynatrace is a technology company that produces a software intelligence platform based on artificial intelligence to monitor and optimise application performance and development, IT infrastructure, and user experience for businesses and government agencies throughout the world.","website":"https://www.dynatrace.com","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Dynatrace RUM","description":"Dynatrace RUM is a AI powered, full stack, automated real user monutoring platform built by Dynatrace.","website":"https://www.dynatrace.com/platform/real-user-monitoring","common_platform_enumeration":"","icon":"Dynatrace.svg","categories":["RUM"]}],"data":{"size":39774,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (22507)","md5":"5646cba83dfea5de466a6c6c4e4c960b","sha1":"fbb7673927e2fc39c38cae3c25e9508d018569b0","sha256":"2c38026f88ea9d2aebcaaf9f64b9d1545e209b4236ce4cd872861acb696b0142","sha512":"bb84b9c0d7eeffd7698707791554945f13d47c7bcb69534037b1d01d2048bbee47f7990cc1d58b172093b8fa3331b58c43fe4a897130a2d3a2fb4c9f426b43c4","ssdeep":"384:cLqY2UqYVuqYTnqYiSSr9S76JPyYYD1GhoezZ8:cP2UViTb5CYBGzO","tlshash":"a20353008012542a916389ff20ccfe21ee4acda195106737b6fd8f5e9edfd5a73a8724","first_seen":"2026-03-27T13:33:06.463381Z","last_seen":"2026-03-27T13:33:06.463381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":348,"dns":18,"connect":109,"send":0,"wait":135,"receive":107,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adminportal.greenshield.ca/ruxitagentjs_ICA7NVfqrux_10333260303165926.js","fqdn":"adminportal.greenshield.ca","domain":"greenshield.ca","tld":"ca"},"ip":{"addr":"199.71.241.40","port":443,"asn":36235,"as":"GREENSHIELD","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://adminportal.greenshield.ca/","date":"2026-03-27T13:32:31.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adminportal.greenshield.ca","organization":"Green Shield Holdings Inc."},"issuer":{"commonName":"Entrust OV TLS Issuing RSA CA 2","organization":"Entrust Limited"},"validity":{"start":"Fri, 04 Jul 2025 00:00:00 GMT","end":"Sat, 04 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"89:36:20:D7:78:45:C2:A2:15:13:3F:C4:51:76:2B:99:0B:D8:68:F0","sha256":"3B:A5:AF:AF:29:F6:1B:2C:D6:09:67:2C:FF:CA:69:F6:F3:69:AD:B1:4F:45:D2:EC:5F:B1:85:C8:49:89:06:1C"}}},"request":{"raw":"GET /ruxitagentjs_ICA7NVfqrux_10333260303165926.js HTTP/1.1\r\nHost: adminportal.greenshield.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://adminportal.greenshield.ca/\r\nCookie: dtCookie=v_4_srv_1_sn_108E47DB6FF7DEDE706A8AE2FA409AF0_perc_100000_ol_0_mul_1_app-3A9edbc07df398b050_0_rcs-3Acss_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 27 Mar 2026 13:32:31 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 80053\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nExpires: Sat, 27 Mar 2027 13:32:31 GMT\r\nCache-Control: public, max-age=31536000, immutable\r\nLast-Modified: Wed, 03 Mar 2010 07:01:40 GMT\r\nStrict-Transport-Security: max-age=15724800; includeSubDomains; preload\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":208765,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1629)","md5":"9fc1a32515559d4124ed5ed0ec81ddbf","sha1":"7fe5c34a7ceede1fea520d9ba496ffc869a5aa5c","sha256":"f042162fd2862577cfd164e161da4753ad95c25db4b3a218d7627bcbfc6adb56","sha512":"a61d00863ec5550062e5c65a61c9005592fb58b906ebf6f93aa21292c036f015dc98cdc3288f7e63a6495defd315ec61c5beb21b86b082e11338368c3744d13f","ssdeep":"3072:jqQOxaZxboGJtqlEh6KVtdlGB9KJAyAtNaQ:LOxaZXJtGEcKVE90AyAyQ","tlshash":"42144b99771270664b9321b950bf020bf3b8bd94984c84a4e191e5e83d74efe42f7f29","first_seen":"2026-03-18T20:30:12.633756Z","last_seen":"2026-04-04T22:22:12.876067Z","times_seen":58,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}