Edit tour

Windows Analysis Report
https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH

Overview

General Information

Sample URL:	https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH
Analysis ID:	1466447
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML title does not match URL

Invalid 'forgot password' link found

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2276,i,8006787430791926615,5119897372207284372,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/leads/signout?website_uuid=5d35c5bb-194d-41ee-82fc-dc5e9244261b&lead_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJsZWFkX3V1aWQiOiJlNGE4NzkxYy1iODY1LTRkMDMtYWZjNS1lMzM3NTMxOWYyYzUiLCJ3ZWJzaXRlX3V1aWQiOiI1ZDM1YzViYi0xOTRkLTQxZWUtODJmYy1kYzVlOTI0NDI2MWIiLCJpYXQiOjE3MTk5NTU2NDJ9.dyTNC6Jb6FNzV5B95Yao2c9MbBe75jsz2RBABzS0QiA HTTP/1.1Host: search.showcaseidx.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://eastvalleynow.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://eastvalleynow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://eastvalleynow.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/01/SIDEBAR.jpg	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/06/444964765_18031514141012328_3637550946510462371_n-263x175.jpg	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.6	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/06/444964765_18031514141012328_3637550946510462371	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/02/20240214031616750664000000-o-263x175.jpg	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/elementor/css/post-3016.css?ver=1719901346	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.22.1	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/06/mix-use-5-263x175.jpg	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/uploads/2024/05/mix-use-2-263x175.jpg	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.22.3	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/plugins/penci-shortcodes/assets/play.js?ver=5.6	Avira URL Cloud: Label: malware
Source: https://eastvalleynow.com/wp-content/themes/soledad/js/js-cookies.js?ver=8.5.2	Avira URL Cloud: Label: malware

Source: https://eastvalleynow.com/category/gilbert/	HTTP Parser: Form action: https://eastvalleynow.com/wp-login.php
Source: https://eastvalleynow.com/category/gilbert/	HTTP Parser: Form action: https://eastvalleynow.com/wp-login.php?action=lostpassword

Source: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH	HTTP Parser: No favicon
Source: https://gilbertnow.com/	HTTP Parser: No favicon
Source: https://gilbertnow.com/	HTTP Parser: No favicon
Source: https://gilbertnow.com/	HTTP Parser: No favicon
Source: https://gilbertnow.com/	HTTP Parser: No favicon
Source: https://gilbertnow.com/	HTTP Parser: No favicon
Source: https://gilbertnow.com/real-estate/	HTTP Parser: No favicon

Source: https://eastvalleynow.com/category/gilbert/	HTTP Parser: No <meta name="author".. found
Source: https://gilbertnow.com/real-estate/	HTTP Parser: No <meta name="author".. found

Source: https://eastvalleynow.com/category/gilbert/	HTTP Parser: No <meta name="copyright".. found
Source: https://gilbertnow.com/real-estate/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	String found in binary or memory: <span class='q_social_icon_holder normal_social' ><a itemprop='url' href='https://www.facebook.com/gilbertnow' target='_blank'><i class="qode_icon_font_awesome fa fa-facebook-square simple_social" style="font-size: 35px;" ></i></a></span><span class='q_social_icon_holder normal_social' ><a itemprop='url' href='https://www.instagram.com/gilbertnow' target='_blank'><i class="qode_icon_font_awesome fa fa-instagram simple_social" style="font-size: 35px;" ></i></a></span><span class='q_social_icon_holder normal_social' ><a itemprop='url' href='linkedin.com/company/gilbertnow' target='_blank'><i class="qode_icon_font_awesome fa fa-linkedin simple_social" style="font-size: 35px;" ></i></a></span><div id="custom_html-3" class="widget_text widget widget_custom_html"><div class="textwidget custom-html-widget"><a href="http://gilbertnow.com/private-policy/">Privacy Policy</a></div></div></div> equals www.facebook.com (Facebook)
Source: chromecache_608.2.dr	String found in binary or memory: <li><a href="https://www.youtube.com/@eastvalleynow" equals www.youtube.com (Youtube)
Source: chromecache_608.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/gilbertnow/" equals www.facebook.com (Facebook)
Source: chromecache_608.2.dr	String found in binary or memory: <a href="https://www.youtube.com/@eastvalleynow" aria-label="Youtube" rel="noreferrer" target="_blank"><i class="penci-faicon fa fa-youtube-play" ></i></a> equals www.youtube.com (Youtube)
Source: chromecache_608.2.dr	String found in binary or memory: <a href="https://www.facebook.com/gilbertnow/" aria-label="Facebook" rel="noreferrer" target="_blank"><i class="penci-faicon fa fa-facebook" ></i></a> equals www.facebook.com (Facebook)
Source: chromecache_353.2.dr	String found in binary or memory: !function(e,t){"function"==typeof define&&define.amd?define(t):"object"==typeof exports?module.exports=t:e.fluidvids=t()}(this,function(){"use strict";function e(e){return new RegExp("^(https?:)?//(?:"+d.players.join("\|")+").$","i").test(e)}function t(e,t){return parseInt(e,10)/parseInt(t,10)100+"%"}function i(i){if((e(i.src)\|\|e(i.data))&&!i.getAttribute("data-fluidvids")){var n=document.createElement("div");i.parentNode.insertBefore(n,i),i.className+=(i.className?" ":"")+"fluidvids-item",i.setAttribute("data-fluidvids","loaded"),n.className+="fluidvids",n.style.paddingTop=t(i.height,i.width),n.appendChild(i)}}function n(){var e=document.createElement("div");e.innerHTML="<p>x</p><style>"+o+"</style>",r.appendChild(e.childNodes[1])}var d={selector:["iframe","object"],players:["www.youtube.com","player.vimeo.com"]},o=[".fluidvids {","width: 100%; max-width: 100%; position: relative;","}",".fluidvids-item {","position: absolute; top: 0px; left: 0px; width: 100%; height: 100%;","}"].join(""),r=document.head\|\|document.getElementsByTagName("head")[0];return d.render=function(){for(var e=document.querySelectorAll(d.selector.join()),t=e.length;t--;)i(e[t])},d.init=function(e){for(var t in e)d[t]=e[t];d.render(),n()},d}); equals www.youtube.com (Youtube)
Source: chromecache_632.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_608.2.dr	String found in binary or memory: <li class="menu-item menu-item-type-custom menu-item-object-custom ajax-mega-menu menu-item-1900"><a href="https://www.youtube.com/@eastvalleynow/videos">VIDEOS</a></li> equals www.youtube.com (Youtube)
Source: chromecache_608.2.dr	String found in binary or memory: <li id="menu-item-1900" class="menu-item menu-item-type-custom menu-item-object-custom ajax-mega-menu menu-item-1900"><a href="https://www.youtube.com/@eastvalleynow/videos">VIDEOS</a></li> equals www.youtube.com (Youtube)
Source: chromecache_329.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_329.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=679607742645696&ev=PageView&noscript=1" /> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: gilbertnow.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: eastvalleynow.com
Source: global traffic	DNS traffic detected: DNS query: search.showcaseidx.com
Source: global traffic	DNS traffic detected: DNS query: s.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: images.showcaseidx.com
Source: global traffic	DNS traffic detected: DNS query: js.pusher.com
Source: global traffic	DNS traffic detected: DNS query: api.mapbox.com
Source: global traffic	DNS traffic detected: DNS query: thumbnails.showcaseidx.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 21:26:45 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gilbertnow.com/wp-json/>; rel="https://api.w.org/"Set-Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242; path=/; secure; HttpOnlyUpgrade: h2,h2cConnection: Upgrade, closeVary: Accept-EncodingTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Powered-By: ExpressAccess-Control-Allow-Origin: *Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffContent-Type: text/html; charset=utf-8Content-Length: 156Vary: Accept-EncodingDate: Tue, 02 Jul 2024 21:27:33 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Powered-By: ExpressAccess-Control-Allow-Origin: *Content-Security-Policy: default-src 'none'X-Content-Type-Options: nosniffContent-Type: text/html; charset=utf-8Content-Length: 157Vary: Accept-EncodingDate: Tue, 02 Jul 2024 21:27:39 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2276,i,8006787430791926615,5119897372207284372,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2276,i,8006787430791926615,5119897372207284372,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://gilbertnow.com/wp-json/wp/v2/pages/18893	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/rangeslider.min.js?ver=6.5.5	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	0%	Avira URL Cloud	safe
https://eastvalleynow.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-json/	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://eastvalleynow.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5	100%	Avira URL Cloud	malware
http://mixitup.io	0%	Avira URL Cloud	safe
https://github.com/gajus/sister/blob/master/LICENSE	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jplayer.min.js?ver=6.5.5	0%	Avira URL Cloud	safe
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/388/821?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	0%	Avira URL Cloud	safe
http://gilbertnow.com/wp-content/uploads/2020/01/logo2.jpg	0%	Avira URL Cloud	safe
https://eastvalleynow.com/?s=	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/uploads/2020/01/leftphotos-1.gif	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/uploads/2020/01/cropped-gnowjpg-270x270.jpg	0%	Avira URL Cloud	safe
https://gilbertnow.com/?p=18893	0%	Avira URL Cloud	safe
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/389/822?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.appear.js?ver=6.5.5	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/jquery/ui/effect-clip.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-content/uploads/2020/01/Screen-Shot-2020-01-13-at-1.49.23-PM-300x218.png	0%	Avira URL Cloud	safe
http://www.infinite-scroll.com/loading.gif	0%	Avira URL Cloud	safe
https://eastvalleynow.com/wp-content/uploads/2024/01/SIDEBAR.jpg	100%	Avira URL Cloud	malware
https://gilbertnow.com/wp-content/uploads/2020/01/rightgif.gif	0%	Avira URL Cloud	safe
http://www.greensock.com	0%	Avira URL Cloud	safe
https://eastvalleynow.com/wp-content/uploads/2024/06/444964765_18031514141012328_3637550946510462371_n-263x175.jpg	100%	Avira URL Cloud	malware
https://eastvalleynow.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.6	100%	Avira URL Cloud	malware
https://eastvalleynow.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Feastvalleynow.com%2Fsearch%2F&#	0%	Avira URL Cloud	safe
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/388/824?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	0%	Avira URL Cloud	safe
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/387/823?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	0%	Avira URL Cloud	safe
http://www.modernizr.com/)	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.13.2	0%	Avira URL Cloud	safe
https://gilbertnow.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5	0%	Avira URL Cloud	safe

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
192.185.79.249	gilbertnow.com	United States	46606	UNIFIEDLAYER-AS-1US	false
66.102.1.154	unknown	United States	15169	GOOGLEUS	false
65.9.86.114	unknown	United States	16509	AMAZON-02US	false
65.9.86.111	api.mapbox.com	United States	16509	AMAZON-02US	false
192.185.91.211	eastvalleynow.com	United States	46606	UNIFIEDLAYER-AS-1US	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
34.117.146.176	legacy-applications.showcaseidx.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
108.156.64.41	d3dy5gmtp8yhk7.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.111.198.243	showcaseimages.showcaseidx.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
34.149.33.229	thumbnails.showcaseidx.com	United States	2686	ATGS-MMD-ASUS	false

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
eastvalleynow.com	192.185.91.211	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	173.194.76.156	true	false	unknown
api.mapbox.com	65.9.86.111	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
gilbertnow.com	192.185.79.249	true	false	unknown
thumbnails.showcaseidx.com	34.149.33.229	true	false	unknown
legacy-applications.showcaseidx.com	34.117.146.176	true	false	unknown
s.gravatar.com	192.0.73.2	true	false	unknown
showcaseimages.showcaseidx.com	34.111.198.243	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
d3dy5gmtp8yhk7.cloudfront.net	108.156.64.41	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
search.showcaseidx.com	unknown	unknown	false	unknown
images.showcaseidx.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
js.pusher.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/rangeslider.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5	false	Avira URL Cloud: malware	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/slider.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/leftphotos-1.gif	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jplayer.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/388/821?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/389/822?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.appear.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/effect-clip.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/rightgif.gif	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/2024/01/SIDEBAR.jpg	false	Avira URL Cloud: malware	unknown
https://eastvalleynow.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.6	false	Avira URL Cloud: malware	unknown
https://eastvalleynow.com/wp-content/uploads/2024/06/444964765_18031514141012328_3637550946510462371_n-263x175.jpg	false	Avira URL Cloud: malware	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/387/823?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/388/824?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/infinitescroll.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/elementor/css/global.css?ver=1658952439	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.justifiedGallery.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/packery-mode.pkgd.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/effect-fade.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/20190824004736108798000000-o.jpg	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/plugins/LayerSlider/static/layerslider/css/layerslider.css?ver=6.10.0	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/2024/02/20240214031616750664000000-o-263x175.jpg	false	Avira URL Cloud: malware	unknown
https://gilbertnow.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.6.4	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/effect-scale.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-includes/js/comment-reply.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/elementor/css/post-3016.css?ver=1719901346	false	Avira URL Cloud: malware	unknown
https://eastvalleynow.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.22.1	false	Avira URL Cloud: malware	unknown
https://www.facebook.com/tr/?id=679607742645696&ev=PageView&dl=https%3A%2F%2Fgilbertnow.com%2Freal-estate%2F&rl=&if=false&ts=1719955678115&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.5.5-3.0.16&ec=0&o=4126&fbp=fb.1.1719955612147.196297741560491148&ler=empty&cdl=API_unavailable&it=1719955677973&coo=false&rqm=GET	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/jquery/ui/spinner.min.js?ver=1.13.2	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/2024/06/mix-use-5-263x175.jpg	false	Avira URL Cloud: malware	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.sticky-kit.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/2024/05/mix-use-2-263x175.jpg	false	Avira URL Cloud: malware	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.prettyPhoto.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.22.3	false	Avira URL Cloud: malware	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/20180505010436218553000000-o.jpg	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-includes/js/comment-reply.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.22.3	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js?v=next	false	Avira URL Cloud: safe	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/10/195/412?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/themes/soledad/js/js-cookies.js?ver=8.5.2	false	Avira URL Cloud: malware	unknown
https://eastvalleynow.com/wp-content/plugins/penci-shortcodes/assets/play.js?ver=5.6	false	Avira URL Cloud: malware	unknown
https://api.mapbox.com/styles/v1/mapbox/streets-v9/tiles/256/11/390/822?access_token=pk.eyJ1Ijoic2hvd2Nhc2VpZHgiLCJhIjoiY2x3NTVqZDNqMWpieTJpbnJ0cjJjdzhsbSJ9.WDOlx2t1eGblVhjKAOAQjA	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/modernizr.min.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/themes/bridge/js/plugins/jquery.easing.1.3.js?ver=6.5.5	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://gilbertnow.com/wp-json/	chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-json/wp/v2/pages/18893	chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
http://mixitup.io	chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_467.2.dr	false	URL Reputation: safe	unknown
https://github.com/gajus/sister/blob/master/LICENSE	chromecache_442.2.dr	false	Avira URL Cloud: safe	unknown
https://swiperjs.com	chromecache_382.2.dr, chromecache_626.2.dr, chromecache_420.2.dr	false	URL Reputation: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/cropped-gnowjpg-270x270.jpg	chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/?p=18893	chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_387.2.dr	false	URL Reputation: safe	unknown
http://gilbertnow.com/wp-content/uploads/2020/01/logo2.jpg	chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/?s=	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/Screen-Shot-2020-01-13-at-1.49.23-PM-300x218.png	chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Feastvalleynow.com%2Fsearch%2F&#	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
http://www.greensock.com	chromecache_372.2.dr, chromecache_449.2.dr	false	Avira URL Cloud: safe	unknown
http://www.infinite-scroll.com/loading.gif	chromecache_635.2.dr	false	Avira URL Cloud: safe	unknown
http://www.modernizr.com/)	chromecache_387.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-login.php	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/comments/feed/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/uploads/2024/06/444964765_18031514141012328_3637550946510462371	chromecache_608.2.dr	false	Avira URL Cloud: malware	unknown
http://gmpg.org/xfn/11	chromecache_608.2.dr, chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
http://www.openstreetmap.org/copyright	chromecache_442.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/uploads/2020/01/cropped-gnowjpg-192x192.jpg	chromecache_392.2.dr, chromecache_446.2.dr, chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPHeader	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_513.2.dr, chromecache_647.2.dr, chromecache_623.2.dr	false	URL Reputation: safe	unknown
https://eastvalleynow.com/blog/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://api.mapbox.com/styles/v1/	chromecache_442.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/category/video/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/search/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
http://miromannino.github.io/Justified-Gallery/	chromecache_616.2.dr	false	Avira URL Cloud: safe	unknown
http://twbs.github.com/bootstrap/javascript.html#carousel	chromecache_466.2.dr	false	Avira URL Cloud: safe	unknown
http://gilbertnow.com/	chromecache_437.2.dr	false	Avira URL Cloud: safe	unknown
http://www.gnu.org/copyleft/gpl.html	chromecache_387.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=5.9.	chromecache_446.2.dr	false	Avira URL Cloud: safe	unknown
http://www.no-margin-for-errors.com)	chromecache_331.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-json/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
http://infinite-scroll.com/	chromecache_635.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8	chromecache_608.2.dr	false	Avira URL Cloud: malware	unknown
https://fontawesome.com/license/free	chromecache_629.2.dr, chromecache_594.2.dr, chromecache_343.2.dr	false	URL Reputation: safe	unknown
https://mailchi.mp/a94a1cb463de/gilbertnewsletter	chromecache_446.2.dr	false	Avira URL Cloud: safe	unknown
https://www.instagram.com/gilbertnow/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://vimeo.com/120196610	chromecache_431.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/category/east-mesa/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://gilbertnow.com/wp-json/wp/v2/pages/14006	chromecache_446.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://eastvalleynow.com/wp-login.php?action=lostpassword	chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466447
Start date and time:	2024-07-02 23:25:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@20/653@48/19
Cookbook Comments:	Browse: https://gilbertnow.com/ Browse: https://eastvalleynow.com/properties/ Browse: https://eastvalleynow.com/category/gilbert/ Browse: https://gilbertnow.com/real-estate/

Input	Output
URL: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency as it does not contain phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: GilbertNOW.com \| OCR: VENTURE REI IL BERT NOW HOME SEARCH GILBERT NEWS SELL YOUR HOME CONTACT US REAL zsTATE INVESTMENT THE PAGE YOU ARE LOOKING FOR IS NOT FOUND The page you are looking for dces not exist. It may have been moved, or removed altogether Perhaps you can return back to the site's homepage and see if you can find what you are looking for. BACK TO HOMEPAGE n @ in RECENT POSTS VENTURE REI Privacy Policy SW corner of Ray and Higley REAL ESTATE & INVESTMENT Farmhouse for Sale Heritage north update
URL: https://gilbertnow.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers.","The text does not create a sense of urgency or interest as there are no calls to action related to viewing documents or accessing secured content.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanisms."]}
Title: GilbertNOW.com \| Keeping You In The Now in Gilbert,AZ OCR: VENTURE REI NOW IL BERT HOME SEARCH GILBERT NEWS SELL YOUR HOME CONTACT US REAL zsTATE INVESTMENT FOLLOW US NOW
URL: https://eastvalleynow.com/category/gilbert/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The webpage contains a newsletter subscription form which requests for sensitive information in the form of email addresses.","The text creates a sense of urgency by encouraging users to subscribe to the newsletter to stay updated and view content before others."]}
Title: Gilbert Archives - East Valley Now OCR: EAST VALLEY NOW HOME CITIES LIST YOUR HOUSE SEARCH HOMES VIDEOS CONTACT US Home * Gilbert CATEGORY: GILBERT SUBSCRIBE NEWSLETTER to see whats coming before everyone else! Let's stay updated! Name. Email. SUBSCRIBE DON'T BE A SUCKER AND COMING SOON Retail shop plan to be built on the 9990 NW corner of Warner and Hi le euii FEE FRA* Coming Soon 0 Development 0 Gilbert RETAIL COMING TO NW CORNER HIGLEY AND WARNER by evnadmin June 10, 2024 Ocomment POPULAR POSTS There are plans in place for the development of a new retail destination at the northwest corner of Higley and Warner. The
URL: https://gilbertnow.com/real-estate/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no risk associated with sensitive information being requested.","The text does not create a sense of urgency, as it focuses on services provided by the company rather than prompting immediate action.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage.","The title and text are about real estate services, specifically for GilbertNOW.com, and do not contain any suspicious or malicious elements."]}
Title: GilbertNOW.com \| Real Estate OCR: VENTURE REI NOW IL BERT HOME SEARCH GILBERT NEWS SELL YOUR HOME CONTACT US REAL zsTATE INVESTMENT for $3,990 no matter the purchase price. All Of This, MLS & ONLINE PROFESSIONAL PHOTOS SIGN & LOCKBOX Our services include high definition. A front yard sign will be installed to attract Your home will be listed on the MLS and interior/exterior, neighborhood and drone featured on all popular online websites buyers A realtor lockbox will be used, pictures when showings are scheduled. 66 SHOWING FEEDBACK CONTRACT NEGOTIATION PAPERWORK We handle the entire negotiation process Receive via email, an automated showing We work with the buyer's agent, lender, and work with all parties to get you the feedback message after each showing and title company to ensure a smooth and price and terms that work best for you. on-time closing STAGING (OPTIONAL) OPEN HOUSE (OPTIONAL) CAMERA SECURITY If your home is vacant, we will provide Our open houses tend to drive a lot of We provide a dropcam to view and listen to professional staging for only Ssgo traffc due to our social media presence all FWtential buyers and their agents while Furniture shows the best to potential viewing your home when you're not at your Open houses are a great way to get feedback from the public and exiN)ses your buyers and online shoppers home. home to potential buyers TESTIMONIALS Jackie Becky Agritopia Carriage Lane
URL: https://eastvalleynow.com Model: gpt-4o	```json{ "phishing_score": 1, "brands": "East Valley Now", "phishing": false, "suspicious_domain": false, "has_prominent_loginform": false, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "eastvalleynow.com", "reasons": "The website 'https://eastvalleynow.com' appears to be a legitimate site. The domain name matches the brand name 'East Valley Now' and does not exhibit any suspicious characteristics. The site does not have a prominent login form, CAPTCHA, or any suspicious links. There are no evident social engineering techniques being used. The content and layout of the site seem consistent with a legitimate news or community information website."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	42837
Entropy (8bit):	5.085278954417642
Encrypted:	false
SSDEEP:	768:PBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7PCORUQuFBt33:ZAIMFFdYMxAcbQDV
MD5:	6116A6D3B89835EE57D3DF56618B0A23
SHA1:	1A6A54FDD92EF487BCF64AC6F512CAF2FB9795AF
SHA-256:	A715E17603597141032C8A52857BC5AFB108CFF4F51B7864187F37AC4C39E696
SHA-512:	E9D1D00265294069DCDCCFF7D9B53ADDF563E51731E3F833466BA84024D9DCE1DD3E358BC1A03CED577C8F0D3EED1788BD46FA6CE68FECA6E6FFF8886F2DC1DD
Malicious:	false
Reputation:	low
URL:	https://gilbertnow.com/wp-content/themes/bridge/js/plugins/owl.carousel.min.js?ver=6.5.5
Preview:	/*. Owl Carousel v2.2.1. * Copyright 2013-2017 David Deutsch. * Licensed under MIT (https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE). */.!function(a,b,c,d){function e(b,c){this.settings=null,this.options=a.extend({},e.Defaults,c),this.$element=a(b),this._handlers={},this._plugins={},this._supress={},this._current=null,this._speed=null,this._coordinates=[],this._breakpoint=null,this._width=null,this._items=[],this._clones=[],this._mergers=[],this._widths=[],this._invalidated={},this._pipe=[],this._drag={time:null,target:null,pointer:null,stage:{start:null,current:null},direction:null},this._states={current:{},tags:{initializing:["busy"],animating:["busy"],dragging:["interacting"]}},a.each(["onResize","onThrottledResize"],a.proxy(function(b,c){this._handlers[c]=a.proxy(this[c],this)},this)),a.each(e.Plugins,a.proxy(function(a,b){this._plugins[a.charAt(0).toLowerCase()+a.slice(1)]=new b(this)},this)),a.each(e.Workers,a.proxy(function(b,c){this._pipe.push({filter:c.filt

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 2, 2024 23:26:44.245526075 CEST	192.168.2.4	1.1.1.1	0xb1b6	Standard query (0)	gilbertnow.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:44.245672941 CEST	192.168.2.4	1.1.1.1	0xe6c2	Standard query (0)	gilbertnow.com	65	IN (0x0001)	false
Jul 2, 2024 23:26:46.300885916 CEST	192.168.2.4	1.1.1.1	0x12f3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:46.301184893 CEST	192.168.2.4	1.1.1.1	0xa474	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 23:26:49.503475904 CEST	192.168.2.4	1.1.1.1	0xa44d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:49.503695965 CEST	192.168.2.4	1.1.1.1	0xcf72	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jul 2, 2024 23:26:49.574548006 CEST	192.168.2.4	1.1.1.1	0x78f7	Standard query (0)	gilbertnow.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:49.574843884 CEST	192.168.2.4	1.1.1.1	0x566d	Standard query (0)	gilbertnow.com	65	IN (0x0001)	false
Jul 2, 2024 23:26:52.807952881 CEST	192.168.2.4	1.1.1.1	0x81b7	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:52.808176041 CEST	192.168.2.4	1.1.1.1	0x482d	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 2, 2024 23:26:53.760833025 CEST	192.168.2.4	1.1.1.1	0x46c4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:53.760967970 CEST	192.168.2.4	1.1.1.1	0x3960	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:21.151242018 CEST	192.168.2.4	1.1.1.1	0xb5a5	Standard query (0)	eastvalleynow.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:21.151866913 CEST	192.168.2.4	1.1.1.1	0x5fd6	Standard query (0)	eastvalleynow.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:24.794162035 CEST	192.168.2.4	1.1.1.1	0xd6e8	Standard query (0)	search.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:24.794526100 CEST	192.168.2.4	1.1.1.1	0x2eee	Standard query (0)	search.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:24.796696901 CEST	192.168.2.4	1.1.1.1	0x11d1	Standard query (0)	s.gravatar.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:24.796878099 CEST	192.168.2.4	1.1.1.1	0xa218	Standard query (0)	s.gravatar.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:25.314439058 CEST	192.168.2.4	1.1.1.1	0x418f	Standard query (0)	images.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:25.314608097 CEST	192.168.2.4	1.1.1.1	0x12f	Standard query (0)	images.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:26.313671112 CEST	192.168.2.4	1.1.1.1	0x2556	Standard query (0)	images.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:26.314167023 CEST	192.168.2.4	1.1.1.1	0xd4c6	Standard query (0)	images.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:26.548343897 CEST	192.168.2.4	1.1.1.1	0x5b88	Standard query (0)	eastvalleynow.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:26.548546076 CEST	192.168.2.4	1.1.1.1	0x80aa	Standard query (0)	eastvalleynow.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:27.094556093 CEST	192.168.2.4	1.1.1.1	0x3efd	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:27.094858885 CEST	192.168.2.4	1.1.1.1	0xf603	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:31.279664040 CEST	192.168.2.4	1.1.1.1	0x92da	Standard query (0)	api.mapbox.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.279825926 CEST	192.168.2.4	1.1.1.1	0xe0f7	Standard query (0)	api.mapbox.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:31.478053093 CEST	192.168.2.4	1.1.1.1	0xd652	Standard query (0)	thumbnails.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.478200912 CEST	192.168.2.4	1.1.1.1	0x793d	Standard query (0)	thumbnails.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:32.560276985 CEST	192.168.2.4	1.1.1.1	0x5b40	Standard query (0)	search.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:32.560632944 CEST	192.168.2.4	1.1.1.1	0xcab1	Standard query (0)	search.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:32.562817097 CEST	192.168.2.4	1.1.1.1	0xe5a2	Standard query (0)	thumbnails.showcaseidx.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:32.562952995 CEST	192.168.2.4	1.1.1.1	0x4522	Standard query (0)	thumbnails.showcaseidx.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:33.124007940 CEST	192.168.2.4	1.1.1.1	0xab88	Standard query (0)	api.mapbox.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.124169111 CEST	192.168.2.4	1.1.1.1	0xe7e3	Standard query (0)	api.mapbox.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:33.949507952 CEST	192.168.2.4	1.1.1.1	0xa13a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.949683905 CEST	192.168.2.4	1.1.1.1	0x97f4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 23:27:35.014027119 CEST	192.168.2.4	1.1.1.1	0x5fb8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.014178991 CEST	192.168.2.4	1.1.1.1	0x3b9e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:35.750935078 CEST	192.168.2.4	1.1.1.1	0xb3ff	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.751090050 CEST	192.168.2.4	1.1.1.1	0x3d11	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 2, 2024 23:27:36.083712101 CEST	192.168.2.4	1.1.1.1	0xf293	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:36.083966970 CEST	192.168.2.4	1.1.1.1	0x6278	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:58.744560957 CEST	192.168.2.4	1.1.1.1	0x9150	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:58.744960070 CEST	192.168.2.4	1.1.1.1	0xd5a2	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jul 2, 2024 23:27:59.899852037 CEST	192.168.2.4	1.1.1.1	0x9762	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:59.899983883 CEST	192.168.2.4	1.1.1.1	0x5e55	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 2, 2024 23:26:44.485735893 CEST	1.1.1.1	192.168.2.4	0xb1b6	No error (0)	gilbertnow.com		192.185.79.249	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:46.308455944 CEST	1.1.1.1	192.168.2.4	0xa474	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 23:26:46.308470011 CEST	1.1.1.1	192.168.2.4	0x12f3	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:49.511241913 CEST	1.1.1.1	192.168.2.4	0xa44d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:49.511241913 CEST	1.1.1.1	192.168.2.4	0xa44d	No error (0)	scontent.xx.fbcdn.net		157.240.252.13	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:49.513227940 CEST	1.1.1.1	192.168.2.4	0xcf72	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:49.787669897 CEST	1.1.1.1	192.168.2.4	0x78f7	No error (0)	gilbertnow.com		192.185.79.249	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:52.815293074 CEST	1.1.1.1	192.168.2.4	0x81b7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:52.815293074 CEST	1.1.1.1	192.168.2.4	0x81b7	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:52.815346956 CEST	1.1.1.1	192.168.2.4	0x482d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:53.768909931 CEST	1.1.1.1	192.168.2.4	0x3960	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:53.768925905 CEST	1.1.1.1	192.168.2.4	0x46c4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:53.768925905 CEST	1.1.1.1	192.168.2.4	0x46c4	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:26:59.466017008 CEST	1.1.1.1	192.168.2.4	0x5e6c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:26:59.466017008 CEST	1.1.1.1	192.168.2.4	0x5e6c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:13.225557089 CEST	1.1.1.1	192.168.2.4	0x1b0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:13.225557089 CEST	1.1.1.1	192.168.2.4	0x1b0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:21.393135071 CEST	1.1.1.1	192.168.2.4	0xb5a5	No error (0)	eastvalleynow.com		192.185.91.211	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:24.804779053 CEST	1.1.1.1	192.168.2.4	0x11d1	No error (0)	s.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:24.841990948 CEST	1.1.1.1	192.168.2.4	0xd6e8	No error (0)	search.showcaseidx.com	legacy-applications.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:24.841990948 CEST	1.1.1.1	192.168.2.4	0xd6e8	No error (0)	legacy-applications.showcaseidx.com		34.117.146.176	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:24.861007929 CEST	1.1.1.1	192.168.2.4	0x2eee	No error (0)	search.showcaseidx.com	legacy-applications.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:25.346515894 CEST	1.1.1.1	192.168.2.4	0x418f	No error (0)	images.showcaseidx.com	showcaseimages.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:25.346515894 CEST	1.1.1.1	192.168.2.4	0x418f	No error (0)	showcaseimages.showcaseidx.com		34.111.198.243	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:25.361073971 CEST	1.1.1.1	192.168.2.4	0x12f	No error (0)	images.showcaseidx.com	showcaseimages.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:26.346565962 CEST	1.1.1.1	192.168.2.4	0xd4c6	No error (0)	images.showcaseidx.com	showcaseimages.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:26.387511015 CEST	1.1.1.1	192.168.2.4	0x2556	No error (0)	images.showcaseidx.com	showcaseimages.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:26.387511015 CEST	1.1.1.1	192.168.2.4	0x2556	No error (0)	showcaseimages.showcaseidx.com		34.111.198.243	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:26.763133049 CEST	1.1.1.1	192.168.2.4	0x5b88	No error (0)	eastvalleynow.com		192.185.91.211	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:27.108172894 CEST	1.1.1.1	192.168.2.4	0x3efd	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:27.108172894 CEST	1.1.1.1	192.168.2.4	0x3efd	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		108.156.64.41	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:27.117038965 CEST	1.1.1.1	192.168.2.4	0xf603	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:31.287614107 CEST	1.1.1.1	192.168.2.4	0x92da	No error (0)	api.mapbox.com		65.9.86.111	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.287614107 CEST	1.1.1.1	192.168.2.4	0x92da	No error (0)	api.mapbox.com		65.9.86.42	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.287614107 CEST	1.1.1.1	192.168.2.4	0x92da	No error (0)	api.mapbox.com		65.9.86.87	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.287614107 CEST	1.1.1.1	192.168.2.4	0x92da	No error (0)	api.mapbox.com		65.9.86.114	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:31.503221989 CEST	1.1.1.1	192.168.2.4	0xd652	No error (0)	thumbnails.showcaseidx.com		34.149.33.229	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:32.582977057 CEST	1.1.1.1	192.168.2.4	0xe5a2	No error (0)	thumbnails.showcaseidx.com		34.149.33.229	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:32.592783928 CEST	1.1.1.1	192.168.2.4	0x5b40	No error (0)	search.showcaseidx.com	legacy-applications.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:32.592783928 CEST	1.1.1.1	192.168.2.4	0x5b40	No error (0)	legacy-applications.showcaseidx.com		34.117.146.176	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:32.613730907 CEST	1.1.1.1	192.168.2.4	0xcab1	No error (0)	search.showcaseidx.com	legacy-applications.showcaseidx.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:33.132436991 CEST	1.1.1.1	192.168.2.4	0xab88	No error (0)	api.mapbox.com		65.9.86.114	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.132436991 CEST	1.1.1.1	192.168.2.4	0xab88	No error (0)	api.mapbox.com		65.9.86.111	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.132436991 CEST	1.1.1.1	192.168.2.4	0xab88	No error (0)	api.mapbox.com		65.9.86.87	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.132436991 CEST	1.1.1.1	192.168.2.4	0xab88	No error (0)	api.mapbox.com		65.9.86.42	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.960688114 CEST	1.1.1.1	192.168.2.4	0xa13a	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.960688114 CEST	1.1.1.1	192.168.2.4	0xa13a	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.960688114 CEST	1.1.1.1	192.168.2.4	0xa13a	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:33.960688114 CEST	1.1.1.1	192.168.2.4	0xa13a	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.020971060 CEST	1.1.1.1	192.168.2.4	0x3b9e	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 23:27:35.021424055 CEST	1.1.1.1	192.168.2.4	0x5fb8	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.758709908 CEST	1.1.1.1	192.168.2.4	0xb3ff	No error (0)	stats.g.doubleclick.net		66.102.1.154	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.758709908 CEST	1.1.1.1	192.168.2.4	0xb3ff	No error (0)	stats.g.doubleclick.net		66.102.1.157	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.758709908 CEST	1.1.1.1	192.168.2.4	0xb3ff	No error (0)	stats.g.doubleclick.net		66.102.1.156	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.758709908 CEST	1.1.1.1	192.168.2.4	0xb3ff	No error (0)	stats.g.doubleclick.net		66.102.1.155	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:35.892812014 CEST	1.1.1.1	192.168.2.4	0x3d13	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:35.892812014 CEST	1.1.1.1	192.168.2.4	0x3d13	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:36.091136932 CEST	1.1.1.1	192.168.2.4	0xf293	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:36.091262102 CEST	1.1.1.1	192.168.2.4	0x6278	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 2, 2024 23:27:58.751281023 CEST	1.1.1.1	192.168.2.4	0x9150	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:27:58.751281023 CEST	1.1.1.1	192.168.2.4	0x9150	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:27:58.752520084 CEST	1.1.1.1	192.168.2.4	0xd5a2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:28:00.148296118 CEST	1.1.1.1	192.168.2.4	0x9762	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:28:00.148296118 CEST	1.1.1.1	192.168.2.4	0x9762	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jul 2, 2024 23:28:00.148459911 CEST	1.1.1.1	192.168.2.4	0x5e55	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:28:00.811156034 CEST	1.1.1.1	192.168.2.4	0xaa8a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 2, 2024 23:28:00.811156034 CEST	1.1.1.1	192.168.2.4	0xaa8a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:44 UTC	709	OUT	GET /lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 21:26:45 UTC	475	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 21:26:45 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://gilbertnow.com/wp-json/>; rel="https://api.w.org/" Set-Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242; path=/; secure; HttpOnly Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-07-02 21:26:45 UTC	7717	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 0a 09 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 09 09 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 72 65 61 6c 20 65 73 74 61 74 65 2c 20 68 Data Ascii: 4000<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no"> <meta name="keywords" content="real estate, h
2024-07-02 21:26:45 UTC	8673	IN	Data Raw: 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6e 61 74 75 72 61 6c 3a 20 36 70 78 20 36 70 78 20 39 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6f 75 74 6c 69 6e 65 64 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 2d 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 2c 20 36 70 78 20 36 70 Data Ascii: eset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6p
2024-07-02 21:26:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 21:26:45 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 72 69 64 67 65 2f 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 35 2e 35 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 62 72 69 64 67 65 2d 73 74 79 6c 65 2d 64 79 6e 61 6d 69 63 2d 72 65 73 70 6f 6e 73 69 76 65 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 72 69 64 67 65 2f 63 73 73 2f 73 74 79 6c 65 5f 64 79 6e 61 6d 69 63 5f 72 65 73 70 6f 6e 73 Data Ascii: 4000/gilbertnow.com/wp-content/themes/bridge/css/responsive.min.css?ver=6.5.5' type='text/css' media='all' /><link rel='stylesheet' id='bridge-style-dynamic-responsive-css' href='https://gilbertnow.com/wp-content/themes/bridge/css/style_dynamic_respons
2024-07-02 21:26:45 UTC	8198	IN	Data Raw: 73 3d 22 71 6f 64 65 5f 69 63 6f 6e 5f 66 6f 6e 74 5f 61 77 65 73 6f 6d 65 20 66 61 20 66 61 2d 62 61 72 73 20 22 20 3e 3c 2f 69 3e 09 09 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 5f 77 72 61 70 70 65 72 22 20 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 71 5f 6c 6f 67 6f 22 3e 0a 09 09 3c 61 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 22 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 20 63 6c 61 73 73 3d 22 6e 6f 72 6d 61 6c 22 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f Data Ascii: s="qode_icon_font_awesome fa fa-bars " ></i></span></div><div class="logo_wrapper" ><div class="q_logo"><a itemprop="url" href="https://gilbertnow.com/" > <img itemprop="image" class="normal" src="http://gilbertnow.com/wp-co
2024-07-02 21:26:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 21:26:45 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 73 3f 76 65 72 3d 36 2e 37 2e 31 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 72 73 2d 70 6c 75 67 69 6e 2d 73 65 74 74 69 6e 67 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 23 72 73 2d 64 65 6d 6f 2d 69 64 20 7b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 73 72 36 2f 61 73 73 65 74 73 2f 6a 73 2f 72 62 74 6f 6f 6c 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 37 2e 35 22 Data Ascii: 4000s?ver=6.7.10' type='text/css' media='all' /><style id='rs-plugin-settings-inline-css' type='text/css'>#rs-demo-id {}</style><script type="text/javascript" src="//gilbertnow.com/wp-content/plugins/revslider/sr6/assets/js/rbtools.min.js?ver=6.7.5"
2024-07-02 21:26:45 UTC	8198	IN	Data Raw: 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 68 6f 76 65 72 49 6e 74 65 6e 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 30 2e 32 22 20 69 64 3d 22 68 6f 76 65 72 49 6e 74 65 6e 74 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 72 69 64 67 65 2f 6a 73 2f 70 6c 75 67 69 6e 73 2f 63 6f 75 6e 74 65 72 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 35 22 20 69 64 3d 22 63 6f 75 6e 74 65 72 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 Data Ascii: includes/js/hoverIntent.min.js?ver=1.10.2" id="hoverIntent-js"></script><script type="text/javascript" src="https://gilbertnow.com/wp-content/themes/bridge/js/plugins/counter.js?ver=6.5.5" id="counter-js"></script><script type="text/javascript" src="htt
2024-07-02 21:26:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 21:26:45 UTC	8192	IN	Data Raw: 32 36 65 64 0d 0a 2f 69 6d 61 67 65 73 6c 6f 61 64 65 64 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 35 22 20 69 64 3d 22 69 6d 61 67 65 73 4c 6f 61 64 65 64 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 6c 62 65 72 74 6e 6f 77 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 72 69 64 67 65 2f 6a 73 2f 70 6c 75 67 69 6e 73 2f 72 61 6e 67 65 73 6c 69 64 65 72 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 35 22 20 69 64 3d 22 72 61 6e 67 65 53 6c 69 64 65 72 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d Data Ascii: 26ed/imagesloaded.js?ver=6.5.5" id="imagesLoaded-js"></script><script type="text/javascript" src="https://gilbertnow.com/wp-content/themes/bridge/js/plugins/rangeslider.min.js?ver=6.5.5" id="rangeSlider-js"></script><script type="text/javascript" src=

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:45 UTC	729	OUT	GET /wp-content/plugins/LayerSlider/static/layerslider/css/layerslider.css?ver=6.10.0 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:45 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:45 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 02 Jan 2020 22:52:12 GMT Accept-Ranges: bytes Content-Length: 22273 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:45 UTC	7937	IN	Data Raw: 0a 2f 2a 0a 09 2a 20 53 74 79 6c 65 20 73 65 74 74 69 6e 67 73 20 6f 66 20 4c 61 79 65 72 53 6c 69 64 65 72 0a 09 2a 0a 09 2a 20 28 63 29 20 32 30 31 31 2d 32 30 32 30 20 47 65 6f 72 67 65 20 4b 72 75 70 61 2c 20 4a 6f 68 6e 20 47 65 72 61 20 26 20 4b 72 65 61 74 75 72 61 20 4d 65 64 69 61 0a 09 2a 0a 09 2a 20 4c 61 79 65 72 53 6c 69 64 65 72 20 68 6f 6d 65 3a 09 09 68 74 74 70 73 3a 2f 2f 6c 61 79 65 72 73 6c 69 64 65 72 2e 6b 72 65 61 74 75 72 61 6d 65 64 69 61 2e 63 6f 6d 2f 0a 09 2a 20 4c 69 63 65 6e 73 69 6e 67 3a 09 09 09 68 74 74 70 73 3a 2f 2f 6c 61 79 65 72 73 6c 69 64 65 72 2e 6b 72 65 61 74 75 72 61 6d 65 64 69 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 2f 0a 2a 2f 0a 0a 0a 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0a 0a 09 2e 6c 73 2d 63 6f 6e Data Ascii: / Style settings of LayerSlider (c) 2011-2020 George Krupa, John Gera & Kreatura Media** LayerSlider home:https://layerslider.kreaturamedia.com/* Licensing:https://layerslider.kreaturamedia.com/licensing/// Slider */.ls-con
2024-07-02 21:26:45 UTC	8000	IN	Data Raw: 0a 0a 09 09 2e 6c 73 2d 73 6c 69 64 65 62 61 72 2c 0a 09 09 2e 6c 73 2d 70 72 6f 67 72 65 73 73 62 61 72 20 7b 0a 09 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 09 09 7d 0a 0a 09 09 2e 6c 73 2d 70 72 6f 67 72 65 73 73 62 61 72 20 7b 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 09 09 7d 0a 0a 09 09 2e 6c 73 2d 73 6c 69 64 65 62 61 72 2d 73 6c 69 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 09 09 74 6f 70 3a 20 35 30 25 3b 0a 09 09 7d 0a 0a 09 09 2e 6c 73 2d 73 6c 69 64 65 62 61 72 2d 73 6c 69 64 65 72 20 7b 0a 09 09 09 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 09 09 09 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 09 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 09 09 Data Ascii: .ls-slidebar,.ls-progressbar {border-radius: 10px;}.ls-progressbar {background-color: #bbb;}.ls-slidebar-slider-container {top: 50%;}.ls-slidebar-slider {width: 20px;height: 20px;border-radius: 20px;
2024-07-02 21:26:45 UTC	6336	IN	Data Raw: 69 6e 65 72 20 2e 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2c 0a 09 62 6f 64 79 20 2e 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2c 0a 09 23 6c 73 2d 67 6c 6f 62 61 6c 20 2e 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2c 0a 09 68 74 6d 6c 20 2e 6c 73 2d 74 68 75 6d 62 6e 61 69 6c 20 61 2c 0a 09 62 6f 64 79 20 2e 6c 73 2d 74 68 75 6d 62 6e 61 69 6c 20 61 2c 0a 09 23 6c 73 2d 67 6c 6f 62 61 6c 20 2e 6c 73 2d 74 68 75 6d 62 6e 61 69 6c 20 61 20 7b 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 09 6c 69 6e 65 2d 68 Data Ascii: iner .ls-fullscreen,body .ls-container .ls-fullscreen,#ls-global .ls-container .ls-fullscreen,html .ls-thumbnail a,body .ls-thumbnail a,#ls-global .ls-thumbnail a {transition: none;-ms-transition: none;-webkit-transition: none;line-h

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Windows Analysis Report
https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	707	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 03 May 2024 21:09:16 GMT Accept-Ranges: bytes Content-Length: 113381 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	7936	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 20 2e 61 76 61 74 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 2e 35 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 32 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d Data Ascii: -style:none;margin:0;padding:0}.wp-block-post-comments .comment-author{line-height:1.5}.wp-block-post-comments .comment-author .avatar{border-radius:1.5em;display:block;float:left;height:2.5em;margin-right:.75em;margin-top:.5em;width:2.5em}.wp-block-post-
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2d 72 69 67 68 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 63 65 6e Data Ascii: er,.wp-block-cover.is-position-top-center{align-items:flex-start;justify-content:center}.wp-block-cover-image.is-position-top-right,.wp-block-cover.is-position-top-right{align-items:flex-start;justify-content:flex-end}.wp-block-cover-image.is-position-cen
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 61 29 3a 76 69 73 69 74 65 64 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 70 61 63 69 74 79 3a 2e 38 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 6c 61 62 65 6c 2e 69 73 2d 6c 61 62 65 6c 2d 69 6e 6c 69 6e 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 Data Ascii: a):visited{box-shadow:none;color:#fff;opacity:.85;text-decoration:none}.wp-block-form-input__label{display:flex;flex-direction:column;gap:.25em;margin-bottom:.5em;width:100%}.wp-block-form-input__label.is-label-inline{align-items:center;flex-direction:row
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 36 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 36 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 37 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 37 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 Data Ascii: ested-images).columns-6 .blocks-gallery-item:nth-of-type(6n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-image:nth-of-type(7n),.blocks-gallery-grid:not(.has-nested-images).columns-7 .blocks-gallery-item:nth-of-type(7n),.blocks-g
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 2d 63 68 69 6c 64 28 32 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f Data Ascii: -child(2),.wp-block-gallery.has-nested-images.columns-default figure.wp-block-image:not(#individual-image):first-child:nth-last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-blo
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 62 6f 78 2d 7a 6f 6f 6d 2d 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f 73 69 74 69 6f 6e 29 29 29 20 73 63 61 Data Ascii: ility:visible}to{opacity:0;visibility:hidden}}@keyframes lightbox-zoom-in{0%{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) sca
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 65 72 74 69 63 61 6c 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 3a 6e 6f 77 72 61 70 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 74 65 6d 73 2d 6a 75 73 74 69 66 69 65 64 2d 63 65 6e 74 65 72 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f Data Ascii: ertical{--navigation-layout-direction:column;--navigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--navigation-layout-wrap:nowrap}.wp-block-navigation.items-justified-center{--navigation-layout-justificatio
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f Data Ascii: navigation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-open){background-color:inherit!important;color:inherit!important}.wp-block-navigation__responsive-co

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	721	OUT	GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 30 Sep 2020 02:23:06 GMT Accept-Ranges: bytes Content-Length: 11256 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	7937	IN	Data Raw: 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c Data Ascii: .mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica,Arial
2024-07-02 21:26:46 UTC	3319	IN	Data Raw: 72 61 64 69 75 73 3a 30 20 30 20 34 70 78 20 34 70 78 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 69 64 74 68 3a 32 70 78 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 7b 6c 65 66 74 3a 30 Data Ascii: radius:0 0 4px 4px}.mejs-volume-total{background:hsla(0,0%,100%,.5);height:100px;left:50%;margin:0;position:absolute;top:8px;-webkit-transform:translateX(-50%);-ms-transform:translateX(-50%);transform:translateX(-50%);width:2px}.mejs-volume-current{left:0

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	710	OUT	GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 08 Jun 2019 07:15:02 GMT Accept-Ranges: bytes Content-Length: 4186 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	4186	IN	Data Raw: 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 7d 2e 6d 65 6a 73 2d 74 69 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 61 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 Data Ascii: .mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-horizonta

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	693	OUT	GET /wp-content/themes/bridge/style.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	253	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 614 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	614	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 42 72 69 64 67 65 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 62 72 69 64 67 65 6c 61 6e 64 69 6e 67 2e 71 6f 64 65 69 6e 74 65 72 61 63 74 69 76 65 2e 63 6f 6d 2f 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 72 65 61 74 69 76 65 20 4d 75 6c 74 69 70 75 72 70 6f 73 65 20 57 6f 72 64 50 72 65 73 73 20 54 68 65 6d 65 0a 54 61 67 73 3a 20 6f 6e 65 2d 63 6f 6c 75 6d 6e 2c 20 74 77 6f 2d 63 6f 6c 75 6d 6e 73 2c 20 74 68 72 65 65 2d 63 6f 6c 75 6d 6e 73 2c 20 66 6f 75 72 2d 63 6f 6c 75 6d 6e 73 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 6c 65 78 69 62 6c 65 2d 68 Data Ascii: /*Theme Name: BridgeTheme URI: http://bridgelanding.qodeinteractive.com/Description: Creative Multipurpose WordPress ThemeTags: one-column, two-columns, three-columns, four-columns, left-sidebar, right-sidebar, custom-menu, featured-images, flexible-h

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	725	OUT	GET /wp-content/themes/bridge/css/font-awesome/css/font-awesome.min.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 31051 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	7937	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 2d Data Ascii: t:"\f080"}.fa-twitter-square:before{content:"\f081"}.fa-facebook-square:before{content:"\f082"}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 2d 73 6f 72 74 2d 61 6d 6f 75 6e 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 Data Ascii: -sort-amount-desc:before{content:"\f161"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before{content:"\f163"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-you
2024-07-02 21:26:46 UTC	7114	IN	Data Raw: 6e 74 3a 22 5c 66 32 33 37 22 7d 2e 66 61 2d 74 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 38 22 7d 2e 66 61 2d 73 75 62 77 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 39 22 7d 2e 66 61 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 66 61 2d 79 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 79 2d 63 6f 6d 62 69 6e 61 74 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 66 61 2d 6f 70 65 6e 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 66 61 2d 65 78 70 65 64 69 74 65 Data Ascii: nt:"\f237"}.fa-train:before{content:"\f238"}.fa-subway:before{content:"\f239"}.fa-medium:before{content:"\f23a"}.fa-yc:before,.fa-y-combinator:before{content:"\f23b"}.fa-optin-monster:before{content:"\f23c"}.fa-opencart:before{content:"\f23d"}.fa-expedite

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	715	OUT	GET /wp-content/themes/bridge/css/elegant-icons/style.min.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:46 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 21769 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:46 UTC	7937	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 45 6c 65 67 61 6e 74 49 63 6f 6e 73 27 3b 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 65 6f 74 27 29 3b 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 63 6f 6e 73 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 66 6f 6e 74 73 2f 45 6c 65 67 61 6e 74 49 Data Ascii: @font-face{font-family:'ElegantIcons';src:url('fonts/ElegantIcons.eot');src:url('fonts/ElegantIcons.eot?#iefix') format('embedded-opentype'),url('fonts/ElegantIcons.woff') format('woff'),url('fonts/ElegantIcons.ttf') format('truetype'),url('fonts/ElegantI
2024-07-02 21:26:46 UTC	8000	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 61 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 6f 74 2d 64 6f 77 6e 5f 61 6c 74 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 62 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 6f 74 2d 6c 65 66 74 5f 61 6c 74 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 63 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 6f 74 2d 72 69 67 68 74 5f 61 6c 74 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 64 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 6f 74 2d 32 75 70 5f 61 6c 74 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 65 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 6f 74 2d 32 64 6f 77 6e 5f 61 6c 74 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 33 66 22 7d 2e 61 72 72 6f 77 5f 63 61 72 72 Data Ascii: ore{content:"\3a"}.arrow_carrot-down_alt2:before{content:"\3b"}.arrow_carrot-left_alt2:before{content:"\3c"}.arrow_carrot-right_alt2:before{content:"\3d"}.arrow_carrot-2up_alt2:before{content:"\3e"}.arrow_carrot-2down_alt2:before{content:"\3f"}.arrow_carr
2024-07-02 21:26:46 UTC	5832	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 37 22 7d 2e 69 63 6f 6e 5f 61 72 63 68 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 38 22 7d 2e 69 63 6f 6e 5f 68 65 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 39 22 7d 2e 69 63 6f 6e 5f 70 72 6f 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 61 22 7d 2e 69 63 6f 6e 5f 67 72 6f 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 62 22 7d 2e 69 63 6f 6e 5f 67 72 69 64 2d 32 78 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 63 22 7d 2e 69 63 6f 6e 5f 67 72 69 64 2d 33 78 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 64 22 7d 2e 69 63 6f 6e 5f 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ontent:"\e087"}.icon_archive:before{content:"\e088"}.icon_heart:before{content:"\e089"}.icon_profile:before{content:"\e08a"}.icon_group:before{content:"\e08b"}.icon_grid-2x2:before{content:"\e08c"}.icon_grid-3x3:before{content:"\e08d"}.icon_music:before{c

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	709	OUT	GET /wp-content/themes/bridge/css/linea-icons/style.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:47 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 78080 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:47 UTC	7937	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 6c 69 6e 65 61 2d 61 72 72 6f 77 73 2d 31 30 22 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 61 72 72 6f 77 73 2f 66 6f 6e 74 73 2f 6c 69 6e 65 61 2d 61 72 72 6f 77 73 2d 31 30 2e 65 6f 74 22 29 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 61 72 72 6f 77 73 2f 66 6f 6e 74 73 2f 6c 69 6e 65 61 2d 61 72 72 6f 77 73 2d 31 30 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 61 72 72 6f 77 73 2f 66 6f 6e 74 73 2f 6c 69 6e 65 61 2d 61 72 72 6f 77 73 2d 31 30 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 Data Ascii: @charset "UTF-8";@font-face { font-family: "linea-arrows-10"; src: url("arrows/fonts/linea-arrows-10.eot"); src: url("arrows/fonts/linea-arrows-10.eot?#iefix") format("embedded-opentype"), url("arrows/fonts/linea-arrows-10.woff") format("woff"), ur
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 31 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 62 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 35 39 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 61 72 72 6f 77 73 2d 66 69 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 63 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 36 32 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 61 72 72 6f 77 73 2d 66 69 74 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 64 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 36 35 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 Data Ascii: 1:before { content: "\e02b";}/* line 159, arrows/_styles.scss /.icon-arrows-fit-horizontal:before { content: "\e02c";}/ line 162, arrows/_styles.scss /.icon-arrows-fit-vertical:before { content: "\e02d";}/ line 165, arrows/_styles.scs
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 31 34 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 61 72 72 6f 77 73 2d 73 77 69 74 63 68 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 31 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 31 37 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 61 72 72 6f 77 73 2d 73 77 69 74 63 68 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 38 32 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 32 30 2c 20 61 72 72 6f 77 73 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 61 72 72 6f 77 73 2d 75 70 3a 62 65 66 Data Ascii: }/* line 414, arrows/_styles.scss /.icon-arrows-switch-horizontal:before { content: "\e081";}/ line 417, arrows/_styles.scss /.icon-arrows-switch-vertical:before { content: "\e082";}/ line 420, arrows/_styles.scss */.icon-arrows-up:bef
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 6e 6f 74 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 3b 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 36 34 2c 20 62 61 73 69 63 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 6e 6f 74 65 62 6f 6f 6b 2d 70 65 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 3c 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 36 37 2c 20 62 61 73 69 63 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 6e 6f 74 65 62 6f 6f 6b 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 3d 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 37 30 2c 20 62 61 73 69 63 2f 5f 73 74 79 6c Data Ascii: /.icon-basic-notebook:before { content: ";";}/ line 264, basic/_styles.scss /.icon-basic-notebook-pen:before { content: "<";}/ line 267, basic/_styles.scss /.icon-basic-notebook-pencil:before { content: "=";}/ line 270, basic/_styl
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 72 6f 77 73 65 72 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 73 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 38 36 2c 20 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2d 62 72 6f 77 73 65 72 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 74 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 38 39 2c 20 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2d 62 72 6f 77 73 65 72 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e Data Ascii: rowser-refresh:before { content: "s";}/* line 86, basic-elaboration/_styles.scss /.icon-basic-elaboration-browser-remove:before { content: "t";}/ line 89, basic-elaboration/_styles.scss */.icon-basic-elaboration-browser-search:before { con
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 39 36 2c 20 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2d 6d 61 69 6c 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 7b 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 39 39 2c 20 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f 6e 2d 6d 61 69 6c 2d 64 6f 63 75 6d 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 7c 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 33 30 32 2c 20 62 61 73 69 63 2d 65 6c 61 62 6f 72 61 74 69 6f Data Ascii: }/* line 296, basic-elaboration/_styles.scss /.icon-basic-elaboration-mail-cloud:before { content: "{";}/ line 299, basic-elaboration/_styles.scss /.icon-basic-elaboration-mail-document:before { content: "\|";}/ line 302, basic-elaboratio
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 65 63 6f 6d 6d 65 72 63 65 2d 62 61 67 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 67 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 35 30 2c 20 65 63 6f 6d 6d 65 72 63 65 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 65 63 6f 6d 6d 65 72 63 65 2d 62 61 67 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 68 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 35 33 2c 20 65 63 6f 6d 6d 65 72 63 65 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 65 63 6f 6d 6d 65 72 63 65 2d 62 61 67 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 69 22 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: s.scss /.icon-ecommerce-bag-refresh:before { content: "g";}/ line 50, ecommerce/_styles.scss /.icon-ecommerce-bag-remove:before { content: "h";}/ line 53, ecommerce/_styles.scss /.icon-ecommerce-bag-search:before { content: "i";}/
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 32 39 2c 20 6d 75 73 69 63 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 6d 75 73 69 63 2d 62 65 67 69 6e 6e 69 6e 67 2d 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 61 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 33 32 2c 20 6d 75 73 69 63 2f 5f 73 74 79 6c Data Ascii: transform: none !important; speak: none; line-height: 1; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale;}/* line 29, music/_styles.scss /.icon-music-beginning-button:before { content: "a";}/ line 32, music/_styl
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 20 63 6f 6e 74 65 6e 74 3a 20 22 54 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 36 36 2c 20 73 6f 66 74 77 61 72 65 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 73 6f 66 74 77 61 72 65 2d 6c 61 79 6f 75 74 2d 68 65 61 64 65 72 2d 63 6f 6d 70 6c 65 78 33 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 55 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 36 39 2c 20 73 6f 66 74 77 61 72 65 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 73 6f 66 74 77 61 72 65 2d 6c 61 79 6f 75 74 2d 68 65 61 64 65 72 2d 63 6f 6d 70 6c 65 78 34 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 56 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 31 37 32 2c 20 73 6f 66 74 77 61 72 65 2f 5f 73 74 79 6c 65 73 Data Ascii: content: "T";}/* line 166, software/_styles.scss /.icon-software-layout-header-complex3:before { content: "U";}/ line 169, software/_styles.scss /.icon-software-layout-header-complex4:before { content: "V";}/ line 172, software/_styles
2024-07-02 21:26:47 UTC	6143	IN	Data Raw: 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 77 65 61 74 68 65 72 2d 68 61 69 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 33 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 38 38 2c 20 77 65 61 74 68 65 72 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 77 65 61 74 68 65 72 2d 68 61 69 6c 2d 66 75 6c 6c 6d 6f 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 34 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 39 31 2c 20 77 65 61 74 68 65 72 2f 5f 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 2e 69 63 6f 6e 2d 77 65 61 74 68 65 72 2d 68 61 69 6c 2d 68 61 6c 66 6d 6f 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 31 35 22 3b 0a 7d 0a 0a 2f 2a 20 6c 69 Data Ascii: css /.icon-weather-hail:before { content: "\e013";}/ line 88, weather/_styles.scss /.icon-weather-hail-fullmoon:before { content: "\e014";}/ line 91, weather/_styles.scss /.icon-weather-hail-halfmoon:before { content: "\e015";}/ li

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:46 UTC	711	OUT	GET /wp-content/themes/bridge/css/dripicons/dripicons.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:47 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 11546 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:47 UTC	7937	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 64 72 69 70 69 63 6f 6e 73 2d 76 32 22 3b 0a 20 20 20 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 73 2f 64 72 69 70 69 63 6f 6e 73 2d 76 32 2e 65 6f 74 22 29 3b 0a 20 20 20 20 73 72 63 3a 75 72 6c 28 22 66 6f 6e 74 73 2f 64 72 69 70 69 63 6f 6e 73 2d 76 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 0a 20 20 20 20 75 72 6c 28 22 66 6f 6e 74 73 2f 64 72 69 70 69 63 6f 6e 73 2d 76 32 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 0a 20 20 20 20 75 72 6c 28 22 66 6f 6e 74 73 2f 64 72 69 70 69 63 6f 6e 73 2d 76 Data Ascii: @charset "UTF-8";@font-face { font-family: "dripicons-v2"; src:url("fonts/dripicons-v2.eot"); src:url("fonts/dripicons-v2.eot?#iefix") format("embedded-opentype"), url("fonts/dripicons-v2.woff") format("woff"), url("fonts/dripicons-v
2024-07-02 21:26:47 UTC	3609	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 34 22 3b 0a 7d 0a 2e 64 72 69 70 69 63 6f 6e 73 2d 6d 6f 6e 69 74 6f 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 35 22 3b 0a 7d 0a 2e 64 72 69 70 69 63 6f 6e 73 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 36 22 3b 0a 7d 0a 2e 64 72 69 70 69 63 6f 6e 73 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 37 22 3b 0a 7d 0a 2e 64 72 69 70 69 63 6f 6e 73 2d 6e 65 74 77 6f 72 6b 2d 31 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 38 22 3b 0a 7d 0a 2e 64 72 69 70 69 63 6f 6e 73 2d 6e 65 74 77 6f 72 6b 2d 32 3a 62 65 66 6f 72 65 20 7b 0a 20 Data Ascii: ontent: "\e024";}.dripicons-monitor:before { content: "\e025";}.dripicons-move:before { content: "\e026";}.dripicons-music:before { content: "\e027";}.dripicons-network-1:before { content: "\e028";}.dripicons-network-2:before {

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:47 UTC	705	OUT	GET /wp-content/themes/bridge/css/kiko/kiko-all.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:47 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 19699 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:47 UTC	7937	IN	Data Raw: 2e 6b 69 6b 6f 2d 74 72 61 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 31 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 63 61 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 32 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 74 72 75 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 33 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 62 69 6b 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 34 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 73 61 69 6c 62 6f 61 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 30 30 35 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 61 69 72 70 6c 61 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: .kiko-train:before { content: '\f001'; }.kiko-car:before { content: '\f002'; }.kiko-truck:before { content: '\f003'; }.kiko-bike:before { content: '\f004'; }.kiko-sailboat:before { content: '\f005'; }.kiko-airplane:before { content:
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 35 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 6d 69 63 72 6f 70 68 6f 6e 65 2d 6f 66 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 36 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 37 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 7a 6f 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 38 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 7a 6f 6f 6d 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 36 39 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 7a 6f 6f 6d 2d 70 6c 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 37 30 27 Data Ascii: content: '\f165'; }.kiko-microphone-off:before { content: '\f166'; }.kiko-link:before { content: '\f167'; }.kiko-zoom:before { content: '\f168'; }.kiko-zoom-minus:before { content: '\f169'; }.kiko-zoom-plus:before { content: '\f170'
2024-07-02 21:26:47 UTC	3762	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 33 32 37 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 68 75 6d 61 6e 6f 69 64 2d 72 6f 62 6f 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 33 32 38 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 72 6f 62 6f 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 33 32 39 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 72 6f 62 6f 74 2d 68 65 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 33 33 30 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 64 65 73 6b 74 6f 70 2d 63 6f 6d 70 75 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 32 37 33 27 3b 20 7d 0a 0a 2e 6b 69 6b 6f 2d 61 6e 63 68 6f 72 3a 62 65 66 6f 72 65 20 7b Data Ascii: :before { content: '\f327'; }.kiko-humanoid-robot:before { content: '\f328'; }.kiko-robot:before { content: '\f329'; }.kiko-robot-head:before { content: '\f330'; }.kiko-desktop-computer:before { content: '\f273'; }.kiko-anchor:before {

Timestamp	Bytes transferred	Direction	Data
2024-07-02 21:26:47 UTC	706	OUT	GET /wp-content/themes/bridge/css/stylesheet.min.css?ver=6.5.5 HTTP/1.1 Host: gilbertnow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gilbertnow.com/lscache/?initiate=kZwivKCdReGfjYUlVXF2v3UdvZ9rRqUivH Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wordpress_google_apps_login=85a24d58388c2f4be8bb174ce28e8242
2024-07-02 21:26:47 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 21:26:47 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 06 Jan 2020 04:18:20 GMT Accept-Ranges: bytes Content-Length: 743358 Vary: Accept-Encoding Content-Type: text/css
2024-07-02 21:26:47 UTC	7936	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 64 72 6f 70 5f 64 6f 77 6e 20 2e 77 69 64 65 20 2e 73 65 63 6f 6e 64 20 75 6c 20 6c 69 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 61 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 20 61 7b 63 6f 6c 6f 72 3a 23 33 30 33 30 33 30 7d 2e 74 69 74 6c 65 5f 74 65 78 74 5f 73 68 61 64 6f 77 20 2e 62 72 65 61 64 63 72 75 6d 62 73 20 2e 62 72 65 61 64 63 72 75 6d 62 73 5f 69 6e 6e 65 72 2c 2e 74 69 74 6c 65 5f 74 65 78 74 5f 73 68 61 64 6f 77 20 2e 73 75 62 74 69 74 6c 65 2c 2e 74 69 74 6c 65 5f 74 65 78 74 5f 73 68 61 64 6f 77 20 2e 74 65 78 74 5f 61 62 6f 76 65 5f 74 69 74 6c 65 2c 2e 74 Data Ascii: .clearfix:after,.drop_down .wide .second ul li:nth-child(4n+1){clear:both}.h1,.h2,.h3,.h4,.h5,.h6,a,h1,h2,h3,h4,h5,h6,p a{color:#303030}.title_text_shadow .breadcrumbs .breadcrumbs_inner,.title_text_shadow .subtitle,.title_text_shadow .text_above_title,.t
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 2e 33 73 20 65 61 73 65 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 2e 33 73 20 65 61 73 65 2d 6f 75 74 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 61 6c 65 77 61 79 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 3b 63 6f 6c 6f 72 3a 23 38 31 38 31 38 31 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 Data Ascii: -transition:all 1.3s ease-out;-moz-transition:all 1.3s ease-out;-o-transition:all 1.3s ease-out;-ms-transition:all 1.3s ease-out;transition:all 1.3s ease-out}body{font-family:Raleway,sans-serif;font-size:14px;line-height:26px;color:#818181;font-weight:400
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 6f 61 64 65 72 20 2e 66 69 76 65 5f 72 6f 74 61 74 69 6e 67 5f 63 69 72 63 6c 65 73 20 2e 63 6f 6e 74 61 69 6e 65 72 33 3e 64 69 76 7b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 30 33 30 33 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 6f 75 6e 63 65 64 65 6c 61 79 20 31 2e 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6f 75 6e 63 65 64 65 6c 61 79 20 31 2e 32 73 20 69 6e 66 69 6e 69 74 65 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c Data Ascii: oader .five_rotating_circles .container3>div{width:12px;height:12px;background-color:#303030;border-radius:100%;position:absolute;-webkit-animation:bouncedelay 1.2s infinite ease-in-out;animation:bouncedelay 1.2s infinite ease-in-out;-webkit-animation-fil
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 69 67 68 74 2c 68 65 61 64 65 72 2e 73 63 72 6f 6c 6c 65 64 2e 6c 69 67 68 74 3a 6e 6f 74 28 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 29 20 2e 71 5f 6c 6f 67 6f 20 69 6d 67 2e 64 61 72 6b 2c 68 65 61 64 65 72 2e 73 63 72 6f 6c 6c 65 64 2e 6c 69 67 68 74 3a 6e 6f 74 28 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 29 20 2e 71 5f 6c 6f 67 6f 20 69 6d 67 2e 6c 69 67 68 74 2c 68 65 61 64 65 72 2e 73 63 72 6f 6c 6c 65 64 3a 6e 6f 74 28 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 29 20 2e 71 5f 6c 6f 67 6f 20 69 6d 67 2e 64 61 72 6b 2c 68 65 61 64 65 72 2e 73 63 72 6f 6c 6c 65 64 3a 6e 6f 74 28 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 29 20 2e 71 5f 6c 6f 67 Data Ascii: ight,header.scrolled.light:not(.header_style_on_scroll) .q_logo img.dark,header.scrolled.light:not(.header_style_on_scroll) .q_logo img.light,header.scrolled:not(.header_style_on_scroll) .q_logo img.dark,header.scrolled:not(.header_style_on_scroll) .q_log
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 65 61 73 65 20 30 73 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 20 2e 32 73 20 65 61 73 65 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 20 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 20 30 73 7d 68 65 61 64 65 72 2e 66 69 78 65 64 5f 68 69 64 69 6e 67 2e 73 63 72 6f 6c 6c 65 64 20 2e 71 5f 6c 6f 67 6f 2c 68 65 61 64 65 72 2e 66 69 78 65 64 5f 68 69 64 69 6e 67 2e 73 63 72 6f 6c 6c 65 64 20 2e 71 5f 6c 6f 67 6f 20 61 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 20 2e 32 73 20 65 61 73 65 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 34 73 20 65 Data Ascii: ease 0s;-ms-transition:max-height .2s ease 0s,opacity .2s ease 0s;transition:max-height .2s ease-out 0s,opacity .2s ease 0s}header.fixed_hiding.scrolled .q_logo,header.fixed_hiding.scrolled .q_logo a{-webkit-transition:max-height .2s ease 0s,opacity .4s e
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 70 5f 64 6f 77 6e 20 2e 73 65 63 6f 6e 64 20 2e 69 6e 6e 65 72 3e 75 6c 3e 6c 69 3e 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 72 6f 70 5f 64 6f 77 6e 20 2e 6e 61 72 72 6f 77 20 2e 73 65 63 6f 6e 64 20 2e 69 6e 6e 65 72 20 75 6c 20 6c 69 7b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 32 32 35 70 78 7d 2e 64 72 6f 70 5f 64 6f 77 6e 20 2e 6e 61 72 72 6f 77 20 2e 73 65 63 6f 6e 64 20 2e 69 6e 6e 65 72 20 75 6c 20 6c 69 20 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 64 72 6f 70 5f 64 6f 77 6e 20 2e 77 69 64 65 20 2e 73 65 63 6f 6e 64 20 2e 69 6e 6e 65 72 20 75 6c 20 6c 69 20 68 35 2c 2e 64 72 6f 70 5f 64 6f 77 6e 20 2e 77 69 64 65 20 2e 73 65 63 6f 6e 64 20 2e Data Ascii: p_down .second .inner>ul>li>a:hover{color:#fff}.drop_down .narrow .second .inner ul li{padding:0;width:225px}.drop_down .narrow .second .inner ul li a{padding-left:20px;padding-right:20px}.drop_down .wide .second .inner ul li h5,.drop_down .wide .second .
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 30 29 7d 2e 66 69 78 65 64 5f 74 6f 70 5f 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 62 6f 74 74 6f 6d 5f 72 69 67 68 74 5f 77 69 64 67 65 74 5f 68 6f 6c 64 65 72 2c 2e 66 69 78 65 64 5f 74 6f 70 5f 68 65 61 64 65 72 20 2e 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 69 6e 6e 65 72 2c 2e 66 69 78 65 64 5f 74 6f 70 5f 68 65 61 64 65 72 20 2e 73 69 64 65 5f 6d 65 6e 75 5f 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 34 35 70 78 7d 2e 66 69 78 65 64 5f 74 6f 70 5f 68 65 61 64 65 72 20 6e 61 76 2e 6d 61 69 6e 5f 6d 65 6e 75 3e 75 6c 3e 6c 69 3e 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 35 70 78 7d 2e 66 69 78 65 64 5f 74 6f 70 5f 68 65 61 64 65 72 2e 68 61 73 5f 74 6f 70 20 2e 62 6f 74 74 6f 6d 5f 68 Data Ascii: form:translate(-50%,0)}.fixed_top_header .header_bottom_right_widget_holder,.fixed_top_header .shopping_cart_inner,.fixed_top_header .side_menu_button{height:45px}.fixed_top_header nav.main_menu>ul>li>a{line-height:45px}.fixed_top_header.has_top .bottom_h
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 65 5f 73 6f 63 69 61 6c 2c 2e 64 61 72 6b 3a 6e 6f 74 28 2e 73 74 69 63 6b 79 29 3a 6e 6f 74 28 2e 73 63 72 6f 6c 6c 65 64 29 20 2e 71 5f 73 6f 63 69 61 6c 5f 69 63 6f 6e 5f 68 6f 6c 64 65 72 20 73 70 61 6e 2e 73 69 6d 70 6c 65 5f 73 6f 63 69 61 6c 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 64 61 72 6b 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 20 2e 68 65 61 64 65 72 2d 77 69 64 67 65 74 20 23 6c 61 6e 67 5f 73 65 6c 3e 75 6c 3e 6c 69 3e 61 2c 2e 64 61 72 6b 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 20 2e 68 65 61 64 65 72 2d 77 69 64 67 65 74 20 23 6c 61 6e 67 5f 73 65 6c 5f 63 6c 69 63 6b 3e 75 6c 3e 6c 69 3e 61 2c 2e 64 61 72 6b 2e 68 65 61 64 65 72 5f 73 74 79 6c 65 5f 6f 6e 5f 73 63 72 6f 6c 6c 20 2e Data Ascii: e_social,.dark:not(.sticky):not(.scrolled) .q_social_icon_holder span.simple_social{color:#000}.dark.header_style_on_scroll .header-widget #lang_sel>ul>li>a,.dark.header_style_on_scroll .header-widget #lang_sel_click>ul>li>a,.dark.header_style_on_scroll .
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 6c 65 66 74 7d 2e 74 77 6f 5f 63 6f 6c 75 6d 6e 73 5f 36 36 5f 33 33 3e 2e 63 6f 6c 75 6d 6e 31 3e 2e 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 30 20 30 7d 2e 74 77 6f 5f 63 6f 6c 75 6d 6e 73 5f 36 36 5f 33 33 3e 2e 63 6f 6c 75 6d 6e 32 7b 77 69 64 74 68 3a 33 33 2e 33 33 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 74 77 6f 5f 63 6f 6c 75 6d 6e 73 5f 36 36 5f 33 33 3e 2e 63 6f 6c 75 6d 6e 32 3e 2e 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 32 30 70 78 7d 2e 74 77 6f 5f 63 6f 6c 75 6d 6e 73 5f 33 33 5f 36 36 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 77 6f 5f 63 6f 6c 75 6d 6e 73 5f 33 33 5f 36 36 3e 2e 63 6f 6c 75 6d 6e 31 7b 77 69 64 74 68 3a 33 33 2e 33 33 25 3b 66 6c 6f 61 74 Data Ascii: left}.two_columns_66_33>.column1>.column_inner{padding:0 20px 0 0}.two_columns_66_33>.column2{width:33.33%;float:left}.two_columns_66_33>.column2>.column_inner{padding:0 0 0 20px}.two_columns_33_66{width:100%}.two_columns_33_66>.column1{width:33.33%;float
2024-07-02 21:26:47 UTC	8000	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 73 65 70 61 72 61 74 6f 72 2e 73 6d 61 6c 6c 2e 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 71 5f 69 63 6f 6e 5f 6c 69 73 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 31 70 78 7d 2e 71 5f 69 63 6f 6e 5f 6c 69 73 74 20 2e 71 6f 64 65 2d 69 6c 69 2d 69 63 6f 6e 2d 68 6f 6c 64 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 71 5f 69 63 6f 6e 5f 6c 69 73 74 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 Data Ascii: margin-left:0;margin-right:0}.separator.small.right{margin-left:auto;margin-right:0}.q_icon_list{margin-bottom:21px}.q_icon_list .qode-ili-icon-holder{float:left}.q_icon_list p{font-size:15px;line-height:27px;font-weight:400;margin:0 0 10px;padding:0 0 0