Edit tour

Windows Analysis Report
http://www.gofreight.com/

Overview

General Information

Sample URL:	http://www.gofreight.com/
Analysis ID:	1529570
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

AI detected landing page (webpage, office document or email)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML page contains obfuscated script src

No HTML title found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1928,i,11494521493854793572,5377267810341436615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.gofreight.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /attribution_tracking/conversions/assign HTTP/1.1Host: tracking.g2crowd.comConnection: keep-aliveContent-Length: 1191sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryDFpMhZAnZf5QQOBTAccept: */*Origin: https://www.gofreight.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.gofreight.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=1Tyi8DUZsBzrmRQSI_EKSAmidum.cHWJJxIzM5XAZ_E-1728443037-1.0.1.1-1_x1GnpnEbbuhNdopSjgYH5Qh3iZ8Q3t_TJgJUsFnIAcSDpqu6LUAPtBo66RUuJgm62PApqFkhfgRYLsI6Z7tA

Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/713d4472-8b88-4583-8c38-b54858f9c45a gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/713d4472-8b88-4583-8c38-b54858f9c45a gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms
Source: https://www.gofreight.com/whats-new	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798 gofreight hsforms

Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CgkJCQl2YXIgX2hzcSA9IF9oc3EgfHwgW107CgkJCQlfaHNxLnB1c2goWyJzZXRDb250ZW50VHlwZSIsICJsaXN0aW5nLXBhZ2UiXSk7CgkJCQ==
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CgkJd2luZG93LmRhdGFMYXllciA9IHdpbmRvdy5kYXRhTGF5ZXIgfHwgW107CgkJZnVuY3Rpb24gZ3RhZygpe2RhdGFMYXllci5wdXNoKGFyZ3VtZW50cyk7fQoJCWd0YWcoJ2pzJywgbmV3IERhdGUoKSk7CgkJZ3RhZygnY29uZmlnJywgJ0ctTVdXTVA2MEI0QicpOwoJ
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CgkJKGZ1bmN0aW9uKGgsbyx0LGosYSxyKXsKCQkJaC5oaj1oLmhqfHxmdW5jdGlvbigpeyhoLmhqLnE9aC5oai5xfHxbXSkucHVzaChhcmd1bWVudHMpfTsKCQkJaC5faGpTZXR0aW5ncz17aGppZDo1MTQ1OTAyLGhqc3Y6NX07CgkJCWE9by5nZXRFbGVtZW50c0J5VGFnTmFtZSgnaGVhZCcpWz
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CgkJCXdpbmRvdy5kYXRhTGF5ZXIgPSB3aW5kb3cuZGF0YUxheWVyIHx8IFtdOwoJCQlmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKTt9CgkJCWd0YWcoJ2pzJywgbmV3IERhdGUoKSk7CgkJCQoJCQlndGFnKCdjb25maWcnLCAnVUEtNjMxMjkyNDctOScpOwoJCQ==
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,KGZ1bmN0aW9uKHcsZCxzLGwsaSl7d1tsXT13W2xdfHxbXTt3W2xdLnB1c2goeydndG0uc3RhcnQnOgoJCW5ldyBEYXRlKCkuZ2V0VGltZSgpLGV2ZW50OidndG0uanMnfSk7dmFyIGY9ZC5nZXRFbGVtZW50c0J5VGFnTmFtZShzKVswXSwKCQlqPWQuY3JlYXRlRWxlbWVudChzKSxkbD1sIT0nZG
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CgkJCShmdW5jdGlvbiAoYywgcCwgZCwgdSwgaWQsIGkpIHsKCQkJCWlkID0gJyc7IC8vIE9wdGlvbmFsIEN1c3RvbSBJRCBmb3IgdXNlciBpbiB5b3VyIHN5c3RlbQoJCQkJdSA9ICdodHRwczovL3RyYWNraW5nLmcyY3Jvd2QuY29tL2F0dHJpYnV0aW9uX3RyYWNraW5nL2NvbnZlcnNpb25zLy
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CndpbmRvd1soZnVuY3Rpb24oX3FvNCxfNWQpe3ZhciBfRkc9Jyc7Zm9yKHZhciBfNEY9MDtfNEY8X3FvNC5sZW5ndGg7XzRGKyspe181ZD4zO3ZhciBfU249X3FvNFtfNEZdLmNoYXJDb2RlQXQoKTtfU24tPV81ZDtfRkc9PV9GRztfU24hPV80RjtfU24rPTYxO19TbiU9OTQ7X1NuKz0zMztfRk
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CiFmdW5jdGlvbihmLGIsZSx2LG4sdCxzKXtpZihmLmZicSlyZXR1cm47bj1mLmZicT1mdW5jdGlvbigpe24uY2FsbE1ldGhvZD8Kbi5jYWxsTWV0aG9kLmFwcGx5KG4sYXJndW1lbnRzKTpuLnF1ZXVlLnB1c2goYXJndW1lbnRzKX07aWYoIWYuX2ZicSlmLl9mYnE9bjsKbi5wdXNoPW47bi5sb2
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CiAgICAgICAgdmFyIHVybCA9IHdpbmRvdy5sb2NhdGlvbi5vcmlnaW4gKyAnP29iPW9wZW4tYnJpZGdlJzsKICAgICAgICBmYnEoJ3NldCcsICdvcGVuYnJpZGdlJywgJzMwNDA2MDU2MDg4MjMzMicsIHVybCk7CiAgICAgIA==
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,ZmJxKCdpbml0JywgJzMwNDA2MDU2MDg4MjMzMicsIHt9LCB7CiAgICAiYWdlbnQiOiAid29yZHByZXNzLTYuNi4xLTQuMC4xIgp9KQ==
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CiAgICBmYnEoJ3RyYWNrJywgJ1BhZ2VWaWV3JywgW10pOwogIA==
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CiAgaGJzcHQuZm9ybXMuY3JlYXRlKHsKICAgIHJlZ2lvbjogIm5hMSIsCiAgICBwb3J0YWxJZDogIjIwMDAyMDgyIiwKICAgIGZvcm1JZDogIjRlZmI2NmE1LTYwNDEtNDQyNy1hZDEzLTc5YTBhYmJiMzc5OCIKICB9KTsK
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,CiAgICAgICAgZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lciggJ3dwY2Y3bWFpbHNlbnQnLCBmdW5jdGlvbiggZXZlbnQgKSB7CiAgICAgICAgaWYoICJmYl9weGxfY29kZSIgaW4gZXZlbnQuZGV0YWlsLmFwaVJlc3BvbnNlKXsKICAgICAgICAgIGV2YWwoZXZlbnQuZGV0YWlsLmFwaVJlc3Bvbn
Source: https://www.gofreight.com/whats-new	HTTP Parser: Script src: data:text/javascript;base64,d2luZG93LmFkZEV2ZW50TGlzdGVuZXIoJ0RPTUNvbnRlbnRMb2FkZWQnLCBmdW5jdGlvbigpIHsKalF1ZXJ5KGRvY3VtZW50KS5yZWFkeShmdW5jdGlvbigkKSB7Cgl3aW5kb3cuYWRkRXZlbnRMaXN0ZW5lcignbWVzc2FnZScsIGV2ZW50ID0+IHsJCQoJCWlmIChldmVudC5kYXRhLnR5cGUgPT

Source: https://www.gofreight.com/	HTTP Parser: HTML title missing
Source: https://www.gofreight.com/	HTTP Parser: HTML title missing

Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=mqrypqu&ref=https%3A%2F%2Fwww.gofreight.com%2F&upid=temj3b9&upv=1.1.0&paapi=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=mqrypqu&ref=https%3A%2F%2Fwww.gofreight.com%2F&upid=temj3b9&upv=1.1.0&paapi=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=mqrypqu&ref=https%3A%2F%2Fwww.gofreight.com%2F&upid=temj3b9&upv=1.1.0&paapi=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443038833&cv=11&fst=1728443038833&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443043882&cv=11&fst=1728443043882&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=Freight%20Forwarding%20Software%20%7C%20All-in-One%20Solution%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=mqrypqu&ref=https%3A%2F%2Fwww.gofreight.com%2F&upid=temj3b9&upv=1.1.0&paapi=1
Source: https://www.gofreight.com/whats-new	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/whats-new	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443137312&cv=11&fst=1728443137312&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&ref=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=What's%20New%20Archive%20-%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://www.gofreight.com/whats-new	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443137591&cv=11&fst=1728443137591&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&ref=https%3A%2F%2Fwww.gofreight.com%2F&hn=www.googleadservices.com&frm=0&tiba=What's%20New%20Archive%20-%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/referral-program	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MW874C7
Source: https://www.gofreight.com/referral-program	HTTP Parser: Iframe src: https://www.youtube.com/embed/GL5FsZCHKtk
Source: https://www.gofreight.com/referral-program	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443140242&cv=11&fst=1728443140242&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716z89115866741za201zb9115866741&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2Freferral-program&ref=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&hn=www.googleadservices.com&frm=0&tiba=Referral%20Rewards%20Program%20%7C%20GoFreight&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://www.gofreight.com/referral-program	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/785125299?random=1728443142443&cv=11&fst=1728443142443&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a70v870515716za200zb9115882721&gcd=13l3l3l3l1l1&dma=0&tag_exp=101529666~101533422~101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.gofreight.com%2Freferral-program&ref=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&hn=www.googleadservices.com&frm=0&tiba=Referral%20Rewards%20Program%20%7C%20GoFreight&did=dZTQ1Zm&gdid=dZTQ1Zm&npa=0&pscdl=noapi&auid=40460364.1728443037&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config

Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/	HTTP Parser: No favicon
Source: https://www.gofreight.com/referral-program	HTTP Parser: No favicon

Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/whats-new	HTTP Parser: No <meta name="author".. found
Source: https://www.gofreight.com/referral-program	HTTP Parser: No <meta name="author".. found

Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/whats-new	HTTP Parser: No <meta name="copyright".. found
Source: https://www.gofreight.com/referral-program	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49931 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:50083 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: chromecache_382.1.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook elementor-repeater-item-3b3b248" href="https://www.facebook.com/gofreight.system" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_382.1.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-repeater-item-8253994" href="https://www.linkedin.com/company/gofreight/" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_382.1.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-07ba353" href="https://www.youtube.com/channel/UCvNbl1nH2O7W8-gxjLFAYZw" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_382.1.dr	String found in binary or memory: jQuery(".hubpost_form_submitted").after('<iframe width="100%" height="290" src="https://www.youtube.com/embed/SjPn4EqnWVE" frameborder="0" allowfullscreen=""></iframe>'); equals www.youtube.com (Youtube)
Source: chromecache_557.1.dr, chromecache_585.1.dr	String found in binary or memory: redirect_url: "https://www.facebook.com/dialog/send?app_id=1904103319867886&display=popup&link="+postUrl+"&redirect_uri="+postUrl, equals www.facebook.com (Facebook)
Source: chromecache_557.1.dr, chromecache_585.1.dr	String found in binary or memory: redirect_url: "https://www.facebook.com/sharer.php?u=" + postUrl + "&t=" + postTitle + "&v=3", equals www.facebook.com (Facebook)
Source: chromecache_557.1.dr, chromecache_585.1.dr	String found in binary or memory: redirect_url: "https://www.linkedin.com/sharing/share-offsite/?url=" + postUrl, equals www.linkedin.com (Linkedin)
Source: chromecache_459.1.dr, chromecache_412.1.dr, chromecache_538.1.dr, chromecache_338.1.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},hk:function(){e=zb()},rd:function(){d()}}};var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_459.1.dr, chromecache_412.1.dr, chromecache_538.1.dr, chromecache_374.1.dr, chromecache_367.1.dr, chromecache_653.1.dr, chromecache_489.1.dr, chromecache_338.1.dr, chromecache_314.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=yA(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},BA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_459.1.dr, chromecache_412.1.dr, chromecache_538.1.dr, chromecache_338.1.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={kh:e,ih:f,jh:g,Uh:k,Vh:m,Je:n,Eb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(cD(w,"iframe_api")\|\|cD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!UC&&aD(x[A],p.Je))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_482.1.dr, chromecache_472.1.dr, chromecache_344.1.dr, chromecache_374.1.dr, chromecache_367.1.dr, chromecache_653.1.dr, chromecache_489.1.dr, chromecache_329.1.dr, chromecache_314.1.dr, chromecache_376.1.dr, chromecache_362.1.dr	String found in binary or memory: return b}QC.F="internal.enableAutoEventOnTimer";var gc=ka(["data-gtm-yt-inspected-"]),SC=["www.youtube.com","www.youtube-nocookie.com"],TC,UC=!1; equals www.youtube.com (Youtube)
Source: chromecache_626.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_626.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_626.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_349.1.dr, chromecache_382.1.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=304060560882332&ev=PageView&noscript=1" /> equals www.facebook.com (Facebook)
Source: chromecache_459.1.dr, chromecache_412.1.dr, chromecache_472.1.dr, chromecache_538.1.dr, chromecache_374.1.dr, chromecache_367.1.dr, chromecache_653.1.dr, chromecache_489.1.dr, chromecache_338.1.dr, chromecache_329.1.dr, chromecache_314.1.dr	String found in binary or memory: var eC=function(a,b,c,d,e){var f=Wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Wz("fsl","nv.ids",[]):Wz("fsl","ids",[]);if(!g.length)return!0;var k=aA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Jy(k,Ly(b, equals www.facebook.com (Facebook)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 09 Oct 2024 03:04:03 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8cfb24204b8a5e60-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 09 Oct 2024 03:05:43 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8cfb269139ce424f-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1928,i,11494521493854793572,5377267810341436615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.gofreight.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=1928,i,11494521493854793572,5377267810341436615,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: global traffic	DNS traffic detected: DNS query: www.gofreight.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: tayakay.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: tracking.g2crowd.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: ws-assets.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: api.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: ws.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: content.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: api-js.mixpanel.com
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: schedule.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: tags.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: hemsync.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
forms.hsforms.com	0%	Virustotal	Browse
js.hs-analytics.net	0%	Virustotal	Browse
hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	0%	Virustotal	Browse
i.ytimg.com	0%	Virustotal	Browse
d34ugip0pxbcxk.cloudfront.net	0%	Virustotal	Browse
dg2iu7dxxehbo.cloudfront.net	0%	Virustotal	Browse
js.zi-scripts.com	0%	Virustotal	Browse
www.gofreight.com	0%	Virustotal	Browse
js.hsforms.net	0%	Virustotal	Browse
track.hubspot.com	0%	Virustotal	Browse
script.hotjar.com	0%	Virustotal	Browse
pacman-content-live.live.eks.hotjar.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
js.hs-scripts.com	0%	Virustotal	Browse
cm.g.doubleclick.net	0%	Virustotal	Browse
insight.adsrvr.org	0%	Virustotal	Browse
scontent.xx.fbcdn.net	0%	Virustotal	Browse
static-cdn.hotjar.com	0%	Virustotal	Browse
star-mini.c10r.facebook.com	0%	Virustotal	Browse
js.hs-banner.com	0%	Virustotal	Browse
us-u.openx.net	0%	Virustotal	Browse
ws-assets.zoominfo.com	0%	Virustotal	Browse
tracking.g2crowd.com	0%	Virustotal	Browse
api-js.mixpanel.com	0%	Virustotal	Browse
a.nel.cloudflare.com	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
match.adsrvr.org	0%	Virustotal	Browse
ws.zoominfo.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
forms-na1.hsforms.com	0%	Virustotal	Browse
d3i9xyriglxn0r.cloudfront.net	0%	Virustotal	Browse
js.hsadspixel.net	0%	Virustotal	Browse
ib.anycast.adnxs.com	1%	Virustotal	Browse
pixel-sync.sitescout.com	0%	Virustotal	Browse
td.doubleclick.net	0%	Virustotal	Browse
youtube-ui.l.google.com	0%	Virustotal	Browse
wsky-live.live.eks.hotjar.com	0%	Virustotal	Browse
schedule.zoominfo.com	0%	Virustotal	Browse
api.hubapi.com	0%	Virustotal	Browse
t.clarity.ms	0%	Virustotal	Browse
aorta.clickagy.com	0%	Virustotal	Browse
tags.clickagy.com	0%	Virustotal	Browse
hemsync.clickagy.com	0%	Virustotal	Browse
www.youtube.com	0%	Virustotal	Browse
pixel.rubiconproject.com	0%	Virustotal	Browse
www.linkedin.com	0%	Virustotal	Browse
ws.hotjar.com	0%	Virustotal	Browse
connect.facebook.net	0%	Virustotal	Browse
www.clarity.ms	0%	Virustotal	Browse
s-part-0032.t-0009.t-msedge.net	0%	Virustotal	Browse
static.hotjar.com	0%	Virustotal	Browse
js.adsrvr.org	0%	Virustotal	Browse
c.clarity.ms	0%	Virustotal	Browse
www.facebook.com	0%	Virustotal	Browse
content.hotjar.io	0%	Virustotal	Browse
snap.licdn.com	0%	Virustotal	Browse
tayakay.com	9%	Virustotal	Browse
ib.adnxs.com	0%	Virustotal	Browse
px.ads.linkedin.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://jqueryui.com	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://mastodon.social	0%	Virustotal		Browse
https://news.ycombinator.com/submitlink?u=	0%	Virustotal		Browse
http://www.smartmenus.org/	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
forms.hsforms.com	104.18.80.204	true	false	0%, Virustotal, Browse	unknown
js.zi-scripts.com	172.64.150.44	true	false	0%, Virustotal, Browse	unknown
pacman-content-live.live.eks.hotjar.com	54.171.225.199	true	false	0%, Virustotal, Browse	unknown
d34ugip0pxbcxk.cloudfront.net	13.32.99.4	true	false	0%, Virustotal, Browse	unknown
hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	34.239.78.165	true	false	0%, Virustotal, Browse	unknown
i.ytimg.com	172.217.16.214	true	false	0%, Virustotal, Browse	unknown
js.hs-analytics.net	104.17.175.201	true	false	0%, Virustotal, Browse	unknown
www.gofreight.com	141.193.213.10	true	false	0%, Virustotal, Browse	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	0%, Virustotal, Browse	unknown
insight.adsrvr.org	15.197.193.217	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	0%, Virustotal, Browse	unknown
track.hubspot.com	104.16.118.116	true	false	0%, Virustotal, Browse	unknown
script.hotjar.com	13.33.187.109	true	false	0%, Virustotal, Browse	unknown
js.hsforms.net	104.18.142.119	true	false	0%, Virustotal, Browse	unknown
js.hs-scripts.com	104.16.137.209	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	142.250.185.226	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.181.228	true	false	0%, Virustotal, Browse	unknown
tracking.g2crowd.com	104.18.30.176	true	false	0%, Virustotal, Browse	unknown
ws-assets.zoominfo.com	104.16.117.43	true	false	0%, Virustotal, Browse	unknown
static-cdn.hotjar.com	18.66.102.53	true	false	0%, Virustotal, Browse	unknown
match.adsrvr.org	35.71.131.137	true	false	0%, Virustotal, Browse	unknown
js.hs-banner.com	172.64.147.16	true	false	0%, Virustotal, Browse	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
us-u.openx.net	34.98.64.218	true	false	0%, Virustotal, Browse	unknown
ws.zoominfo.com	104.16.118.43	true	false	0%, Virustotal, Browse	unknown
api-js.mixpanel.com	35.190.25.25	true	false	0%, Virustotal, Browse	unknown
d3i9xyriglxn0r.cloudfront.net	13.33.187.4	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
js.hsadspixel.net	104.17.128.172	true	false	0%, Virustotal, Browse	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	0%, Virustotal, Browse	unknown
youtube-ui.l.google.com	172.217.16.206	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	216.58.212.162	true	false	0%, Virustotal, Browse	unknown
forms-na1.hsforms.com	104.19.175.188	true	false	0%, Virustotal, Browse	unknown
api.hubapi.com	104.18.240.108	true	false	0%, Virustotal, Browse	unknown
td.doubleclick.net	142.250.186.130	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	185.89.210.244	true	false	1%, Virustotal, Browse	unknown
wsky-live.live.eks.hotjar.com	52.30.61.80	true	false	0%, Virustotal, Browse	unknown
aorta.clickagy.com	3.212.99.33	true	false	0%, Virustotal, Browse	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	0%, Virustotal, Browse	unknown
schedule.zoominfo.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
tags.clickagy.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
t.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
hemsync.clickagy.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
static.hotjar.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
c.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.youtube.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
ws.hotjar.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.facebook.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
js.adsrvr.org	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.clarity.ms	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.linkedin.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
pixel.rubiconproject.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
connect.facebook.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
px.ads.linkedin.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
content.hotjar.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
snap.licdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
ib.adnxs.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
tayakay.com	unknown	unknown	false	9%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.gofreight.com/	true		unknown
https://www.gofreight.com/wp-content/uploads/2024/09/money.png	true		unknown
https://forms.hsforms.com/embed/v3/form/20002082/f27c7c1b-2c75-4214-98d3-970e2b7c98e0/json?hs_static_app=forms-embed&hs_static_app_version=1.6227&X-HubSpot-Static-App-Info=forms-embed-1.6227&hutk=a2b36d0b9726f01a3e356d70280647c6	false		unknown
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false	URL Reputation: safe	unknown
https://www.gofreight.com/wp-content/uploads/elementor/css/post-33583.css?ver=1727087240	true		unknown
https://a.nel.cloudflare.com/report/v4?s=RSDPiyTljAqhGsHJ8mzIEKzrdGwKEr%2BBkqFqcWl1ShP9oJKnEJGhIQJDptV%2FCI7zIu3m2%2FIVAjTx6oIwf9Aj537ci5Pd6pb5LM2YHc5xLcl4AVQ3GT9Q%2FufWS23lDV37kM0t	false		unknown
https://www.gofreight.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js	true		unknown
https://www.facebook.com/tr/?id=304060560882332&ev=PageView&dl=https%3A%2F%2Fwww.gofreight.com%2Freferral-program&rl=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&if=false&ts=1728443140221&sw=1280&sh=1024&v=next&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&eid=ob3_plugin-set_7b4248684f3374dd1c8bfd530465fdae6e46860a82f231b046abc45f25e51704&fbp=fb.1.1728443039694.357210992335354960&cs_est=true&ler=empty&cdl=API_unavailable&it=1728443140158&coo=false&tm=1&rqm=GET	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=304060560882332&ev=PageView&dl=https%3A%2F%2Fwww.gofreight.com%2F&rl=&if=false&ts=1728443039700&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1728443039694.357210992335354960&cs_est=true&ler=empty&cdl=API_unavailable&it=1728443037473&coo=false&tm=1&rqm=FGET	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D8fff1add-a81d-4558-98d0-d14f0baa648e	false		unknown
https://www.gofreight.com/wp-content/uploads/2023/12/Customer-Portal.svg	true		unknown
https://www.gofreight.com/wp-content/uploads/elementor/css/post-10.css?ver=1727840056	true		unknown
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=20002082&ct=standard-page&rcu=https%3A%2F%2Fwww.gofreight.com%2F&pu=https%3A%2F%2Fwww.gofreight.com%2F&t=Freight+Forwarding+Software+%7C+All-in-One+Solution+%7C+GoFreight&cts=1728443045873&vi=a2b36d0b9726f01a3e356d70280647c6&nc=true&u=69355471.a2b36d0b9726f01a3e356d70280647c6.1728443045870.1728443045870.1728443045870.1&b=69355471.1.1728443045870&cc=15	false		unknown
https://www.gofreight.com/wp-content/uploads/2023/12/Quotation.svg	true		unknown
https://www.gofreight.com/wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css	true		unknown
https://www.gofreight.com/wp-content/uploads/2024/02/FreightManagement_Leader_Small-Business_Americas_Leader-1.webp	true		unknown
https://ws.zoominfo.com/pixel/collect	false		unknown
https://www.gofreight.com/wp-content/uploads/2022/11/Whats-New_1111.jpg	true		unknown
https://www.gofreight.com/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=1728368262	true		unknown
https://track.hubspot.com/__ptq.gif?k=15&fi=713d4472-8b88-4583-8c38-b54858f9c45a&fci=f44b1e9e-12fb-4d05-bb98-92f3019a58a4&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=471034161&v=1.1&a=20002082&ct=standard-page&rcu=https%3A%2F%2Fwww.gofreight.com%2F&pu=https%3A%2F%2Fwww.gofreight.com%2F&t=Freight+Forwarding+Software+%7C+All-in-One+Solution+%7C+GoFreight&cts=1728443045877&vi=a2b36d0b9726f01a3e356d70280647c6&nc=true&u=69355471.a2b36d0b9726f01a3e356d70280647c6.1728443045870.1728443045870.1728443045870.1&b=69355471.1.1728443045870&cc=15	false		unknown
https://content.hotjar.io/?site_id=5145902&gzip=1	false		unknown
https://www.gofreight.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.0.0	true		unknown
https://www.facebook.com/tr/?id=304060560882332&ev=PageView&dl=https%3A%2F%2Fwww.gofreight.com%2Freferral-program&rl=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&if=false&ts=1728443140218&sw=1280&sh=1024&v=next&r=stable&a=wordpress-6.6.1-4.0.1&ec=0&o=4126&eid=ob3_plugin-set_42cb2d280e852599154264adcd15890e0ee36a748c875ac155223399ffae3f12&fbp=fb.1.1728443039694.357210992335354960&cs_est=true&ler=empty&cdl=API_unavailable&it=1728443140158&coo=false&rqm=GET	false		unknown
https://www.gofreight.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	true		unknown
https://www.gofreight.com/wp-content/cache/min/1/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=1728368262	true		unknown
https://www.gofreight.com/wp-content/cache/min/1/wp-content/plugins/sassy-social-share/public/css/sassy-social-share-public.css?ver=1728368262	true		unknown
https://js.hs-banner.com/v2/activity/view	false		unknown
https://www.gofreight.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1	true		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=304060560882332&ev=SubscribedButtonClick&dl=https%3A%2F%2Fwww.gofreight.com%2Fwhats-new&rl=https%3A%2F%2Fwww.gofreight.com%2F&if=false&ts=1728443139135&cd[buttonFeatures]=%7B%22classList%22%3A%22%22%2C%22destination%22%3A%22https%3A%2F%2Fwww.gofreight.com%2Ffraud-notice%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Notice%20Regarding%20Fraudulent%20Job%20Postings%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22a%22%2C%22type%22%3Anull%2C%22name%22%3A%22%22%7D&cd[buttonText]=Notice%20Regarding%20Fraudulent%20Job%20Postings&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22What%27s%20New%20Archive%20-%20GoFreight%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1728443039694.357210992335354960&cs_est=true&ler=empty&cdl=API_unavailable&it=1728443137443&coo=false&es=automatic&tm=3&rqm=FGET	false		unknown
https://www.gofreight.com/wp-content/uploads/elementor/css/post-7.css?ver=1722396208	true		unknown
https://www.gofreight.com/wp-content/uploads/2023/12/warehouse-managers-working-together.webp	true		unknown
https://www.gofreight.com/wp-content/uploads/2023/09/Why-GoFreight-BG.png	true		unknown
https://www.gofreight.com/wp-content/uploads/2023/12/New-Project-4.webp	true		unknown
https://www.gofreight.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3	true		unknown
https://www.gofreight.com/wp-includes/js/dist/element.min.js?ver=cb762d190aebbec25b27	true		unknown
https://aorta.clickagy.com/pixel.gif?clkgypv=jstag&ws=1	false		unknown
https://forms.hsforms.com/embed/v3/form/20002082/4efb66a5-6041-4427-ad13-79a0abbb3798/json?hs_static_app=forms-embed&hs_static_app_version=1.6227&X-HubSpot-Static-App-Info=forms-embed-1.6227	false		unknown
https://www.gofreight.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6	true		unknown
https://www.gofreight.com/wp-content/cache/min/1/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=1728368262	true		unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1	false		unknown
https://ws.zoominfo.com/formcomplete-v2/forms	false		unknown
https://connect.facebook.net/en_US/fbevents.js?v=next	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.gofreight.com/wp-content/uploads/2023/12/Integration.svg);	chromecache_577.1.dr	true		unknown
https://mastodon.social	chromecache_585.1.dr	false	0%, Virustotal, Browse	unknown
https://www.gofreight.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.gofreight.com%2Freferral-pr	chromecache_349.1.dr	true		unknown
https://www.gofreight.com/fraud-notice	chromecache_382.1.dr	true		unknown
https://news.ycombinator.com/submitlink?u=	chromecache_557.1.dr, chromecache_585.1.dr	false	0%, Virustotal, Browse	unknown
http://www.smartmenus.org/	chromecache_542.1.dr	false	0%, Virustotal, Browse	unknown
https://www.gofreight.com/who-we-serve/canada	chromecache_382.1.dr	true		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_428.1.dr, chromecache_602.1.dr	false	URL Reputation: safe	unknown
https://swiperjs.com	chromecache_598.1.dr, chromecache_646.1.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/company/gofreight/	chromecache_382.1.dr	false		unknown
https://www.google.com/pagead/1p-user-list/785125299/?random	chromecache_584.1.dr, chromecache_578.1.dr, chromecache_286.1.dr, chromecache_497.1.dr, chromecache_435.1.dr, chromecache_639.1.dr, chromecache_504.1.dr, chromecache_552.1.dr, chromecache_499.1.dr	false		unknown
https://www.gofreight.com/wp-content/uploads/2023/12/Freight-Forwarding.svg);	chromecache_577.1.dr	true		unknown
https://www.gofreight.com/newsroom	chromecache_382.1.dr	true		unknown
https://www.gofreight.com/wp-content/uploads/2023/08/Rectangle9-300x178.webp	chromecache_382.1.dr	true		unknown
https://web.skype.com/share?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
http://www.datatables.net	chromecache_348.1.dr, chromecache_341.1.dr	false		unknown
http://webmail.aol.com/25045/aol/en-us/Mail/compose-message.aspx?subject=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://datatables.net/download	chromecache_348.1.dr, chromecache_341.1.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_442.1.dr	false		unknown
https://www.gofreight.com/wp-content/uploads/2024/02/FreightManagement_Leader_Small-Business_Leader-	chromecache_382.1.dr	true		unknown
http://auth.yoolink.to/authenticate/login?service=yoolink.to&landing_path=%2Faddorshare%3Furl_value%	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://classroom.google.com/u/0/share?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://connect.ok.ru/dk?cmd=WidgetSharePreview&st.cmd=WidgetSharePreview&st.shareUrl=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://refind.com/?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://www.gofreight.com/feed	chromecache_349.1.dr, chromecache_382.1.dr	true		unknown
https://app.gentlereader.com/bookmark?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_589.1.dr	false	URL Reputation: safe	unknown
https://b.hatena.ne.jp/bookmarklet?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://www.gofreight.com#primaryimage	chromecache_382.1.dr	false		unknown
https://www.czargroup.net	chromecache_382.1.dr	false		unknown
https://www.gofreight.com/resources/whitepaper	chromecache_382.1.dr	true		unknown
https://www.gofreight.com/#/schema/logo/image/	chromecache_382.1.dr	true		unknown
https://compose.mail.yahoo.com/?Subject=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
http://www.bitty.com/manual/?contenttype=&contentvalue=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://translate.google.com/translate?js=n&sl=auto&tl=en&u=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://stocktwits.com/widgets/share?body=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://mix.com/mixit?url=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser#necessary	chromecache_582.1.dr, chromecache_633.1.dr	false		unknown
http://www.hubspot.com	chromecache_582.1.dr, chromecache_395.1.dr, chromecache_498.1.dr, chromecache_633.1.dr, chromecache_573.1.dr, chromecache_554.1.dr, chromecache_366.1.dr, chromecache_410.1.dr	false		unknown
https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details	chromecache_429.1.dr, chromecache_604.1.dr	false		unknown
https://jqueryui.com	chromecache_518.1.dr	false	URL Reputation: safe	unknown
https://twitter.com/intent/tweet?text=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://www.gofreight.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ve	chromecache_382.1.dr	true		unknown
https://www.gofreight.com/resources/buyers-guide	chromecache_382.1.dr	true		unknown
https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Core/CMP%20API%20S	chromecache_429.1.dr, chromecache_604.1.dr	false		unknown
https://www.bookmarks.fr/Connexion/?action=add&address=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://js.hs-banner.com/v2	chromecache_582.1.dr, chromecache_633.1.dr	false		unknown
http://datatables.net/license	chromecache_348.1.dr, chromecache_341.1.dr	false		unknown
http://my.jamespot.com/	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://elementor.com/hello-theme/?utm_source=wp-themes&utm_campaign=theme-uri&utm_medium=wp-dash	chromecache_577.1.dr	false		unknown
https://fontawesome.com/license/free	chromecache_441.1.dr, chromecache_379.1.dr, chromecache_389.1.dr, chromecache_494.1.dr, chromecache_495.1.dr, chromecache_470.1.dr	false	URL Reputation: safe	unknown
https://www.gofreight.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.c	chromecache_382.1.dr	true		unknown
https://parler.com/new-post?message=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://global.prod.uidapi.com	chromecache_429.1.dr, chromecache_604.1.dr	false		unknown
https://www.gofreight.com/who-we-serve/air	chromecache_382.1.dr	true		unknown
https://bsky.app/intent/compose?text=	chromecache_557.1.dr, chromecache_585.1.dr	false		unknown
https://www.gofreight.com/who-we-serve/it-manager	chromecache_382.1.dr	true		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
172.217.16.214	i.ytimg.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.117.43	ws-assets.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.240.108	api.hubapi.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
104.17.128.172	js.hsadspixel.net	United States	13335	CLOUDFLARENETUS	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
104.18.80.204	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.140.209	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.241.108	unknown	United States	13335	CLOUDFLARENETUS	false
185.89.210.244	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
104.16.137.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.18.30.176	tracking.g2crowd.com	United States	13335	CLOUDFLARENETUS	false
104.18.141.119	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
34.239.78.165	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
13.32.99.4	d34ugip0pxbcxk.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
13.33.187.92	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.212.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.31.176	unknown	United States	13335	CLOUDFLARENETUS	false
13.33.187.109	script.hotjar.com	United States	16509	AMAZON-02US	false
18.66.102.51	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
34.248.145.195	unknown	United States	16509	AMAZON-02US	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
104.18.243.108	unknown	United States	13335	CLOUDFLARENETUS	false
18.66.102.106	unknown	United States	3	MIT-GATEWAYSUS	false
13.33.187.4	d3i9xyriglxn0r.cloudfront.net	United States	16509	AMAZON-02US	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
52.207.59.212	unknown	United States	14618	AMAZON-AESUS	false
104.18.37.212	unknown	United States	13335	CLOUDFLARENETUS	false
172.64.147.16	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.160.168	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
18.203.150.108	unknown	United States	16509	AMAZON-02US	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
54.246.57.204	unknown	United States	16509	AMAZON-02US	false
141.193.213.10	www.gofreight.com	United States	396845	DV-PRIMARY-ASN1US	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
35.190.25.25	api-js.mixpanel.com	United States	15169	GOOGLEUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
3.212.99.33	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
172.64.150.44	js.zi-scripts.com	United States	13335	CLOUDFLARENETUS	false
52.30.61.80	wsky-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
104.17.223.152	unknown	United States	13335	CLOUDFLARENETUS	false
54.171.225.199	pacman-content-live.live.eks.hotjar.com	United States	16509	AMAZON-02US	false
104.16.117.116	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1529570
Start date and time:	2024-10-09 05:03:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.gofreight.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@25/620@222/68
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 9 02:03:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9832962370875507
Encrypted:	false
SSDEEP:	48:8EdaDT6LlwAWH5idAKZdA1FehwiZUklqehYgy+3:8pDOxwAQfgy
MD5:	EB1095907F41B5E064C70E4E6A21B377
SHA1:	560E96447EC52A1B2BFCCC512E51BB289E4D9106
SHA-256:	69FA17EF9C9340A15C8CA2F71C01D99AC4CCC1550525D7A2EAC6CE6A9272D3EE
SHA-512:	75C8A8D8C20A05C959AC59C1C08DB59CFC93F7CB8ED6B4D8CA1B1F3388AECED7FE91321DC969C4F3926E2222CB8E6CC3BE544C6BFB5F49C2D73F5AE0BDB05738
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......a.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IIYp.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VIYy.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VIYy.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VIYy............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VIYz............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........D........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.gofreight.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Windows Analysis Report
http://www.gofreight.com/

Timestamp	Bytes transferred	Direction	Data
Oct 9, 2024 05:03:50.860491037 CEST	432	OUT	GET / HTTP/1.1 Host: www.gofreight.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 9, 2024 05:03:51.425789118 CEST	479	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 09 Oct 2024 03:03:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Expires: Wed, 09 Oct 2024 04:03:06 GMT X-Redirect-By: WordPress Location: https://www.gofreight.com/ X-Powered-By: WP Engine X-Cacheable: non200 Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 2 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cfb23d18d02236b-EWR Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 9, 2024 05:04:36.436744928 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 9, 2024 05:05:21.451720953 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:51 UTC	660	OUT	GET / HTTP/1.1 Host: www.gofreight.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:52 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding,Cookie Link: <https://www.gofreight.com/wp-json/>; rel="https://api.w.org/" Link: <https://www.gofreight.com/wp-json/wp/v2/pages/10>; rel="alternate"; title="JSON"; type="application/json" Link: <https://www.gofreight.com/>; rel=shortlink X-Powered-By: WP Engine X-Cacheable: SHORT Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 14 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8cfb23d5fde080df-EWR
2024-10-09 03:03:52 UTC	685	IN	Data Raw: 37 63 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 Data Ascii: 7cf2<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"/><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1'
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6f 66 72 65 69 67 68 74 2e 63 6f 6d 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 72 65 69 67 68 74 20 46 6f 72 77 61 72 64 69 6e 67 20 53 6f 66 74 77 61 72 65 20 7c 20 41 6c 6c 2d 69 6e 2d 4f 6e 65 20 53 6f 6c 75 74 69 6f 6e 20 7c 20 47 6f 46 72 65 69 67 68 74 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: ofreight.com" /><meta property="og:locale" content="en_US" /><meta property="og:type" content="website" /><meta property="og:title" content="Freight Forwarding Software \| All-in-One Solution \| GoFreight" /><meta property="og:description" content="
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 65 69 67 68 74 2e 63 6f 6d 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 7d 2c 22 69 6d 61 67 65 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 23 70 72 69 6d 61 72 79 69 6d 61 67 65 22 7d 2c 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 32 2f 47 6f 46 72 65 69 67 68 74 5f 6c 6f 67 6f 40 32 78 2e 70 6e 67 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 33 2d 30 38 2d 31 34 54 31 30 3a 35 35 3a 32 36 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 31 30 2d 30 33 54 30 38 3a 32 37 3a 30 31 2b 30 Data Ascii: eight.com#primaryimage"},"image":{"@id":"https://www.gofreight.com#primaryimage"},"thumbnailUrl":"https://www.gofreight.com/wp-content/uploads/2022/02/GoFreight_logo@2x.png","datePublished":"2023-08-14T10:55:26+00:00","dateModified":"2024-10-03T08:27:01+0
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 70 75 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 50 72 6f 70 65 72 74 79 56 61 6c 75 65 53 70 65 63 69 66 69 63 61 74 69 6f 6e 22 2c 22 76 61 6c 75 65 52 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 76 61 6c 75 65 4e 61 6d 65 22 3a 22 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 6e 61 6d 65 22 3a 22 47 6f 46 72 65 69 67 68 74 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 22 2c 22 6c 6f 67 6f 22 3a Data Ascii: put":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.gofreight.com/#organization","name":"GoFreight","url":"https://www.gofreight.com/","logo":
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 2d 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 64 69 73 74 2f 62 6c 6f 63 6b 2d 6c 69 62 72 61 72 79 2f 73 74 79 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 36 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 63 6c 61 73 73 69 63 2d 74 68 65 6d 65 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 Data Ascii: round: none !important;padding: 0 !important;}</style><link rel='stylesheet' id='wp-block-library-css' href='https://www.gofreight.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.1' media='all' /><style id='classic-theme-styles-inline
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 Data Ascii: t--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 35 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 3a 20 31 33 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 Data Ascii: tric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--p
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d Data Ascii: template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !im
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d Data Ascii: olor{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color-
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f Data Ascii: eset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !impo

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:52 UTC	591	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.1 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:52 UTC	450	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:52 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 18 Jul 2024 16:54:17 GMT ETag: W/"669948b9-1b723" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1948931 Server: cloudflare CF-RAY: 8cfb23dadee30c7a-EWR
2024-10-09 03:03:52 UTC	919	IN	Data Raw: 37 64 64 63 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: 7ddc@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-b
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 77 69 64 74 68 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 77 69 64 74 68 2d 32 35 7b 77 69 64 74 68 3a 63 61 Data Ascii: ne}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:ca
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 29 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 29 29 2c 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 Data Ascii: p-block-button.is-style-outline>.wp-block-button__link:not(.has-text-color)){color:currentColor}:root :where(.wp-block-button .wp-block-button__link.is-style-outline:not(.has-background)),:root :where(.wp-block-button.is-style-outline>.wp-block-button__li
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6f 6e 73 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 Data Ascii: ons[style=text-decoration] .wp-block-button,.wp-block-buttons[style=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-ca
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 74 6f 70 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 Data Ascii: edia (min-width:782px){.wp-block-columns{flex-wrap:nowrap!important}}.wp-block-columns.are-vertically-aligned-top{align-items:flex-start}.wp-block-columns.are-vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{ali
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6c 75 6d 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 74 6f 70 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 Data Ascii: lumn.is-vertically-aligned-center,.wp-block-column.is-vertically-aligned-top{width:100%}.wp-block-post-comments{box-sizing:border-box}.wp-block-post-comments .alignleft{float:left}.wp-block-post-comments .alignright{float:right}.wp-block-post-comments .na
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 72 6d 2d 65 6d 61 69 6c 20 6c 61 62 65 6c 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 75 72 6c 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c Data Ascii: rm-email label,.wp-block-post-comments .comment-form-url label{display:block;margin-bottom:.25em}.wp-block-post-comments .comment-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;displ
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 75 6d 62 65 72 73 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: -comments-pagination>.wp-block-comments-pagination-numbers:last-child,.wp-block-comments-pagination>.wp-block-comments-pagination-previous:last-child{margin-right:0}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow{display:inline-
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f Data Ascii: .has-background-dim:not([class=-background-color]),.wp-block-cover-image .has-background-dim:not([class=-background-color]),.wp-block-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-backgro
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 Data Ascii: p-block-cover.has-background-dim.has-background-dim-10 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-10:not(.has-background-gradient):before{opacity:.1}.wp-block-cover-image.has-background-dim.has-background-di

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:52 UTC	592	OUT	GET /wp-content/themes/hello-elementor-child/style.css?ver=6.6.1 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:52 UTC	449	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:52 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 03 Apr 2024 07:28:40 GMT ETag: W/"660d0528-d9a9" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1948931 Server: cloudflare CF-RAY: 8cfb23db6dbc1a48-EWR
2024-10-09 03:03:52 UTC	920	IN	Data Raw: 37 64 64 65 0d 0a 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 20 20 48 65 6c 6c 6f 20 45 6c 65 6d 65 6e 74 6f 72 20 43 68 69 6c 64 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 20 20 20 68 74 74 70 73 3a 2f 2f 65 6c 65 6d 65 6e 74 6f 72 2e 63 6f 6d 2f 68 65 6c 6c 6f 2d 74 68 65 6d 65 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 77 70 2d 74 68 65 6d 65 73 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 74 68 65 6d 65 2d 75 72 69 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 77 70 2d 64 61 73 68 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 20 41 20 48 65 6c 6c 6f 20 45 6c 65 6d 65 6e 74 6f 72 20 63 68 69 6c 64 20 74 68 65 6d 65 0a 09 41 75 74 68 6f 72 3a 20 20 20 20 20 20 20 45 6c 65 6d 65 6e 74 6f 72 20 54 65 61 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 20 20 68 74 74 70 73 3a Data Ascii: 7dde/*Theme Name: Hello Elementor ChildTheme URI: https://elementor.com/hello-theme/?utm_source=wp-themes&utm_campaign=theme-uri&utm_medium=wp-dashDescription: A Hello Elementor child themeAuthor: Elementor TeamAuthor URI: https:
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 2d 74 69 74 6c 65 20 7b 20 20 20 20 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 61 62 2d 74 69 74 6c 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 74 69 76 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0a 20 20 20 Data Ascii: .elementor-accordion .elementor-tab-content { border-radius: 10px; margin-top: 10px;}.elementor-accordion .elementor-tab-title { position: relative;}.elementor-accordion .elementor-tab-title.elementor-active:before { width: 0;
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 33 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 7d 0a 62 6f 64 79 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 63 61 72 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 6d 65 74 61 2d 64 61 74 61 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 33 30 70 78 20 33 30 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 30 37 30 37 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 66 6f 6e Data Ascii: { font-size: 23px; font-weight: 500; line-height: 30px;}body .elementor-posts .elementor-post__card .elementor-post__meta-data { padding: 0px 30px 30px; border-top: 0px solid #eaeaea; color: #707070; font-size: 18px; fon
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6c 6f 67 20 70 61 67 65 20 45 6e 64 20 2a 2f 0a 0a 0a 0a 0a 2f 2a 20 48 65 61 64 65 72 20 53 74 61 72 74 20 2a 2f 0a 0a 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 6d 65 6e 75 2d 68 61 6d 62 75 72 67 65 72 20 7b 20 20 20 20 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 75 6e 73 65 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 65 6b 69 74 5f 6d 65 6e 75 5f 72 65 73 70 6f 6e 73 69 76 65 5f 74 61 62 6c 65 74 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 64 72 6f 70 64 6f 77 6e 2d 68 61 73 3e 61 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 73 75 62 6d 65 6e 75 Data Ascii: log page End // Header Start */.elementskit-menu-hamburger { background: transparent !important; border: unset !important;}.ekit_menu_responsive_tablet .elementskit-navbar-nav-default .elementskit-dropdown-has>a .elementskit-submenu
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 75 5f 70 61 64 64 69 6e 67 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 09 0a 09 62 6f 64 79 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 6d 65 67 61 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 72 65 6d 6f 76 65 5f 6d 61 72 67 69 6e 5f 72 65 73 70 6f 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 7b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 09 62 6f 64 79 20 2e 65 6c 65 6d 65 6e 74 73 6b 69 74 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 73 Data Ascii: u_padding > .elementor-widget-wrap {padding: 20px !important;}body .elementskit-navbar-nav-default .elementskit-megamenu-panel .remove_margin_respo .elementor-widget-wrap {margin: 0 !important;}body .elementskit-navbar-nav-default .elements
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 41 44 41 44 41 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 31 70 78 20 30 20 31 31 70 78 20 32 30 70 78 3b 0a 7d 0a 2e 6d 65 67 61 5f 6d 65 6e 75 5f 6c 69 6e 6b 73 20 61 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 61 30 38 63 3b 0a 7d 0a 2e 6d 65 67 61 5f 6d 65 6e 75 5f 6c 69 6e 6b 73 20 61 2e 63 5f 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 38 70 78 3b 0a 20 20 20 20 68 65 Data Ascii: nline-block; position: relative; border-bottom: 1px solid #DADADA; padding: 11px 0 11px 20px;}.mega_menu_links a:hover {color: #1ea08c;}.mega_menu_links a.c_menu:before { content: ''; display: inline-block; width: 8px; he
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 32 2f 53 65 63 75 72 69 74 79 2d 46 69 6c 69 6e 67 2e 73 76 67 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6d 65 67 61 5f 6d 65 6e 75 5f 6c 69 6e 6b 73 20 61 2e 63 75 73 74 6f 6d 65 72 5f 70 6f 72 74 61 6c 5f 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 20 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 Data Ascii: e: url(https://www.gofreight.com/wp-content/uploads/2023/12/Security-Filing.svg); background-size: contain; background-repeat: no-repeat; background-position: center center;}.mega_menu_links a.customer_portal_menu:before { content: '';
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 75 74 69 6f 6e 73 5f 6d 65 6e 75 3a 62 65 66 6f 72 65 20 7b 20 0a 09 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 74 6f 70 3a 20 37 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 66 72 65 69 67 68 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 31 32 2f 41 63 63 6f 75 6e 74 69 6e 67 2e 73 76 67 29 3b 0a 20 20 20 20 62 61 Data Ascii: utions_menu:before { content: ''; width: 25px; height: 25px; display: inline-block; top: 7px; position: relative; right: 10px; background-image: url(https://www.gofreight.com/wp-content/uploads/2023/12/Accounting.svg); ba
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 37 25 2c 20 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 33 37 25 2c 20 30 25 29 3b 0a 7d 0a 0a 2e 6d 65 67 61 5f 6d 65 6e 75 5f 63 6f 6d 70 61 6e 79 5f 63 65 6e 74 65 72 5f 63 75 73 74 6f 6d 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 37 25 2c 20 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 32 37 25 2c 20 30 25 29 3b 0a 7d 0a 0a 2e 79 65 6c 6c 6f 77 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 65 62 33 33 3b 0a 7d 0a 0a 2e 61 63 74 69 6f 6e 73 20 69 6e 70 75 74 2e 68 73 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 Data Ascii: rm: translate(-37%, 0%); transform: translate(-37%, 0%);}.mega_menu_company_center_custom { left: 50%; -ms-transform: translate(-27%, 0%); transform: translate(-27%, 0%);}.yellow { color: #ffeb33;}.actions input.hs-button {
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6c 64 20 2e 68 73 2d 65 72 72 6f 72 2d 6d 73 67 73 20 6c 69 2c 0a 2e 68 73 2d 66 6f 72 6d 2d 70 72 69 76 61 74 65 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 65 72 72 6f 72 2d 6d 73 67 73 20 6c 61 62 65 6c 2c 0a 2e 68 73 2d 66 6f 72 6d 2d 70 72 69 76 61 74 65 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 65 72 72 6f 72 2d 6d 73 67 73 20 6c 69 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 65 64 3b 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 31 20 2e 68 73 5f 70 72 69 76 61 74 65 5f 74 6f 5f 74 68 65 5f 72 65 66 65 72 Data Ascii: ld .hs-error-msgs li,.hs-form-private .form-columns-2 .hs-form-field .hs-error-msgs label,.hs-form-private .form-columns-2 .hs-form-field .hs-error-msgs li { margin: 0; font-size: 14px; color: red;}.form-columns-1 .hs_private_to_the_refer

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:52 UTC	590	OUT	GET /wp-content/themes/hello-elementor/style.min.css?ver=3.1.1 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:52 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:52 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 07:03:09 GMT ETag: W/"66d8062d-157d" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 260999 Server: cloudflare CF-RAY: 8cfb23db5a65c352-EWR
2024-10-09 03:03:52 UTC	921	IN	Data Raw: 31 35 37 64 0d 0a 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 Data Ascii: 157dhtml{line-height:1.15;-webkit-text-size-adjust:100%}*,:after,:before{box-sizing:border-box}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 66 6f 63 75 73 2c 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 Data Ascii: hover{color:#336}a:not([href]):not([tabindex]),a:not([href]):not([tabindex]):focus,a:not([href]):not([tabindex]):hover{color:inherit;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}abbr[title]{border-block-end:none;-webkit-text-decorati
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 72 67 69 6e 3a 30 7d 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d Data Ascii: ay:inline-block;line-height:1;vertical-align:middle}button,input,optgroup,select,textarea{font-family:inherit;font-size:1rem;line-height:1.5;margin:0}input[type=date],input[type=email],input[type=number],input[type=password],input[type=search],input[type=
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 6e 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 6f 67 72 65 73 73 7b 76 65 72 74 69 63 61 Data Ascii: n:none}[type=button]:not(:disabled),[type=submit]:not(:disabled),button:not(:disabled){cursor:pointer}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{vertica
2024-10-09 03:03:52 UTC	481	IN	Data Raw: 73 6c 61 28 30 2c 30 25 2c 35 30 2e 32 25 2c 2e 30 37 30 35 38 38 32 33 35 33 29 7d 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 68 6f 76 65 72 3e 74 64 2c 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 68 6f 76 65 72 3e 74 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 35 30 2e 32 25 2c 2e 31 30 31 39 36 30 37 38 34 33 29 7d 74 61 62 6c 65 20 74 62 6f 64 79 2b 74 62 6f 64 79 7b 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 32 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 2c 35 30 2e 32 25 2c 2e 35 30 31 39 36 30 37 38 34 33 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 74 61 62 6c 65 20 74 61 62 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 7d 74 61 62 6c 65 Data Ascii: sla(0,0%,50.2%,.0705882353)}table tbody tr:hover>td,table tbody tr:hover>th{background-color:hsla(0,0%,50.2%,.1019607843)}table tbody+tbody{border-block-start:2px solid hsla(0,0%,50.2%,.5019607843)}@media (max-width:767px){table table{font-size:.8em}table
2024-10-09 03:03:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:52 UTC	590	OUT	GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.1.1 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:52 UTC	449	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:52 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 07:03:09 GMT ETag: W/"66d8062d-141a" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1948931 Server: cloudflare CF-RAY: 8cfb23db9e8341a1-EWR
2024-10-09 03:03:52 UTC	920	IN	Data Raw: 31 34 31 61 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 6f 6d 6d 65 6e 74 73 2d 61 72 65 61 20 61 2c 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 72 67 69 6e 2d 6c Data Ascii: 141a@charset "UTF-8";.comments-area a,.page-content a{text-decoration:underline}.alignright{float:right;margin-left:1rem}.alignleft{float:left;margin-right:1rem}.aligncenter{clear:both;display:block;margin-left:auto;margin-right:auto}.alignwide{margin-l
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 66 6f 72 6d 20 70 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 70 6f 73 74 2d 70 61 73 73 77 6f 72 64 2d 66 6f 72 6d 20 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 33 70 78 7d 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 63 72 65 65 Data Ascii: form p{width:100%;display:flex;align-items:flex-end}.post-password-form [type=submit]{margin-inline-start:3px}.screen-reader-text{clip:rect(1px,1px,1px,1px);height:1px;overflow:hidden;position:absolute!important;width:1px;word-wrap:normal!important}.scree
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 20 2e 61 76 61 74 61 72 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 2e 39 72 65 6d 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 6d 65 74 61 64 61 74 61 2c 23 63 6f 6d 6d 65 6e 74 73 20 2e 72 65 70 6c 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 68 69 6c 64 72 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 Data Ascii: .avatar{left:auto;right:0}#comments .comment-meta{display:flex;justify-content:space-between;margin-block-end:.9rem}#comments .comment-metadata,#comments .reply{font-size:11px;line-height:1}#comments .children{position:relative;list-style:none;margin:0;p
2024-10-09 03:03:52 UTC	1369	IN	Data Raw: 73 69 74 65 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 69 6e 6e 65 72 2c 2e 73 69 74 65 2d 68 65 61 64 65 72 3a 6e 6f 74 28 2e 64 79 6e 61 6d 69 63 2d 68 65 61 64 65 72 29 2c 62 6f 64 79 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 5d 29 20 2e 73 69 74 65 2d 6d 61 69 6e 7b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 70 61 67 65 2d 68 65 61 64 65 72 20 2e 65 6e 74 72 79 2d 74 69 74 6c 65 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 64 79 Data Ascii: site-header .header-inner,.site-header:not(.dynamic-header),body:not([class*=elementor-page-]) .site-main{padding-inline-start:10px;padding-inline-end:10px}}@media (min-width:576px){.page-header .entry-title,.site-footer .footer-inner,.site-footer:not(.dy
2024-10-09 03:03:52 UTC	127	IN	Data Raw: 6f 74 65 72 2e 66 6f 6f 74 65 72 2d 66 75 6c 6c 2d 77 69 64 74 68 2c 2e 73 69 74 65 2d 68 65 61 64 65 72 2e 68 65 61 64 65 72 2d 66 75 6c 6c 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 2b 2e 65 6c 65 6d 65 6e 74 6f 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 30 76 68 20 2d 20 33 32 30 70 78 29 7d 0d 0a Data Ascii: oter.footer-full-width,.site-header.header-full-width{max-width:100%}}.site-header+.elementor{min-height:calc(100vh - 320px)}
2024-10-09 03:03:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:53 UTC	598	OUT	GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.1.1 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:53 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:53 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 04 Sep 2024 07:03:09 GMT ETag: W/"66d8062d-1c2c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 479765 Server: cloudflare CF-RAY: 8cfb23dd1b9342d1-EWR
2024-10-09 03:03:53 UTC	921	IN	Data Raw: 31 63 32 63 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 73 69 74 65 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 31 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 62 72 Data Ascii: 1c2c@charset "UTF-8";.site-header{display:flex;flex-wrap:wrap;justify-content:space-between;padding-block-start:1rem;padding-block-end:1rem;position:relative}.site-header .site-title{font-size:2.5rem;font-weight:500;line-height:1.2}.site-header .site-br
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 61 64 65 72 2d 69 6e 6e 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 2e 68 65 61 64 65 72 2d 73 74 61 63 6b 65 64 20 2e 68 65 61 64 65 72 2d 69 6e 6e 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 73 69 74 65 2d 66 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 31 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 69 74 65 2d 66 6f 6f 74 65 72 20 2e 73 69 74 65 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: ader-inner .site-branding{text-align:end}.site-header.header-stacked .header-inner{align-items:center;flex-direction:column;text-align:center}.site-footer{padding-block-start:1rem;padding-block-end:1rem;position:relative}.site-footer .site-title{font-size
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 6f 6f 74 65 72 2d 73 74 61 63 6b 65 64 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 6d 65 6e 75 7b 70 61 64 64 69 6e 67 3a 30 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 73 69 74 65 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 66 6f 6f 74 65 72 2d 73 74 61 63 6b 65 64 29 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 2e 63 6f 70 79 72 69 67 68 74 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 66 6f 6f 74 65 72 2d 73 74 61 63 6b 65 64 29 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 2c 2e 73 69 74 65 2d 66 6f 6f 74 65 72 3a 6e 6f 74 28 2e 66 6f 6f 74 65 72 2d 73 74 61 63 6b 65 64 29 20 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 Data Ascii: ooter-stacked .footer-inner .site-navigation .menu{padding:0}@media (max-width:576px){.site-footer:not(.footer-stacked) .footer-inner .copyright,.site-footer:not(.footer-stacked) .footer-inner .site-branding,.site-footer:not(.footer-stacked) .footer-inner
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 2e 35 72 65 6d 7d 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 67 67 6c 65 2d 68 6f 6c 64 65 72 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 67 67 6c 65 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 67 67 6c 65 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2e 33 35 72 65 6d 29 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f 67 67 6c 65 2d 68 6f 6c 64 65 72 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f Data Ascii: urrentColor;margin-block-end:.5rem}.site-navigation-toggle-holder .site-navigation-toggle[aria-expanded=true] .site-navigation-toggle-icon:before{box-shadow:none;transform:translateY(.35rem) rotate(45deg)}.site-navigation-toggle-holder .site-navigation-to
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 68 69 6c 64 72 65 6e 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 7d 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 6d 65 6e 75 20 6c 69 20 75 6c 20 75 6c 7b 6c 65 66 74 3a 31 30 30 25 3b 74 6f 70 3a 30 7d 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 6d 65 6e 75 20 6c 69 3a 68 6f 76 65 72 3e 75 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 66 6f 6f 74 65 72 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 6d 65 6e 75 20 6c 69 20 75 6c 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 7d 66 6f 6f 74 65 72 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 75 6c 2e 6d 65 6e 75 20 6c 69 20 75 6c 20 75 Data Ascii: hildren:after{transform:translateY(-50%) rotate(-90deg)}.site-navigation ul.menu li ul ul{left:100%;top:0}.site-navigation ul.menu li:hover>ul{display:block}footer .site-navigation ul.menu li ul{top:auto;bottom:100%}footer .site-navigation ul.menu li ul u
2024-10-09 03:03:53 UTC	823	IN	Data Raw: 65 59 28 31 29 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 73 69 74 65 2d 68 65 61 64 65 72 2e 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 2d 6d 6f 62 69 6c 65 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 29 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 73 69 74 65 2d 68 65 61 64 65 72 2e 6d 65 6e 75 2d 64 72 6f 70 64 6f 77 6e 2d 6d 6f 62 69 6c 65 3a 6e 6f 74 28 2e 6d 65 6e 75 2d 6c 61 79 6f 75 74 2d 64 72 6f 70 64 6f 77 6e 29 20 2e 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 74 6f Data Ascii: eY(1);max-height:100vh}@media (max-width:576px){.site-header.menu-dropdown-mobile:not(.menu-layout-dropdown) .site-navigation{display:none!important}}@media (min-width:768px){.site-header.menu-dropdown-mobile:not(.menu-layout-dropdown) .site-navigation-to
2024-10-09 03:03:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:53 UTC	605	OUT	GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.16.6 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:53 UTC	450	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:53 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 30 Jan 2024 08:39:04 GMT ETag: W/"65b8b5a8-1ca4c" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1948932 Server: cloudflare CF-RAY: 8cfb23df2e881795-EWR
2024-10-09 03:03:53 UTC	919	IN	Data Raw: 37 64 64 63 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 31 36 2e 30 20 2d 20 31 37 2d 31 30 2d 32 30 32 33 20 2a 2f 0a 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 67 2d 64 65 66 61 75 6c 74 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f Data Ascii: 7ddc/! elementor - v3.16.0 - 17-10-2023 /.dialog-widget-content{background-color:var(--e-a-bg-default);position:absolute;border-radius:3px;box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{line-height:1.5;box-sizing:border-bo
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 32 30 70 78 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 3a 61 66 74 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 6f 72 64 65 72 29 3b 70 Data Ascii: dding:20px}.dialog-type-alert .dialog-header,.dialog-type-confirm .dialog-header{font-size:15px;font-weight:500}.dialog-type-alert .dialog-header:after,.dialog-type-confirm .dialog-header:after{content:"";display:block;border-block-end:var(--e-a-border);p
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 68 6f 76 65 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 69 6e 76 65 72 74 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 61 63 74 69 76 65 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 Data Ascii: :var(--e-a-btn-bg-hover);color:var(--e-a-btn-color-invert)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button:active,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button:active{background-color:var(--e-a-btn-bg-active)}.dialog-type-alert .di
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e Data Ascii: ns-wrapper .dialog-button.e-btn-txt:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-btn-txt:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel:focus,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 64 Data Ascii: dialog-type-alert .dialog-buttons-wrapper .dialog-button.elementor-button-success:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.elementor-button-success:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-success:focus,.d
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 6f 6b 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 Data Ascii: dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-primary:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-primary:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-ok:focus,.dialog-type-confirm .dialog-but
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 6f 6b 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 62 74 6e 2d 74 78 74 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 Data Ascii: -type-confirm .dialog-buttons-wrapper .dialog-button.e-btn-txt.dialog-ok,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-btn-txt.dialog-take_over,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.e-primary.dialog-cancel,.dialog-typ
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 70 72 69 6d 61 72 79 2e 65 2d 62 74 6e 2d 74 78 74 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2e 64 69 61 6c 6f 67 2d 74 61 6b 65 5f 6f 76 65 72 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 64 69 61 6c 6f 67 2d 63 61 6e 63 65 6c 2e 64 69 61 6c 6f 67 2d 74 61 6b Data Ascii: pe-alert .dialog-buttons-wrapper .dialog-button.e-primary.e-btn-txt:hover,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel.dialog-take_over:focus,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.dialog-cancel.dialog-tak
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 63 6f 6e 66 69 72 6d 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 67 6f 2d 70 72 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 61 63 63 65 6e 74 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 61 63 63 65 6e 74 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 Data Ascii: dialog-button.e-accent,.dialog-type-confirm .dialog-buttons-wrapper .dialog-button.go-pro{background-color:var(--e-a-btn-bg-accent)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-accent:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 2d 61 2d 62 74 6e 2d 62 67 2d 77 61 72 6e 69 6e 67 29 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 2e 65 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 2c 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 61 6c 65 72 74 Data Ascii: apper .dialog-button.elementor-button-warning{background-color:var(--e-a-btn-bg-warning)}.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-warning:focus,.dialog-type-alert .dialog-buttons-wrapper .dialog-button.e-warning:hover,.dialog-type-alert

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:53 UTC	591	OUT	GET /wp-content/uploads/elementor/css/post-7.css?ver=1722396208 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:53 UTC	448	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:53 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2024 15:09:46 GMT ETag: W/"66e3043a-8bb" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1605009 Server: cloudflare CF-RAY: 8cfb23df0f4c18b4-EWR
2024-10-09 03:03:53 UTC	921	IN	Data Raw: 38 62 62 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 37 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 31 45 41 30 38 43 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 31 41 32 31 33 44 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 34 45 34 45 34 45 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 31 45 41 30 38 43 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 2d 2d 65 2d 67 6c Data Ascii: 8bb.elementor-kit-7{--e-global-color-primary:#1EA08C;--e-global-color-secondary:#1A213D;--e-global-color-text:#4E4E4E;--e-global-color-accent:#1EA08C;--e-global-typography-primary-font-family:"Roboto";--e-global-typography-primary-font-weight:600;--e-gl
2024-10-09 03:03:53 UTC	1321	IN	Data Raw: 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 75 62 69 6b 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 36 38 39 46 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 33 35 70 78 20 31 35 70 78 20 33 35 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 37 20 Data Ascii: mentor-button{font-family:"Rubik", Sans-serif;font-size:18px;font-weight:400;text-transform:uppercase;text-decoration:none;line-height:22px;color:#FFFFFF;background-color:#5689F8;border-radius:5px 5px 5px 5px;padding:15px 35px 15px 35px;}.elementor-kit-7
2024-10-09 03:03:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-09 03:03:53 UTC	609	OUT	GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.16.2 HTTP/1.1 Host: www.gofreight.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.gofreight.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-09 03:03:53 UTC	449	IN	HTTP/1.1 200 OK Date: Wed, 09 Oct 2024 03:03:53 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 30 Jan 2024 08:39:33 GMT ETag: W/"65b8b5c5-2df4" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 1605009 Server: cloudflare CF-RAY: 8cfb23e05e0b43a4-EWR
2024-10-09 03:03:53 UTC	920	IN	Data Raw: 32 64 66 34 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 31 36 2e 30 20 2d 20 32 30 2d 30 39 2d 32 30 32 33 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 69 6e 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 6f 75 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a Data Ascii: 2df4/! elementor-pro - v3.16.0 - 20-09-2023 /.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg,.elementor-bg-transform-zoom-out .elementor-bg{transform:scale(1.2)}.elementor-bg-transform-z
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 59 28 38 25 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 7b 2d 2d 74 72 61 6e 73 6c 61 74 65 3a 30 2c 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 67 72 6f 77 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 67 72 6f 77 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d Data Ascii: Y(8%)}.elementor-animated-content{--translate:0,0}.elementor-animated-content:focus .elementor-animated-item--grow,.elementor-animated-content:hover .elementor-animated-item--grow{transform:scale(1.1)}.elementor-animated-content:focus .elementor-animated-
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 66 61 64 65 2d 6f 75 74 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 7a 6f 6f 6d 2d 6f 75 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 7a 6f 6f 6d 2d 6f 75 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f Data Ascii: mated-content:hover .elementor-animated-item--fade-out{opacity:0}.elementor-animated-content:focus .elementor-animated-item--exit-zoom-out,.elementor-animated-content:hover .elementor-animated-item--exit-zoom-out{transform:scale(.2)}.elementor-animated-co
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 78 69 74 2d 74 6f 2d 6c 65 66 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 30 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 Data Ascii: xit-to-left{transform:translateX(-1000px)}.elementor-animated-content:focus .elementor-animated-item--exit-to-top,.elementor-animated-content:hover .elementor-animated-item--exit-to-top{transform:translateY(-600px)}.elementor-animated-content:focus .eleme
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 75 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 75 70 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 33 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 66 6f 63 75 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 64 6f 77 6e 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f Data Ascii: tor-animated-item--move-up,.elementor-animated-content:hover .elementor-animated-item--move-up{transform:translateY(-30px)}.elementor-animated-content:focus .elementor-animated-item--move-down,.elementor-animated-content:hover .elementor-animated-item--mo
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 69 6e 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 6f 75 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 66 61 64 65 2d 69 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 Data Ascii: entor-animated-content .elementor-animated-item--enter-zoom-in,.elementor-animated-content .elementor-animated-item--enter-zoom-out,.elementor-animated-content .elementor-animated-item--fade-in{opacity:0}.elementor-animated-content .elementor-animated-ite
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 63 6f 6e 74 61 69 6e 65 64 2d 62 6f 74 74 6f 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 63 6f 6e 74 61 69 6e 65 64 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e Data Ascii: ted-item--exit-to-top{opacity:1;transform:translateY(0) translateX(0)}.elementor-animated-content .elementor-animated-item--move-contained-bottom,.elementor-animated-content .elementor-animated-item--move-contained-left,.elementor-animated-content .elemen
2024-10-09 03:03:53 UTC	1369	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 7b 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 6f 63 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 3a 62 65 66 6f 72 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 6f 63 61 74 69 6f 6e 2d 68 65 61 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2d 2d 73 6b 69 6e 2d 61 72 63 68 69 76 65 5f 66 75 6c 6c 5f 63 6f 6e 74 65 6e 74 20 61 72 74 69 63 6c 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 74 69 63 6b 79 2d 2d 61 63 74 69 76 65 7b 7a Data Ascii: -content-area{height:400px}.elementor-location-footer:before,.elementor-location-header:before{content:"";display:table;clear:both}.elementor-posts.elementor-posts--skin-archive_full_content article.elementor-post{display:block}.elementor-sticky--active{z
2024-10-09 03:03:53 UTC	1269	IN	Data Raw: 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 72 69 67 68 74 3a 32 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 6c 6c 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 70 75 70 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a Data Ascii: og-buttons-wrapper,.elementor-popup-modal .dialog-header{display:none}.elementor-popup-modal .dialog-close-button{display:none;top:20px;margin-top:0;right:20px;opacity:1;z-index:9999;pointer-events:all}.elementor-popup-modal .dialog-close-button svg{fill:
2024-10-09 03:03:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0