Edit tour

Windows Analysis Report
http://goldtrack.co

Overview

General Information

Sample URL:	http://goldtrack.co
Analysis ID:	1544565
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6928 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3288 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5112 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://goldtrack.co" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-XP53SPCRSW&cid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101823848~101925629 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://goldtrack.coX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://goldtrack.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission

Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-XP53SPCRSW&gacid=1326231434.1730212078&gtm=45je4ao0v9134326029z89134310464za200zb9134310464&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101925629&z=1038287577
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078225&cv=11&fst=1730212078225&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212078238&cv=11&fst=1730212078238&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212183551&cv=11&fst=1730212183551&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212183563&cv=11&fst=1730212183563&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212183551&cv=11&fst=1730212183551&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=UuM5COLti7sYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0
Source: https://goldtrack.co/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11259159231?random=1730212183563&cv=11&fst=1730212183563&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z89134310464za201zb9134310464&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fgoldtrack.co%2F&label=irGgCOyVldsYEL_F5Pgp&hn=www.googleadservices.com&frm=0&tiba=GTL%20%E2%80%93%20Gold%20Track%20Logistics&value=0&bttype=purchase&npa=0&pscdl=noapi&auid=1545236548.1730212076&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&ct_cookie_present=0

Source: https://goldtrack.co/	HTTP Parser: No favicon
Source: https://www.youtube.com/watch?v=JSshAiZDdTs&t=1s	HTTP Parser: No favicon

Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="author".. found

Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found
Source: https://goldtrack.co/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:50004 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	DNS traffic detected: DNS query: goldtrack.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fonts.bunny.net
Source: global traffic	DNS traffic detected: DNS query: alexicontrol.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: x.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: themexriver.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ethers.io
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-a5meknde.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-a5mekn6z.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 14:27:56 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenkeep-alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 29 Oct 2024 14:28:05 GMTserver: LiteSpeedx-turbo-charged-by: LiteSpeedconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: hcdnDate: Tue, 29 Oct 2024 14:28:08 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingEtag: W/"999-63c84b7a-867964f3774e6481;;;"Last-Modified: Wed, 18 Jan 2023 19:41:46 GMTPanel: hpanelPlatform: hostingerX-Turbo-Charged-By: LiteSpeedalt-svc: h3=":443"; ma=86400x-hcdn-request-id: 4c21e93a5fa45737c7cc1ff50efeb603-int-edge3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 14:29:43 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: hcdnDate: Tue, 29 Oct 2024 14:29:46 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingEtag: W/"999-63c84b7a-867964f3774e6481;;;"Last-Modified: Wed, 18 Jan 2023 19:41:46 GMTPanel: hpanelPlatform: hostingerX-Turbo-Charged-By: LiteSpeedAge: 98alt-svc: h3=":443"; ma=86400x-hcdn-request-id: f45ac3301adbabfdd3566c5fb89cd89d-int-edge3
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenkeep-alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 29 Oct 2024 14:29:48 GMTserver: LiteSpeedx-turbo-charged-by: LiteSpeedconnection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://goldtrack.co"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5112 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5112 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 --field-trial-handle=1952,i,3853251287687723805,5456224541237357507,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: chromecache_910.1.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Eb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "&sig="+pd+"&ad_cpn=[AD_CPN]&id="+Hf+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Hf+"&avm="+ea+"&dc_pubid="+ea+"&dc_exteid="+zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "&uga="+tb+"&vm="+ce},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+kb+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+jd+"&ns="+Ga+"&plid="+M+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yc+"&el="+vf+"&len="+Ac+"&of="+bc+"&uga="+tb+"&vm="+ce},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+kb+"&docid="+y+"&ei="+V+"&feature="+m+"&fexp="+jd+"&ns="+Ga+"&plid="+M+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: ";etm1="+ea+";eid1="+tb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Hd+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Tb,openPopupAction:{popup:{aboutThisAdRenderer:{url:(GI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+dd,GI),trackingParams:Oa+"="}},popupType:"DIALOG"}},trackingParams:Oa+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "="},trackingParams:Oa+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Im},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Eb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:nE}]},trackingParams:Oa+"="}},adVideoId:Od,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:yi},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:ze}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Mp}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Ko, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+dd,nga),trackingParams:Oa+"="}},popupType:"DIALOG"}},trackingParams:Oa+"="}},hoverText:{runs:[{text:yi}]},trackingParams:Oa+"="}},adVideoId:Od,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:vf},associatedCompositePlayerBytesLayoutId:ze}}, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+dd,p0),trackingParams:Oa+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Oa+"="}},hoverText:{runs:[{text:Mp}]},trackingParams:Oa+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+ig+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Oa+"="},headline:{text:eb,isTemplated:!1,trackingParams:Oa+"="},description:{text:Im, equals www.youtube.com (Youtube)
Source: chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: (g.Bk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Bk(c,"www.youtube.com"),d=c.toString()):(c=pwa(d),sE(c)&&(d=c));c=new g.mM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: 0?"http":"https";this.Ca=rE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|rE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.T?d=vs(d,h,UJa):h&&(d="embedded");this.La=d;Wqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(VJa,d);!d\|\|f&&!this.T\|\|(h=d);this.playerStyle=h;this.K=g.Vb(VJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.oa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ea+"&ns="+ea+"&event="+ea+"&device="+ea+"&content_v="+y+"&el="+vf+"&ei="+V+"&devicever="+c+"&bti="+Eb+"&format="+Hd+"&break_type="+ea+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ea+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Ab+"&slot_pos="+ea+"&slot_len="+ea+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+gc+"&ad_len="+Mc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Eb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+tb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: Cr(ltb);Cr(mtb);function otb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var M=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=Pl().resolve(Ol(pB)))==null?void 0:V());V=z("enable_cairo_refresh_signature_moments_web");switch(M){case"LIKE":M="animated_like_icon_";M=V?M+(O?"dark_v4":"light_v4"):M+(O?"v2_dark":"v2_light");M={lottiePlayerProps:{animationConfig:{name:M,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: DE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: EFb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var HFb=new Nl("TOAST_MANAGER_TOKEN");var IFb=new Nl("IMAGE_ON_LOAD_HANDLER_TOKEN");var JFb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],KFb=Oj("wil_icon_max_concurrent_fetches",Infinity),KI=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Ha.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: Hf+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Hf+"&dc_pubid="+ea+"&dc_exteid="+zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: M+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":M={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}M=void 0}return M}, equals www.youtube.com (Youtube)
Source: chromecache_727.1.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),qD=["www.youtube.com","www.youtube-nocookie.com"],rD,sD=!1; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},P5b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: Od+"&aqi="+V+"&ad_rmp="+ea+"&sli="+ea}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+y+"&cid="+W+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+ equals www.youtube.com (Youtube)
Source: chromecache_1011.1.dr	String found in binary or memory: To.prototype.Ia=function(){return this.C};var qna=(new Date).getTime();var Dla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Ela=/\bocr\b/;var Gla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Nbb=0,Obb=0,Pbb=0;var bp;g.Vo=null;g.Xo=!1;g.cp=1;bp=Symbol("SIGNAL");g.dp={version:0,s_:0,Um:!1,gg:void 0,Wy:void 0,Gn:void 0,PL:0,lj:void 0,Tu:void 0,VE:!1,uP:!1,M1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: W+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Od+"&cid="+W+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+zc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+tb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: YM.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var K_b=ja(["https://www.youtube.com/iframe_api"]),ZM=function(){this.playerResolver_=Ai();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=Kg;this.playbackDurationSeconds_=0},L_b=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: Yc+"&el="+vf+"&len="+Ac+"&of="+bc+"&uga="+tb+"&vm="+ce},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+ib+"&oid="+bc+"&plid="+M+"&pltype="+nE+"&ptchn="+bc+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+kb+"&docid="+y+"&ei="+V+"&event="+ul+"&feature="+m+"&fexp="+jd+"&ns="+Ga+"&plid="+M+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yc},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_938.1.dr	String found in binary or memory: ZIa=function(a,b){if(!a.j["0"]){var c=new eG("0","fakesb",{video:new aG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new FN(new g.mM("http://www.youtube.com/videoplayback"),c,"fake"):new WN(new g.mM("http://www.youtube.com/videoplayback"),c,new qN(0,0),new qN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: ZX.prototype.navigateToAboutTheseResultsPage=function(){var a=Jb("https://www.youtube.com/howyoutubeworks/product-features/search/");a?kc(window,a,"_blank"):Dj(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var Bmb=ja(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),Cmb=Wg(Bmb),KA;function Dmb(){return KA?KA:window.lottie?KA=Promise.resolve(window.lottie):KA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_1011.1.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.dj(a,{hl:d})),this.Fd(sY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Fd(g.qY(a.errorMessage)):this.Fd(sY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.dj(c, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.firstChild);return $pc=a},{mode:Gz("kevlar_poly_si_batch_j044")?1:2});var bqc;var cqc=Kw(yv("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var dqc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.firstChild);return djc=a},{mode:1});var gjc;var hjc=function(){var a=J.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.firstChild);return gjc=a},{mode:1});var ijc;var jjc=function(){var a=J.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.firstChild);return sCc=a},{mode:1});var uCc;var U_=function(){var a=J.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return K5b=a},{mode:2});var O5b;var P5b={autoplay:!1,loop:!1},Q5b={simpleText:""},R5b=function(){var a=J.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=z("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},P5b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return kjc=a},{mode:1});var ljc;var GV=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15324_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$15324_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$15324_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.content.insertBefore(Y().content.cloneNode(!0),a.content.firstChild);return ljc=a},{mode:Gz("kevlar_poly_si_batch_j056")?1:2});var mjc;var njc=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15327_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$15327_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$15327_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_1011.1.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Sf(a.errorCode,a.severity,e,NF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Hd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ut)(),hT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Hd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_910.1.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_938.1.dr	String found in binary or memory: a.ismb);this.xq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=LP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Xn=r;MP(this,a,!0);this.Ja=new eP;g.P(this,this.Ja);q=b?b.innertubeApiKey:xs("",a.innertube_api_key);p=b?b.innertubeApiVersion:xs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:xs("",a.innertube_context_client_version);q=g.lr("INNERTUBE_API_KEY")\|\|q;p=g.lr("INNERTUBE_API_VERSION")\|\|p;l=g.lr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=XO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)

Source: chromecache_964.1.dr, chromecache_572.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_964.1.dr, chromecache_572.1.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_910.1.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_910.1.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_964.1.dr, chromecache_572.1.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_964.1.dr, chromecache_572.1.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_588.1.dr	String found in binary or memory: http://manos.malihu.gr/jquery-custom-content-scroller
Source: chromecache_910.1.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_910.1.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_910.1.dr, chromecache_550.1.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_910.1.dr, chromecache_550.1.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_910.1.dr, chromecache_550.1.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_910.1.dr, chromecache_550.1.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_910.1.dr, chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_910.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_910.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_910.1.dr	String found in binary or memory: http://www.d-project.com/
Source: chromecache_910.1.dr	String found in binary or memory: http://www.denso-wave.com/qrcode/faqpatent-e.html
Source: chromecache_970.1.dr, chromecache_625.1.dr, chromecache_742.1.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-3.0.html)
Source: chromecache_910.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_910.1.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_910.1.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_938.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_1011.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_910.1.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_910.1.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_910.1.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_910.1.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_910.1.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_910.1.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_910.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_1011.1.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_727.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_456.1.dr, chromecache_974.1.dr, chromecache_745.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_617.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_910.1.dr, chromecache_1011.1.dr, chromecache_938.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_910.1.dr	String found in binary or memory: https://angular.io/license

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
i.ytimg.com	142.250.185.182	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
rr5.sn-a5meknde.googlevideo.com	74.125.103.74	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
static.doubleclick.net	142.250.186.38	true	false	unknown
stats.g.doubleclick.net	64.233.166.156	true	false	unknown
youtube.com	142.250.184.206	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
youtube-ui.l.google.com	142.250.181.238	true	false	unknown
rr2.sn-a5mekn6z.googlevideo.com	173.194.8.167	true	false	unknown
googleads.g.doubleclick.net	142.250.186.130	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
alexicontrol.com	23.235.193.95	true	false	unknown
s-part-0016.t-0009.fb-t-msedge.net	13.107.253.44	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.129	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
analytics.google.com	216.58.206.78	true	false	unknown
td.doubleclick.net	142.250.186.66	true	false	unknown
bunnyfonts.b-cdn.net	169.150.236.104	true	false	unknown
goldtrack.co	184.94.213.95	true	false	unknown
themexriver.com	84.32.84.137	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
fonts.bunny.net	unknown	unknown	false	unknown
rr5---sn-a5meknde.googlevideo.com	unknown	unknown	false	unknown
rr2---sn-a5mekn6z.googlevideo.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
cdn.ethers.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
x.clarity.ms	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://goldtrack.co/wp-content/themes/fastrans/assets/css/transport-responsive.css?ver=6.6.2	false	unknown
https://www.youtube.com/s/player/576f07ca/player_ias.vflset/en_US/offline.js	false	unknown
https://www.youtube.com/sw.js	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/popper.min.js?ver=2.1.2	false	unknown
https://www.youtube.com/s/desktop/44c25f18/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	unknown
https://www.youtube.com/s/desktop/44c25f18/cssbin/www-main-desktop-player-skeleton.css	false	unknown
https://www.youtube.com/s/desktop/44c25f18/img/logos/favicon_144x144.png	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/jquery.mCustomScrollbar.concat.min.js?ver=2.1.2	false	unknown
https://goldtrack.co/wp-content/plugins/wordpress-popup/assets/hustle-ui/fonts/hustle-icons-font.woff2	false	unknown
https://yt3.ggpht.com/ytc/AIdro_k18TQOefWzLa5SvdJmEE0dDZLfk4am4CaTqv-UUpCP4ll3lucs6Ttsxlbnh6UOy4Y8dw=s88-c-k-c0x00ffffff-no-rj	false	unknown
https://goldtrack.co/wp-json/contact-form-7/v1/contact-forms/1838/refill	false	unknown
https://fonts.bunny.net/open-sans/files/open-sans-latin-400-normal.woff2	false	unknown
https://www.youtube.com/s/desktop/44c25f18/img/logos/favicon.ico	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.7	false	unknown
https://www.youtube.com/s/desktop/44c25f18/jsbin/www-searchbox.vflset/www-searchbox.js	false	unknown
https://www.youtube.com/s/desktop/44c25f18/cssbin/www-main-desktop-home-page-skeleton.css	false	unknown
http://goldtrack.co/	false	unknown
https://www.youtube.com/youtubei/v1/feedback?prettyPrint=false	false	unknown
https://goldtrack.co/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.8	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/jquery.magnific-popup.min.js?ver=2.1.2	false	unknown
https://goldtrack.co/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.8	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5	false	unknown
https://goldtrack.co/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3	false	unknown
https://yt3.ggpht.com/CbRhFTATvkKfDeXnNY68qQWWl-xWerKorDrhiDz9dOpYIZ8FOWMGoavs0sTtY5CXnLfW57olWg=s88-c-k-c0x00ffffff-no-rj	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/fonts/fa-light-300.ttf	false	unknown
https://www.google.com/js/th/Uo_dhVY9o5gWds10f-QE3r7w2DYPAY7ZjhqsbDUx1y0.js	false	unknown
https://www.youtube.com/cspreport/common	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.24.7	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/rbtools.min.js?ver=2.1.2	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js	false	unknown
https://goldtrack.co/wp-includes/js/underscore.min.js?ver=1.13.4	false	unknown
https://goldtrack.co/wp-json/contact-form-7/v1/contact-forms/1838/feedback/schema	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/css/updated-style.css?ver=6.6.2	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.24.7	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/cal.js?ver=1	false	unknown
https://www.youtube.com/s/desktop/44c25f18/cssbin/www-onepick.css	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.24.7	false	unknown
https://goldtrack.co/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0	false	unknown
https://goldtrack.co/wp-content/plugins/revslider/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0	false	unknown
https://goldtrack.co/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.25	false	unknown
https://www.youtube.com/s/player/576f07ca/player_ias.vflset/en_US/base.js	false	unknown
https://goldtrack.co/wp-content/uploads/2023/11/auto-car-hauling-370x290.jpg	false	unknown
https://goldtrack.co/wp-includes/js/comment-reply.min.js?ver=6.6.2	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/css/owl.carousel.min.css?ver=6.6.2	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/logistics.js?ver=1	false	unknown
https://i.ytimg.com/vi/6tqf599VMVY/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA6g910EAvXwmSV6opIx1pCK84i5w	false	unknown
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	false	unknown
https://goldtrack.co/wp-content/uploads/elementor/css/post-2230.css?ver=1714015079	false	unknown
https://goldtrack.co/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	unknown
https://www.youtube.com/app_shell	false	unknown
https://i.ytimg.com/vi/JSshAiZDdTs/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLCguVs7ilfsjx906qODUyMW-lvRqA	false	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	unknown
https://yt3.ggpht.com/j-fMmC_8njh_9emn403Mq7JnCXTqL7AEdrekQvCRK4E6qNZRu1njw0nq1Ft3hL5Lp0RW1vPBXQ=s88-c-k-c0x00ffffff-no-rj	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/js/mixitup.js?ver=2.1.2	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/fonts/fa-solid-900.ttf	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/woocommerce/woocommerce.css?ver=6.6.2	false	unknown
https://goldtrack.co/wp-content/themes/fastrans/assets/css/bootstrap.min.css?ver=6.6.2	false	unknown
https://goldtrack.co/wp-content/plugins/wordpress-popup/assets/js/front.min.js?ver=7.8.5	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_727.1.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_910.1.dr, chromecache_1011.1.dr, chromecache_938.1.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_910.1.dr	false		unknown
https://support.google.com	chromecache_910.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_910.1.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_851.1.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_617.1.dr	false	URL Reputation: safe	unknown
https://fontawesome.comhttps://fontawesome.comFont	chromecache_978.1.dr	false		unknown
http://polymer.github.io/AUTHORS.txt	chromecache_910.1.dr, chromecache_550.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_910.1.dr	false		unknown
https://fontawesome.com	chromecache_449.1.dr, chromecache_978.1.dr, chromecache_788.1.dr, chromecache_574.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_910.1.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_910.1.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_916.1.dr	false		unknown
https://admin.youtube.com	chromecache_1011.1.dr	false	URL Reputation: safe	unknown
https://www.themepunch.com/support-center	chromecache_967.1.dr	false		unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_910.1.dr, chromecache_1011.1.dr, chromecache_938.1.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_910.1.dr	false		unknown
https://i.ytimg.com/an/	chromecache_910.1.dr	false		unknown
https://www.youtube.com/api/stats/ads?ver=	chromecache_910.1.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_617.1.dr	false	URL Reputation: safe	unknown
https://github.com/microsoft/clarity	chromecache_1005.1.dr	false		unknown
https://yurt.corp.google.com	chromecache_1011.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_910.1.dr	false		unknown
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_910.1.dr	false		unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_910.1.dr	false		unknown
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_910.1.dr	false		unknown
https://www.youtube.com/generate_204?cpn=	chromecache_1011.1.dr	false		unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_910.1.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_910.1.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_910.1.dr, chromecache_550.1.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_910.1.dr	false		unknown
https://docs.google.com/picker	chromecache_910.1.dr	false		unknown
https://schema.org	chromecache_910.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/	chromecache_910.1.dr	false		unknown
http://mathiasbynens.be/	chromecache_910.1.dr	false	URL Reputation: safe	unknown
https://youtube.com/watch?v=	chromecache_910.1.dr	false		unknown
https://www.youtube.com/ptracking?ei=	chromecache_910.1.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_910.1.dr, chromecache_1011.1.dr, chromecache_938.1.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_910.1.dr	false		unknown
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_910.1.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_910.1.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.182	i.ytimg.com	United States	15169	GOOGLEUS	false
173.194.8.167	rr2.sn-a5mekn6z.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
142.250.185.118	unknown	United States	15169	GOOGLEUS	false
23.235.193.95	alexicontrol.com	United States	54641	INMOTI-1US	false
142.250.186.38	static.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
169.150.236.104	bunnyfonts.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
64.233.166.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.186.102	unknown	United States	15169	GOOGLEUS	false
84.32.84.204	unknown	Lithuania	33922	NTT-LT-ASLT	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.186.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.181.238	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
74.125.103.74	rr5.sn-a5meknde.googlevideo.com	United States	15169	GOOGLEUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
84.32.84.137	themexriver.com	Lithuania	33922	NTT-LT-ASLT	false
184.94.213.95	goldtrack.co	United States	394896	VXCHNGE-NC01US	false
13.107.253.44	s-part-0016.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
142.250.186.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.186.66	td.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544565
Start date and time:	2024-10-29 15:27:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://goldtrack.co
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@30/930@121/39

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 13:27:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9869524179003744
Encrypted:	false
SSDEEP:	48:8nOdNTVB1HLidAKZdA1FehwiZUklqehvy+3:8n4LbYy
MD5:	0F93120C6A837D7D1EFAC8D836BCAFA1
SHA1:	EF99FD74E320949F999CE64B86B9B733D8D305B4
SHA-256:	B4DDCBC4C30359FD6DB760257F76702290B1962297782A39A7D8812CCA74F371
SHA-512:	D822A73F9E35843F4A3C0AE5BA28BAE357B008425B5FDBE023045B0B225A7B5893DCE864EECB2330E45E1438795059A024D532C624E27A2F74DEF1B6A31F2565
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0>.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I]Yns....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V]Yus....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V]Yus....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V]Yus..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V]Yws...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 15:27:44.027395964 CET	192.168.2.16	1.1.1.1	0x538f	Standard query (0)	goldtrack.co	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:44.027584076 CET	192.168.2.16	1.1.1.1	0x3af3	Standard query (0)	goldtrack.co	65	IN (0x0001)	false
Oct 29, 2024 15:27:44.750401974 CET	192.168.2.16	1.1.1.1	0xee77	Standard query (0)	goldtrack.co	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:44.750534058 CET	192.168.2.16	1.1.1.1	0xc724	Standard query (0)	goldtrack.co	65	IN (0x0001)	false
Oct 29, 2024 15:27:47.953564882 CET	192.168.2.16	1.1.1.1	0x627b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:47.953723907 CET	192.168.2.16	1.1.1.1	0x350c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:55.080193043 CET	192.168.2.16	1.1.1.1	0x2015	Standard query (0)	goldtrack.co	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:55.080341101 CET	192.168.2.16	1.1.1.1	0x95e0	Standard query (0)	goldtrack.co	65	IN (0x0001)	false
Oct 29, 2024 15:27:55.498426914 CET	192.168.2.16	1.1.1.1	0x629	Standard query (0)	fonts.bunny.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:55.498859882 CET	192.168.2.16	1.1.1.1	0xc7a9	Standard query (0)	fonts.bunny.net	65	IN (0x0001)	false
Oct 29, 2024 15:27:55.503835917 CET	192.168.2.16	1.1.1.1	0x1796	Standard query (0)	alexicontrol.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:55.503937960 CET	192.168.2.16	1.1.1.1	0x2d64	Standard query (0)	alexicontrol.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:57.581820965 CET	192.168.2.16	1.1.1.1	0xac5e	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:57.582017899 CET	192.168.2.16	1.1.1.1	0xd8b0	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:57.585601091 CET	192.168.2.16	1.1.1.1	0x5e84	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:57.585741043 CET	192.168.2.16	1.1.1.1	0x1093	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:27:57.586500883 CET	192.168.2.16	1.1.1.1	0x6504	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:57.586651087 CET	192.168.2.16	1.1.1.1	0xd769	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 29, 2024 15:27:57.588409901 CET	192.168.2.16	1.1.1.1	0xe836	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:57.588584900 CET	192.168.2.16	1.1.1.1	0x50c7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:58.687292099 CET	192.168.2.16	1.1.1.1	0x1bb3	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:58.687444925 CET	192.168.2.16	1.1.1.1	0x2088	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:27:58.971476078 CET	192.168.2.16	1.1.1.1	0xfa79	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:58.971669912 CET	192.168.2.16	1.1.1.1	0xa246	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:59.227499962 CET	192.168.2.16	1.1.1.1	0xac8a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:59.227674961 CET	192.168.2.16	1.1.1.1	0x7b75	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 29, 2024 15:27:59.393970966 CET	192.168.2.16	1.1.1.1	0xc91d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:59.394213915 CET	192.168.2.16	1.1.1.1	0x17bc	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:59.403673887 CET	192.168.2.16	1.1.1.1	0xcc00	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:59.403978109 CET	192.168.2.16	1.1.1.1	0x142c	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:27:59.504338026 CET	192.168.2.16	1.1.1.1	0x9ebe	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:59.504621029 CET	192.168.2.16	1.1.1.1	0xa8cf	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 29, 2024 15:27:59.996030092 CET	192.168.2.16	1.1.1.1	0xa9f4	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:27:59.996315956 CET	192.168.2.16	1.1.1.1	0x983b	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:00.510334969 CET	192.168.2.16	1.1.1.1	0xb210	Standard query (0)	x.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:00.510495901 CET	192.168.2.16	1.1.1.1	0xe479	Standard query (0)	x.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:28:01.461199999 CET	192.168.2.16	1.1.1.1	0xb1c3	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:01.461396933 CET	192.168.2.16	1.1.1.1	0x6003	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:02.332098961 CET	192.168.2.16	1.1.1.1	0x9f60	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:02.332251072 CET	192.168.2.16	1.1.1.1	0x88f7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:28:02.616343975 CET	192.168.2.16	1.1.1.1	0x1fee	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:02.616568089 CET	192.168.2.16	1.1.1.1	0xe409	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:02.810852051 CET	192.168.2.16	1.1.1.1	0x99ae	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:02.811033010 CET	192.168.2.16	1.1.1.1	0x2453	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:28:03.497952938 CET	192.168.2.16	1.1.1.1	0xa371	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:03.498109102 CET	192.168.2.16	1.1.1.1	0xc4f7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:04.703586102 CET	192.168.2.16	1.1.1.1	0x21ff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:04.703732967 CET	192.168.2.16	1.1.1.1	0xf62b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:07.379204988 CET	192.168.2.16	1.1.1.1	0x444c	Standard query (0)	themexriver.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:07.379427910 CET	192.168.2.16	1.1.1.1	0x72b0	Standard query (0)	themexriver.com	65	IN (0x0001)	false
Oct 29, 2024 15:28:11.376312971 CET	192.168.2.16	1.1.1.1	0xf748	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:11.376462936 CET	192.168.2.16	1.1.1.1	0xbfdd	Standard query (0)	cdn.ethers.io	65	IN (0x0001)	false
Oct 29, 2024 15:28:11.377063990 CET	192.168.2.16	1.1.1.1	0xed9b	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:11.377191067 CET	192.168.2.16	1.1.1.1	0x921b	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:28:11.398597002 CET	192.168.2.16	1.1.1.1	0x44c8	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:15.205229044 CET	192.168.2.16	1.1.1.1	0x7f29	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:15.205355883 CET	192.168.2.16	1.1.1.1	0x9efa	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:28:35.521344900 CET	192.168.2.16	1.1.1.1	0x5f9c	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:28:56.453313112 CET	192.168.2.16	1.1.1.1	0x5596	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:10.309978962 CET	192.168.2.16	1.1.1.1	0x5ab3	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:10.310267925 CET	192.168.2.16	1.1.1.1	0x6b6e	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:10.454572916 CET	192.168.2.16	1.1.1.1	0x3f63	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:10.454726934 CET	192.168.2.16	1.1.1.1	0xdd0b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:10.594176054 CET	192.168.2.16	1.1.1.1	0x3cf4	Standard query (0)	x.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:10.596290112 CET	192.168.2.16	1.1.1.1	0x2b3b	Standard query (0)	x.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:29:11.514436007 CET	192.168.2.16	1.1.1.1	0x6c8d	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:11.514621973 CET	192.168.2.16	1.1.1.1	0x5ad9	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:11.530880928 CET	192.168.2.16	1.1.1.1	0x5997	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:11.531137943 CET	192.168.2.16	1.1.1.1	0x6e5a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:12.071419954 CET	192.168.2.16	1.1.1.1	0xb261	Standard query (0)	rr5---sn-a5meknde.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:12.071688890 CET	192.168.2.16	1.1.1.1	0xf342	Standard query (0)	rr5---sn-a5meknde.googlevideo.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:12.676858902 CET	192.168.2.16	1.1.1.1	0x255c	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:12.677093983 CET	192.168.2.16	1.1.1.1	0x9044	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:12.859889030 CET	192.168.2.16	1.1.1.1	0xccd3	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:12.860029936 CET	192.168.2.16	1.1.1.1	0x68f9	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:19.964159012 CET	192.168.2.16	1.1.1.1	0x27eb	Standard query (0)	rr2---sn-a5mekn6z.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:19.964332104 CET	192.168.2.16	1.1.1.1	0xb9a	Standard query (0)	rr2---sn-a5mekn6z.googlevideo.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:20.063359976 CET	192.168.2.16	1.1.1.1	0xc983	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:20.063584089 CET	192.168.2.16	1.1.1.1	0xbf8a	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:21.249470949 CET	192.168.2.16	1.1.1.1	0x3a31	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:21.249627113 CET	192.168.2.16	1.1.1.1	0xad87	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:21.917089939 CET	192.168.2.16	1.1.1.1	0xd327	Standard query (0)	goldtrack.co	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:21.917141914 CET	192.168.2.16	1.1.1.1	0xb3ab	Standard query (0)	goldtrack.co	65	IN (0x0001)	false
Oct 29, 2024 15:29:24.278542042 CET	192.168.2.16	1.1.1.1	0x3f0c	Standard query (0)	rr2---sn-a5mekn6z.googlevideo.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:24.279629946 CET	192.168.2.16	1.1.1.1	0xd585	Standard query (0)	rr2---sn-a5mekn6z.googlevideo.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:25.330075979 CET	192.168.2.16	1.1.1.1	0xf23c	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:25.330254078 CET	192.168.2.16	1.1.1.1	0x9458	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:25.515651941 CET	192.168.2.16	1.1.1.1	0x7d80	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:25.515877008 CET	192.168.2.16	1.1.1.1	0x383e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:25.594505072 CET	192.168.2.16	1.1.1.1	0x13d	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:25.594703913 CET	192.168.2.16	1.1.1.1	0x5835	Standard query (0)	youtube.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:26.055823088 CET	192.168.2.16	1.1.1.1	0xa9a6	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:26.056037903 CET	192.168.2.16	1.1.1.1	0xbd51	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:26.578437090 CET	192.168.2.16	1.1.1.1	0x487	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:26.707289934 CET	192.168.2.16	1.1.1.1	0xaee3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:26.707521915 CET	192.168.2.16	1.1.1.1	0x9340	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:26.769165039 CET	192.168.2.16	1.1.1.1	0x2269	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:26.769356012 CET	192.168.2.16	1.1.1.1	0xf017	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:27.277633905 CET	192.168.2.16	1.1.1.1	0x9d1e	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:27.277782917 CET	192.168.2.16	1.1.1.1	0xd3e7	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:27.896800995 CET	192.168.2.16	1.1.1.1	0xb28b	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:27.896971941 CET	192.168.2.16	1.1.1.1	0x2dd8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:27.931138039 CET	192.168.2.16	1.1.1.1	0x992b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:27.931272984 CET	192.168.2.16	1.1.1.1	0xbcf6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:44.507508993 CET	192.168.2.16	1.1.1.1	0xd080	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:44.507736921 CET	192.168.2.16	1.1.1.1	0x6663	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:29:44.762399912 CET	192.168.2.16	1.1.1.1	0x5384	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:44.762557983 CET	192.168.2.16	1.1.1.1	0x9f74	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:45.372594118 CET	192.168.2.16	1.1.1.1	0x1c18	Standard query (0)	themexriver.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:45.372761965 CET	192.168.2.16	1.1.1.1	0xe0ee	Standard query (0)	themexriver.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:45.548702955 CET	192.168.2.16	1.1.1.1	0xc818	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:45.548865080 CET	192.168.2.16	1.1.1.1	0x3e92	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 29, 2024 15:29:45.975192070 CET	192.168.2.16	1.1.1.1	0x7b20	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:45.975536108 CET	192.168.2.16	1.1.1.1	0x47bb	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 29, 2024 15:29:46.649600029 CET	192.168.2.16	1.1.1.1	0x2b4a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:46.649852991 CET	192.168.2.16	1.1.1.1	0xdc15	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:48.067954063 CET	192.168.2.16	1.1.1.1	0x7cb6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:48.068208933 CET	192.168.2.16	1.1.1.1	0xcc9a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 29, 2024 15:29:48.404203892 CET	192.168.2.16	1.1.1.1	0x87c6	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false
Oct 29, 2024 15:29:48.404351950 CET	192.168.2.16	1.1.1.1	0x75ef	Standard query (0)	cdn.ethers.io	65	IN (0x0001)	false
Oct 29, 2024 15:29:48.433792114 CET	192.168.2.16	1.1.1.1	0x9714	Standard query (0)	cdn.ethers.io	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 15:27:44.059613943 CET	427	OUT	GET / HTTP/1.1 Host: goldtrack.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 29, 2024 15:27:44.741828918 CET	1027	IN	HTTP/1.1 301 Moved Permanently keep-alive: timeout=5, max=100 content-type: text/html content-length: 795 date: Tue, 29 Oct 2024 14:27:44 GMT server: LiteSpeed location: https://goldtrack.co/ x-turbo-charged-by: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 15:27:59.624439955 CET	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Oct 29, 2024 15:28:44.670658112 CET	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://goldtrack.co

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1000

Chrome Cache Entry: 1001

Chrome Cache Entry: 1002

Chrome Cache Entry: 1003

Chrome Cache Entry: 1004

Chrome Cache Entry: 1005

Chrome Cache Entry: 1006

Chrome Cache Entry: 1007

Chrome Cache Entry: 1008

Chrome Cache Entry: 1009

Chrome Cache Entry: 1010

Chrome Cache Entry: 1011

Chrome Cache Entry: 1012

Chrome Cache Entry: 1013

Chrome Cache Entry: 1014

Chrome Cache Entry: 1015

Chrome Cache Entry: 1016

Chrome Cache Entry: 1017

Chrome Cache Entry: 1018

Chrome Cache Entry: 1019

Chrome Cache Entry: 1020

Windows Analysis Report
http://goldtrack.co

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:45 UTC	655	OUT	GET / HTTP/1.1 Host: goldtrack.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:45 UTC	524	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 x-powered-by: PHP/8.3.12 content-type: text/html; charset=UTF-8 link: <https://goldtrack.co/wp-json/>; rel="https://api.w.org/" link: <https://goldtrack.co/wp-json/wp/v2/pages/2230>; rel="alternate"; title="JSON"; type="application/json" link: <https://goldtrack.co/>; rel=shortlink etag: "163-1730117566;;;" x-litespeed-cache: hit transfer-encoding: chunked date: Tue, 29 Oct 2024 14:27:45 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:45 UTC	15860	IN	Data Raw: 31 30 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6e 6f 2d 73 76 67 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 09 3c 21 2d 2d 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 74 61 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 21 2d 2d 20 46 6f 72 20 49 45 20 2d 2d 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 Data Ascii: 10000<!DOCTYPE html><html lang="en-US" class="no-js no-svg"><head><meta charset="UTF-8">... responsive meta --><meta name="viewport" content="width=device-width, initial-scale=1">... For IE --> <meta http-equiv="X-UA-Compatible" content
2024-10-29 14:27:45 UTC	5499	IN	Data Raw: 61 63 6b 2e 63 6f 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 2f 61 73 73 65 74 73 2f 63 73 73 2f 66 72 6f 6e 74 65 6e 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 31 35 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 67 6c 6f 62 61 6c 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 67 6f 6c 64 74 72 61 63 6b 2e 63 6f 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 67 6c 6f 62 61 6c 2e 63 73 73 3f 76 65 72 3d 31 37 31 34 30 31 30 30 34 38 27 20 74 79 70 65 3d 27 74 65 Data Ascii: ack.co/wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.15.0' type='text/css' media='all' /><link rel='stylesheet' id='elementor-global-css' href='https://goldtrack.co/wp-content/uploads/elementor/css/global.css?ver=1714010048' type='te
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 61 73 74 72 61 6e 73 2d 74 68 65 6d 65 2d 66 6f 6e 74 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 6f 70 70 69 6e 73 25 33 41 31 30 30 25 32 43 32 30 30 25 32 43 33 30 30 25 32 43 34 30 30 25 32 43 36 30 30 25 32 43 35 30 30 25 32 43 37 30 30 25 37 43 52 6f 62 6f 74 6f 25 33 41 31 30 30 25 32 43 33 30 30 25 32 43 34 30 30 25 32 43 35 30 30 25 32 43 37 30 30 26 23 30 33 38 3b 73 75 62 73 65 74 3d 6c 61 74 69 6e 25 32 43 6c 61 74 69 6e 2d 65 78 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 Data Ascii: media='all' /><link rel='stylesheet' id='fastrans-theme-fonts-css' href='https://fonts.googleapis.com/css?family=Poppins%3A100%2C200%2C300%2C400%2C600%2C500%2C700%7CRoboto%3A100%2C300%2C400%2C500%2C700&subset=latin%2Clatin-ext' type='text/css' medi
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 31 20 2e 68 75 73 74 6c 65 2d 6c 61 79 6f 75 74 20 2e 68 75 73 74 6c 65 2d 67 72 6f 75 70 2d 63 6f 6e 74 65 6e 74 20 70 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 22 66 6f 72 6d 69 6e 61 74 6f 72 2d 22 5d 29 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 7d 7d 2e 68 75 73 74 6c 65 2d 75 69 2e 6d 6f 64 75 6c 65 5f 69 64 5f 31 20 2e 68 75 73 74 6c 65 2d 6c 61 79 6f 75 74 20 2e 68 75 73 74 6c 65 2d 67 72 6f 75 70 2d 63 6f 6e 74 65 6e 74 20 68 31 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 22 66 6f 72 6d 69 6e 61 74 6f 72 2d 22 5d 29 20 7b 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 20 23 41 44 42 35 42 37 3b 66 6f 6e 74 3a 20 37 30 30 20 32 38 70 78 2f 31 2e 34 65 6d 20 4f 70 65 6e 20 53 61 6e 73 3b Data Ascii: 1 .hustle-layout .hustle-group-content p:not([class="forminator-"]):last-child {margin-bottom: 0;}}.hustle-ui.module_id_1 .hustle-layout .hustle-group-content h1:not([class="forminator-"]) {margin: 0 0 10px;color: #ADB5B7;font: 700 28px/1.4em Open Sans;
2024-10-29 14:27:45 UTC	11416	IN	Data Raw: 6c 61 73 73 3d 22 68 76 72 2d 75 6e 64 65 72 6c 69 6e 65 2d 66 72 6f 6d 2d 6c 65 66 74 31 22 20 64 61 74 61 2d 73 63 72 6f 6c 6c 20 64 61 74 61 2d 6f 70 74 69 6f 6e 73 3d 22 65 61 73 69 6e 67 3a 20 65 61 73 65 4f 75 74 51 75 61 72 74 22 3e 43 6f 6e 74 61 63 74 20 55 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 3c 2f 75 6c 3e 0d 0a 09 09 09 09 09 09 09 3c 2f 6e 61 76 3e 0d 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 3c 21 2d 2d 20 2f 4d 6f 62 69 6c 65 2d 4d 65 6e 75 20 2d 2d 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 68 65 61 64 65 72 3e 0d 0a 09 3c 21 2d 2d 20 45 6e 64 20 6f 66 20 68 65 61 64 65 72 20 73 65 63 74 69 Data Ascii: lass="hvr-underline-from-left1" data-scroll data-options="easing: easeOutQuart">Contact Us</a></li></ul></nav></div></div>... /Mobile-Menu --></div></div></div></header>... End of header secti
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 0d 0a 31 30 30 30 30 0d 0a 30 70 78 3b 22 0a 09 09 09 09 09 09 09 09 64 61 74 61 2d 66 72 61 6d 65 5f 30 3d 22 78 3a 30 2c 30 2c 30 70 78 2c 30 70 78 3b 79 3a 30 2c 30 2c 30 70 78 2c 30 70 78 3b 72 58 3a 37 30 64 65 67 3b 6f 5a 3a 2d 35 30 3b 22 0a 09 09 09 09 09 09 09 09 64 61 74 61 2d 66 72 61 6d 65 5f 31 3d 22 78 3a 30 2c 30 2c 30 70 78 2c 30 70 78 3b 79 3a 30 2c 30 2c 30 70 78 2c 30 70 78 3b 6f 5a 3a 2d 35 30 3b 65 3a 70 6f 77 65 72 34 2e 69 6e 4f 75 74 3b 73 70 3a 31 37 35 30 3b 22 0a 09 09 09 09 09 09 09 09 64 61 74 61 2d 66 72 61 6d 65 5f 39 39 39 3d 22 6f 3a 30 3b 73 74 3a 77 3b 22 0a 09 09 09 09 09 09 09 09 73 74 79 6c 65 3d 22 7a 2d 69 6e 64 65 78 3a 31 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 49 6e 74 65 72 27 3b 22 0a 09 09 09 09 09 09 09 Data Ascii: 100000px;"data-frame_0="x:0,0,0px,0px;y:0,0,0px,0px;rX:70deg;oZ:-50;"data-frame_1="x:0,0,0px,0px;y:0,0,0px,0px;oZ:-50;e:power4.inOut;sp:1750;"data-frame_999="o:0;st:w;"style="z-index:10;font-family:'Inter';"
2024-10-29 14:27:45 UTC	4904	IN	Data Raw: 20 73 74 79 6c 65 2d 74 77 6f 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 09 09 09 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 33 20 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 36 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 74 2d 66 75 6e 66 61 63 74 2d 69 6e 6e 65 72 2d 69 74 65 6d 73 20 73 74 79 6c 65 2d 74 77 6f 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c 65 2d 6f 6e 65 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 6c Data Ascii: style-two position-relative"><div class="row"> <div class="col-lg-3 col-md-6 col-sm-6"><div class="ft-funfact-inner-items style-two text-center"><div class="circle-one"></div><div class="circl
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 57 65 20 74 61 6b 65 20 63 61 72 65 20 6f 66 20 74 68 65 20 70 61 70 65 72 77 6f 72 6b 2c 20 73 6f 20 79 6f 75 20 63 61 6e 20 66 6f 63 75 73 20 6f 6e 20 77 68 61 74 20 79 6f 75 20 64 6f 20 62 65 73 74 20 2d 20 64 72 69 76 69 6e 67 2e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 4f 75 72 20 61 64 76 61 6e 63 65 64 20 74 65 63 68 6e 6f 6c 6f 67 79 20 68 65 6c 70 73 20 79 6f 75 20 6f 70 74 69 6d 69 7a 65 20 72 6f 75 74 Data Ascii: <li>We take care of the paperwork, so you can focus on what you do best - driving.</li> <li>Our advanced technology helps you optimize rout
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 69 6f 6e 5f 70 61 64 64 69 6e 67 5f 74 61 62 6c 65 74 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 75 6e 69 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 70 78 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 74 6f 70 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 72 69 67 68 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 62 6f 74 74 6f 6d 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6c 65 66 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 4c 69 6e 6b 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 7d 2c 26 71 75 6f 74 3b 63 61 70 74 69 6f 6e 5f 70 61 64 64 69 6e 67 5f 6d 6f 62 69 6c 65 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 75 6e 69 74 26 71 Data Ascii: ion_padding_tablet":{"unit":"px","top":"","right":"","bottom":"","left":"","isLinked":true},"caption_padding_mobile":{"unit&q
2024-10-29 14:27:45 UTC	16384	IN	Data Raw: 61 63 6b 2e 63 6f 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 69 64 67 65 74 2d 74 65 78 74 2d 65 64 69 74 6f 72 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 32 34 2e 37 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 69 64 67 65 74 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 67 6f 6c 64 74 72 61 63 6b 2e 63 6f 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 69 64 67 65 74 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 Data Ascii: ack.co/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.24.7' type='text/css' media='all' /><link rel='stylesheet' id='widget-social-icons-css' href='https://goldtrack.co/wp-content/plugins/elementor/assets/css/widget-social-icons

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:46 UTC	605	OUT	GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.44 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:46 UTC	351	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:46 GMT content-type: text/css last-modified: Mon, 16 Sep 2024 15:31:28 GMT accept-ranges: bytes content-length: 75973 date: Tue, 29 Oct 2024 14:27:46 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:46 UTC	16384	IN	Data Raw: 2f 2a 20 4e 61 76 69 67 61 74 69 6f 6e 20 4d 65 6e 75 20 43 53 53 20 2a 2f 0a 0a 75 6c 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 2c 0a 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 20 6c 69 2c 0a 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 20 75 6c 20 7b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 20 6c 69 2e 6d 65 6e 75 2d 69 74 65 6d 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 2e 68 66 65 2d 66 6c 79 6f 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 20 6c 69 2e 6d 65 6e 75 2d 69 74 65 6d 20 7b 0a Data Ascii: /* Navigation Menu CSS */ul.hfe-nav-menu,.hfe-nav-menu li,.hfe-nav-menu ul { list-style: none !important; margin: 0; padding: 0;}.hfe-nav-menu li.menu-item { position: relative;}.hfe-flyout-container .hfe-nav-menu li.menu-item {
2024-10-29 14:27:46 UTC	6016	IN	Data Raw: 5f 75 6e 64 65 72 6c 69 6e 65 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 62 65 66 6f 72 65 2c 20 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 75 6e 64 65 72 6c 69 6e 65 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 61 66 74 65 72 2c 20 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 6f 76 65 72 6c 69 6e 65 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 62 65 66 6f 72 65 2c 20 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 6f 76 65 72 6c 69 6e 65 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 68 65 69 Data Ascii: _underline .menu-item.parent a.hfe-menu-item:before, .hfe-pointer__underline .menu-item.parent a.hfe-menu-item:after, .hfe-pointer__overline .menu-item.parent a.hfe-menu-item:before, .hfe-pointer__overline .menu-item.parent a.hfe-menu-item:after { hei
2024-10-29 14:27:46 UTC	16384	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 0a 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 64 6f 75 62 6c 65 2d 6c 69 6e 65 2e 68 66 65 2d 61 6e 69 6d 61 74 69 6f 6e 5f 5f 73 6c 69 64 65 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 6e 6f 74 28 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 29 3a 6e 6f 74 28 2e 68 69 67 68 6c 69 67 68 74 65 64 29 3a 61 66 74 65 72 2c 20 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 75 6e 64 65 72 6c 69 6e 65 2e 68 66 Data Ascii: enu-item.parent a.hfe-menu-item:after { content: ''; bottom: 0;}.hfe-pointer__double-line.hfe-animation__slide .menu-item.parent a.hfe-menu-item:not(:hover):not(:focus):not(.current-menu-item):not(.highlighted):after, .hfe-pointer__underline.hf
2024-10-29 14:27:46 UTC	16384	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 5f 5f 67 72 6f 77 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0a 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 74 65 78 74 2e 68 66 65 2d 61 6e 69 6d 61 74 69 6f 6e 5f 5f 67 72 6f 77 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 0a 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 68 66 65 2d 66 6c 79 6f 75 74 2d 63 6c 6f 73 65 2c 0a 2e 68 66 65 2d 66 6c 79 6f 75 74 2d Data Ascii: nimation__grow .menu-item.parent a.hfe-menu-item.elementor-button:hover,.hfe-pointer__text.hfe-animation__grow .menu-item.parent a.hfe-menu-item.elementor-button:focus{ -webkit-transform: none; transform: none;}.hfe-flyout-close,.hfe-flyout-
2024-10-29 14:27:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 6f 62 69 6c 65 20 2e 68 66 65 2d 61 63 74 69 76 65 2d 6d 65 6e 75 2e 68 66 65 2d 61 63 74 69 76 65 2d 6d 65 6e 75 2d 66 75 6c 6c 2d 77 69 64 74 68 20 2b 20 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 6c 61 79 6f 75 74 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 68 66 65 2d 6e 61 76 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 68 66 65 2d 6e Data Ascii: visibility: visible; opacity: 1; height: auto; } .hfe-nav-menu__breakpoint-mobile .hfe-active-menu.hfe-active-menu-full-width + .hfe-nav-menu__layout-horizontal .hfe-nav-menu { position: relative; } .hfe-n
2024-10-29 14:27:46 UTC	4421	IN	Data Raw: 29 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 6e 6f 74 28 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 29 3a 6e 6f 74 28 2e 68 69 67 68 6c 69 67 68 74 65 64 29 3a 61 66 74 65 72 2c 20 2e 68 66 65 2d 70 6f 69 6e 74 65 72 5f 5f 6f 76 65 72 6c 69 6e 65 2e 68 66 65 2d 61 6e 69 6d 61 74 69 6f 6e 5f 5f 64 72 6f 70 2d 69 6e 20 2e 6d 65 6e 75 2d 69 74 65 6d 2e 70 61 72 65 6e 74 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 6e 6f 74 28 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 29 3a 6e 6f 74 28 2e 68 69 67 68 6c 69 67 68 74 65 64 29 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 20 20 20 Data Ascii: ):not(:focus):not(.current-menu-item):not(.highlighted):after, .hfe-pointer__overline.hfe-animation__drop-in .menu-item.parent.current-menu-item a.hfe-menu-item:not(:hover):not(:focus):not(.current-menu-item):not(.highlighted):after { bottom: 0px;

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:46 UTC	590	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.8 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:46 UTC	350	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:46 GMT content-type: text/css last-modified: Thu, 16 Nov 2023 07:57:00 GMT accept-ranges: bytes content-length: 2894 date: Tue, 29 Oct 2024 14:27:46 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:46 UTC	2894	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:46 UTC	566	OUT	GET /wp-includes/css/dashicons.min.css?ver=6.6.2 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:46 UTC	351	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:46 GMT content-type: text/css last-modified: Thu, 04 Mar 2021 07:46:22 GMT accept-ranges: bytes content-length: 59016 date: Tue, 29 Oct 2024 14:27:46 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2024-10-29 14:27:47 UTC	6016	IN	Data Raw: 49 2f 65 57 78 7a 68 33 4f 6e 33 35 74 2b 7a 39 39 37 38 65 39 45 50 6e 35 65 79 34 75 63 4c 37 2f 6d 38 69 4f 35 37 58 2f 35 39 50 77 56 70 30 7a 6b 31 73 37 57 6d 56 6c 74 6b 2f 50 48 4a 45 66 57 76 6f 69 79 67 6e 6d 78 38 41 4a 4a 45 6c 46 4d 30 5a 4c 37 57 38 2f 37 6b 2b 65 67 77 73 55 50 76 33 2f 54 34 71 7a 33 76 4a 2f 6d 54 49 7a 6f 34 50 43 52 6d 2b 54 53 38 34 66 47 6b 4c 64 34 4a 6d 4e 69 41 46 69 35 42 47 31 73 78 4f 30 6a 32 46 68 41 47 46 37 64 6a 41 52 79 4f 4e 71 6b 39 78 50 41 62 32 36 65 44 6f 68 64 73 33 56 61 71 35 59 4e 4d 45 43 34 65 44 2f 4b 51 44 47 32 39 57 6d 6c 69 6c 67 73 4c 4b 34 76 76 76 73 73 4b 30 38 65 58 66 47 38 4f 63 78 50 37 33 69 6a 47 39 52 45 78 46 6a 73 63 44 4b 36 68 34 62 58 65 58 72 2f 48 7a 4d 73 4a 65 47 70 70 Data Ascii: I/eWxzh3On35t+z9978e9EPn5ey4ucL7/m8iO57X/59PwVp0zk1s7WmVltk/PHJEfWvoiygnmx8AJJElFM0ZL7W8/7k+egwsUPv3/T4qz3vJ/mTIzo4PCRm+TS84fGkLd4JmNiAFi5BG1sxO0j2FhAGF7djARyONqk9xPAb26eDohds3Vaq5YNMEC4eD/KQDG29WmlilgsLK4vvvssK08eXfG8OcxP73ijG9RExFjscDK6h4bXeXr/HzMsJeGpp
2024-10-29 14:27:47 UTC	16384	IN	Data Raw: 4a 5a 4f 66 36 48 5a 65 56 4c 55 31 63 63 57 31 68 46 61 58 33 68 4d 31 63 55 6e 75 6b 32 4f 51 39 50 2b 2b 31 50 30 61 63 4b 35 45 76 61 6d 32 77 77 6e 47 77 57 36 6a 57 53 66 54 67 6d 68 2f 31 68 2f 70 4f 37 70 32 57 2f 36 44 75 79 4b 4a 59 42 53 32 61 32 76 65 2b 5a 4d 4c 6a 41 43 41 62 32 75 2f 6c 44 64 72 51 51 2f 2f 4d 30 59 6c 37 43 48 78 77 31 55 7a 69 68 5a 6f 34 70 6e 34 32 4f 51 36 42 56 6e 6f 68 49 4c 37 51 78 32 34 49 4f 47 33 2f 37 74 34 34 4e 76 2b 7a 62 55 6d 39 7a 37 6d 2b 69 6e 69 46 53 71 45 54 74 30 49 4f 37 45 42 52 78 76 55 69 44 47 49 49 67 35 76 62 45 53 5a 48 6d 76 63 54 4b 37 59 64 73 62 32 5a 4d 4e 6a 34 39 57 4e 75 34 4b 6c 68 63 33 31 68 2f 4d 72 37 47 75 61 62 72 73 57 76 37 72 48 6c 39 63 6e 6f 36 5a 72 77 42 2b 4a 4c 4c 63 Data Ascii: JZOf6HZeVLU1ccW1hFaX3hM1cUnuk2OQ9P++1P0acK5Evam2wwnGwW6jWSfTgmh/1h/pO7p2W/6DuyKJYBS2a2ve+ZMLjACAb2u/lDdrQQ//M0Yl7CHxw1UzihZo4pn42OQ6BVnohIL7Qx24IOG3/7t44Nv+zbUm9z7m+iniFSqETt0IO7EBRxvUiDGIIg5vbESZHmvcTK7Ydsb2ZMNj49WNu4Klhc31h/Mr7GuabrsWv7rHl9cno6ZrwB+JLLc
2024-10-29 14:27:47 UTC	16384	IN	Data Raw: 46 45 4b 55 53 35 52 59 46 47 61 55 64 35 53 55 6c 4a 32 55 74 78 54 59 6c 50 34 56 44 4a 55 57 46 52 71 56 4b 41 41 41 48 69 63 59 32 42 6b 59 47 41 4d 59 5a 6a 43 49 4d 67 41 41 6b 78 41 7a 41 57 45 44 41 7a 2f 77 58 77 47 41 43 45 39 41 68 45 41 65 4a 78 74 6b 45 31 4f 77 7a 41 51 68 56 2f 36 68 32 67 6c 56 49 47 45 78 4d 35 69 77 51 61 52 2f 69 79 36 36 41 48 61 66 52 66 5a 70 36 6e 54 70 45 72 69 79 48 45 72 39 51 4b 63 67 44 4e 77 42 6b 37 41 6b 6a 4e 77 46 46 37 43 4b 41 75 6f 52 37 4b 2f 65 66 50 47 49 78 76 41 47 4a 2f 77 55 43 38 50 31 38 31 65 72 77 36 75 6d 50 31 79 6c 7a 51 57 37 70 45 66 68 50 73 59 34 56 46 34 51 50 31 46 65 49 68 6e 4c 49 52 48 75 45 50 49 47 37 78 65 66 64 73 74 6e 48 41 48 4e 33 67 56 37 6c 4a 2f 45 2b 36 52 33 34 58 37 Data Ascii: FEKUS5RYFGaUd5SUlJ2UtxTYlP4VDJUWFRqVKAAAHicY2BkYGAMYZjCIMgAAkxAzAWEDAz/wXwGACE9AhEAeJxtkE1OwzAQhV/6h2glVIGExM5iwQaR/iy66AHafRfZp6nTpEriyHEr9QKcgDNwBk7AkjNwFF7CKAuoR7K/efPGIxvAGJ/wUC8P181erw6umP1ylzQW7pEfhPsY4VF4QP1FeIhnLIRHuEPIG7xefdstnHAHN3gV7lJ/E+6R34X7
2024-10-29 14:27:47 UTC	3848	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 33 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 70 72 69 76 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 34 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 70 72 6f 64 75 63 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 31 32 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 72 61 6e 64 6f 6d 69 7a 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 30 33 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 72 65 64 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 35 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 72 65 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 32 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b Data Ascii: fore{content:"\f193"}.dashicons-privacy:before{content:"\f194"}.dashicons-products:before{content:"\f312"}.dashicons-randomize:before{content:"\f503"}.dashicons-reddit:before{content:"\f195"}.dashicons-redo:before{content:"\f172"}.dashicons-remove:before{

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:46 UTC	608	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.31.0 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:46 UTC	351	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:46 GMT content-type: text/css last-modified: Sun, 25 Aug 2024 17:59:38 GMT accept-ranges: bytes content-length: 19862 date: Tue, 29 Oct 2024 14:27:46 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 73 20 2d 20 76 35 2e 33 31 2e 30 20 2d 20 32 30 2d 30 38 2d 32 30 32 34 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 33 31 2e 30 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 33 31 2e 30 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 35 2e 33 31 2e 30 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 Data Ascii: /! elementor-icons - v5.31.0 - 20-08-2024 /@font-face{font-family:eicons;src:url(../fonts/eicons.eot?5.31.0);src:url(../fonts/eicons.eot?5.31.0#iefix) format("embedded-opentype"),url(../fonts/eicons.woff2?5.31.0) format("woff2"),url(../fonts/eicons.wof
2024-10-29 14:27:46 UTC	3478	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 65 39 37 39 22 7d 2e 65 69 63 6f 6e 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 61 22 7d 2e 65 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 62 22 7d 2e 65 69 63 6f 6e 2d 74 79 70 6f 67 72 61 70 68 79 2d 31 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 63 22 7d 2e 65 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 64 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 37 65 22 7d 2e 65 69 63 6f 6e 2d 64 65 76 69 63 65 2d 77 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ntent:"\e979"}.eicon-global-colors:before{content:"\e97a"}.eicon-globe:before{content:"\e97b"}.eicon-typography-1:before{content:"\e97c"}.eicon-background:before{content:"\e97d"}.eicon-device-responsive:before{content:"\e97e"}.eicon-device-wide:before{con

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:47 UTC	581	OUT	GET /wp-content/uploads/elementor/css/post-5.css?ver=1714010046 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:47 UTC	350	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:47 GMT content-type: text/css last-modified: Thu, 25 Apr 2024 01:54:06 GMT accept-ranges: bytes content-length: 1168 date: Tue, 29 Oct 2024 14:27:47 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:47 UTC	1168	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 35 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 36 45 43 31 45 34 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 35 34 35 39 35 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 37 41 37 41 37 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 36 31 43 45 37 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d Data Ascii: .elementor-kit-5{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-typography-primary-font-family:"Roboto";--e-global-typography-primary-font-weight:600;--e-global-

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:47 UTC	594	OUT	GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css?ver=3.15.0 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:47 UTC	352	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:47 GMT content-type: text/css last-modified: Tue, 07 Nov 2023 20:33:57 GMT accept-ranges: bytes content-length: 458836 date: Tue, 29 Oct 2024 14:27:47 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 31 35 2e 30 20 2d 20 33 31 2d 30 37 2d 32 30 32 33 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 69 6e 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 6f 75 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d Data Ascii: /! elementor-pro - v3.15.0 - 31-07-2023 /@charset "UTF-8";.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg,.elementor-bg-transform-zoom-out .elementor-bg{transform:scale(1.2)}.elementor-bg-
2024-10-29 14:27:48 UTC	6016	IN	Data Raw: 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 29 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 2d 6c 61 79 6f 75 74 2d 61 75 74 6f 20 2e 65 2d 61 74 63 2d 71 74 79 2d 62 75 74 74 6f 6e 2d 68 6f 6c 64 65 72 2c 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 65 6c 65 6d 65 6e 74 6f Data Ascii: oocommerce div.product .elementor-widget-wc-add-to-cart).elementor-add-to-cart--layout-auto .e-atc-qty-button-holder,:is(.elementor-widget-woocommerce-product-add-to-cart,.woocommerce div.product .elementor-widget-woocommerce-product-add-to-cart,.elemento
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 29 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 63 6c 61 73 73 2a 3d 22 2d 2d 6c 61 79 6f 75 74 2d 73 74 61 63 6b 65 64 22 5d 20 2e 65 2d 61 74 63 2d 71 74 79 2d 62 75 74 74 6f 6e 2d 68 6f 6c 64 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 Data Ascii: roduct .elementor-widget-wc-add-to-cart).elementor-add-to-cart--align-left[class*="--layout-stacked"] .e-atc-qty-button-holder{justify-content:flex-start;text-align:left}:is(.elementor-widget-woocommerce-product-add-to-cart,.woocommerce div.product .eleme
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 29 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 77 69 64 65 73 63 72 65 65 6e 2d 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 66 6f 72 6d 2e 63 61 72 74 20 62 75 74 74 6f 6e 2c 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 Data Ascii: rce div.product .elementor-widget-woocommerce-product-add-to-cart,.elementor-widget-wc-add-to-cart,.woocommerce div.product .elementor-widget-wc-add-to-cart).elementor-add-to-cart-widescreen--align-center form.cart button,:is(.elementor-widget-woocommerce
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 74 7d 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 29 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 74 61 62 6c 65 74 5f 65 78 74 Data Ascii: t}:is(.elementor-widget-woocommerce-product-add-to-cart,.woocommerce div.product .elementor-widget-woocommerce-product-add-to-cart,.elementor-widget-wc-add-to-cart,.woocommerce div.product .elementor-widget-wc-add-to-cart).elementor-add-to-cart-tablet_ext
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 62 6c 65 74 2d 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 66 6f 72 6d 2e 63 61 72 74 20 2e 62 75 74 74 6f 6e 2c 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 64 75 63 74 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 Data Ascii: blet--align-center form.cart .button,:is(.elementor-widget-woocommerce-product-add-to-cart,.woocommerce div.product .elementor-widget-woocommerce-product-add-to-cart,.elementor-widget-wc-add-to-cart,.woocommerce div.product .elementor-widget-wc-add-to-car
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 64 64 2d 74 6f 2d 63 61 72 74 29 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 6d 6f 62 69 6c 65 2d 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 63 6c 61 73 73 2a 3d 22 2d 2d 6c 61 79 6f 75 74 2d 73 74 61 63 6b 65 64 22 5d 20 2e 65 2d 61 74 63 2d 71 74 79 2d 62 75 74 74 6f 6e 2d 68 6f 6c 64 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 3a 69 73 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 Data Ascii: entor-widget-wc-add-to-cart,.woocommerce div.product .elementor-widget-wc-add-to-cart).elementor-add-to-cart-mobile--align-left[class*="--layout-stacked"] .e-atc-qty-button-holder{justify-content:flex-start;text-align:left}:is(.elementor-widget-woocommerc
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 64 75 63 74 73 2d 67 72 69 64 20 2e 72 65 6c 61 74 65 64 2e 70 72 6f 64 75 63 74 73 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 2c 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 64 69 76 2e 70 72 6f 64 75 63 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 64 75 63 74 73 2d 67 72 69 64 20 2e 75 70 73 65 6c 6c 73 2e 70 72 6f 64 75 63 74 73 20 75 6c 2e 70 72 6f 64 75 63 74 73 20 6c 69 2e 70 72 6f 64 75 63 74 7b 77 69 64 74 68 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 32 35 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 63 2d 61 72 63 68 69 76 65 2d 70 72 6f 64 75 63 74 73 20 2e 77 6f 6f 63 Data Ascii: .elementor-products-grid .related.products ul.products li.product,.woocommerce div.product .elementor-element.elementor-products-grid .upsells.products ul.products li.product{width:auto}@media (min-width:1025px){.elementor-widget-wc-archive-products .wooc
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 2d 70 75 72 63 68 61 73 65 2d 73 75 6d 6d 61 72 79 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 74 68 61 6e 6b 79 6f 75 2d 6f 72 64 65 72 2d 64 65 74 61 69 6c 73 20 6c 69 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 2c 31 70 78 29 20 76 61 72 28 2d 2d 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 73 2d 62 6f 72 64 65 72 2d 74 79 70 65 2c 73 6f 6c 69 64 29 20 76 61 72 28 2d 2d 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 23 64 35 64 38 64 63 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 61 79 6d 65 6e 74 2d 64 65 74 61 69 6c 73 2d 74 69 74 6c 65 73 2d 63 6f 6c 6f 72 2c 23 30 30 30 29 3b Data Ascii: -purchase-summary .woocommerce .woocommerce-thankyou-order-details li{border-right:var(--payment-details-border-width,1px) var(--payment-details-border-type,solid) var(--payment-details-border-color,#d5d8dc);color:var(--payment-details-titles-color,#000);
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 70 61 67 65 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 23 63 75 73 74 6f 6d 65 72 5f 64 65 74 61 69 6c 73 20 2e 66 6f 72 6d 2d 72 6f 77 20 2e 69 6e 70 75 74 2d 74 65 78 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 70 61 67 65 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 23 63 75 73 74 6f 6d 65 72 5f 64 65 74 61 69 6c 73 20 2e 66 6f 72 6d 2d 72 6f 77 20 73 65 6c 65 63 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 70 61 67 65 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 23 63 75 73 74 6f 6d 65 72 5f 64 65 74 61 69 6c 73 Data Ascii: or-widget-woocommerce-checkout-page .woocommerce #customer_details .form-row .input-text,.elementor-widget-woocommerce-checkout-page .woocommerce #customer_details .form-row select,.elementor-widget-woocommerce-checkout-page .woocommerce #customer_details

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:48 UTC	581	OUT	GET /wp-content/uploads/elementor/css/global.css?ver=1714010048 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:48 UTC	351	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:48 GMT content-type: text/css last-modified: Thu, 25 Apr 2024 01:54:08 GMT accept-ranges: bytes content-length: 52537 date: Tue, 29 Oct 2024 14:27:48 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 6d 61 67 65 20 2e 77 69 64 67 65 74 Data Ascii: .elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-image .widget
2024-10-29 14:27:48 UTC	6016	IN	Data Raw: 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 6d 65 6e 75 2d 69 74 65 6d 20 61 2e 68 66 65 2d 6d 65 6e 75 2d 69 74 65 6d 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 2e 73 75 62 2d 6d 65 6e 75 20 61 2e 68 66 65 2d 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d Data Ascii: -e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-navigation-menu .menu-item a.hfe-menu-item, .elementor-widget-navigation-menu .sub-menu a.hfe-sub-menu-item{color:var( -
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 68 65 6d 65 2d 70 6f 73 74 2d 74 69 74 6c 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 Data Ascii: ry-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-theme-post-title .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans
2024-10-29 14:27:48 UTC	13753	IN	Data Raw: 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 73 65 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 70 72 69 63 65 2d 74 61 62 6c 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 69 63 65 2d 74 61 62 6c 65 5f 5f 66 65 61 74 75 72 65 73 2d 6c 69 73 74 7b 2d 2d 65 2d 70 72 69 63 65 2d 74 61 62 6c 65 2d 66 65 61 74 75 72 65 73 2d 6c 69 73 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f Data Ascii: amily:var( --e-global-typography-secondary-font-family ), Sans-serif;font-weight:var( --e-global-typography-secondary-font-weight );}.elementor-widget-price-table .elementor-price-table__features-list{--e-price-table-features-list-color:var( --e-global-co

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:48 UTC	573	OUT	GET /wp-content/themes/fastrans/style.min.css?ver=6.6.2 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:48 UTC	347	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:48 GMT content-type: text/css last-modified: Fri, 03 Nov 2023 14:14:07 GMT accept-ranges: bytes content-length: 0 date: Tue, 29 Oct 2024 14:27:48 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-29 14:27:48 UTC	590	OUT	GET /wp-content/themes/fastrans/assets/css/fontawesome-all.css?ver=6.6.2 HTTP/1.1 Host: goldtrack.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldtrack.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-29 14:27:48 UTC	352	IN	HTTP/1.1 200 OK keep-alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 05 Nov 2024 14:27:48 GMT content-type: text/css last-modified: Fri, 03 Nov 2023 14:14:06 GMT accept-ranges: bytes content-length: 211752 date: Tue, 29 Oct 2024 14:27:48 GMT server: LiteSpeed x-turbo-charged-by: LiteSpeed connection: close
2024-10-29 14:27:48 UTC	16032	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 35 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 0a 2e 66 61 73 2c 0a 2e 66 61 72 2c 0a 2e 66 61 6c 2c 0a 2e 66 61 64 2c 0a 2e 66 61 62 20 7b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b Data Ascii: /! Font Awesome Pro 5.15.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fas,.far,.fal,.fad,.fab { -moz-osx-font-smoothing: grayscale; -webkit-font-smoothing: antialiased;
2024-10-29 14:27:48 UTC	16384	IN	Data Raw: 39 61 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 62 61 6c 6c 6f 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 33 35 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 66 72 61 67 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 39 62 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 39 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 68 65 61 72 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 39 64 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 78 2d 6f 70 65 6e 3a 62 65 Data Ascii: 9a"; }.fa-box-ballot:before { content: "\f735"; }.fa-box-check:before { content: "\f467"; }.fa-box-fragile:before { content: "\f49b"; }.fa-box-full:before { content: "\f49c"; }.fa-box-heart:before { content: "\f49d"; }.fa-box-open:be
2024-10-29 14:27:49 UTC	16384	IN	Data Raw: 0a 0a 2e 66 61 2d 64 61 67 67 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 63 62 22 3b 20 7d 0a 0a 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 35 32 22 3b 20 7d 0a 0a 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 31 30 22 3b 20 7d 0a 0a 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 63 30 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 61 34 22 3b 20 7d 0a 0a 2e 66 61 2d 64 65 62 75 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: .fa-dagger:before { content: "\f6cb"; }.fa-dailymotion:before { content: "\e052"; }.fa-dashcube:before { content: "\f210"; }.fa-database:before { content: "\f1c0"; }.fa-deaf:before { content: "\f2a4"; }.fa-debug:before { content: "
2024-10-29 14:27:49 UTC	15252	IN	Data Raw: 0a 2e 66 61 2d 67 72 61 74 69 70 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 38 34 22 3b 20 7d 0a 0a 2e 66 61 2d 67 72 61 76 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 64 36 22 3b 20 7d 0a 0a 2e 66 61 2d 67 72 65 61 74 65 72 2d 74 68 61 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 33 31 22 3b 20 7d 0a 0a 2e 66 61 2d 67 72 65 61 74 65 72 2d 74 68 61 6e 2d 65 71 75 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 33 32 22 3b 20 7d 0a 0a 2e 66 61 2d 67 72 69 6d 61 63 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 37 66 22 3b 20 7d 0a 0a 2e 66 61 2d 67 72 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 Data Ascii: .fa-gratipay:before { content: "\f184"; }.fa-grav:before { content: "\f2d6"; }.fa-greater-than:before { content: "\f531"; }.fa-greater-than-equal:before { content: "\f532"; }.fa-grimace:before { content: "\f57f"; }.fa-grin:before {
2024-10-29 14:27:49 UTC	16384	IN	Data Raw: 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 39 65 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 61 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 38 33 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 61 6e 64 61 6c 6f 72 69 61 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 30 66 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 61 6e 64 6f 6c 69 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 66 39 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 61 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 37 39 22 3b 20 7d 0a 0a 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 39 66 22 3b 20 7d 0a 0a 2e 66 61 Data Ascii: efore { content: "\f59e"; }.fa-male:before { content: "\f183"; }.fa-mandalorian:before { content: "\f50f"; }.fa-mandolin:before { content: "\f6f9"; }.fa-map:before { content: "\f279"; }.fa-map-marked:before { content: "\f59f"; }.fa
2024-10-29 14:27:49 UTC	16384	IN	Data Raw: 0a 0a 2e 66 61 2d 72 6f 63 6b 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 33 35 22 3b 20 7d 0a 0a 2e 66 61 2d 72 6f 63 6b 65 74 2d 6c 61 75 6e 63 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 30 32 37 22 3b 20 7d 0a 0a 2e 66 61 2d 72 6f 63 6b 65 74 63 68 61 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 65 38 22 3b 20 7d 0a 0a 2e 66 61 2d 72 6f 63 6b 72 6d 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 65 39 22 3b 20 7d 0a 0a 2e 66 61 2d 72 6f 75 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 64 37 22 3b 20 7d 0a 0a 2e 66 61 2d 72 6f 75 74 65 2d 68 69 67 68 77 61 79 3a 62 65 66 6f 72 65 20 7b 0a Data Ascii: .fa-rocket:before { content: "\f135"; }.fa-rocket-launch:before { content: "\e027"; }.fa-rocketchat:before { content: "\f3e8"; }.fa-rockrms:before { content: "\f3e9"; }.fa-route:before { content: "\f4d7"; }.fa-route-highway:before {
2024-10-29 14:27:49 UTC	16384	IN	Data Raw: 7d 0a 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 66 72 69 67 69 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 36 38 22 3b 20 7d 0a 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 68 69 67 68 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 36 39 22 3b 20 7d 0a 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 68 6f 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 36 61 22 3b 20 7d 0a 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 6c 6f 77 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 36 62 22 3b 20 7d 0a 0a 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 75 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 Data Ascii: }.fa-temperature-frigid:before { content: "\f768"; }.fa-temperature-high:before { content: "\f769"; }.fa-temperature-hot:before { content: "\f76a"; }.fa-temperature-low:before { content: "\f76b"; }.fa-temperature-up:before { content: "
2024-10-29 14:27:49 UTC	16336	IN	Data Raw: 63 3a 20 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 66 61 2d 64 75 6f 74 6f 6e 65 2d 39 30 30 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 0a 7d 0a 0a 2e 66 61 64 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 44 75 6f 74 6f 6e 65 27 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 7d 0a 0a 2e 66 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 66 61 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 2c 20 69 6e 68 65 72 69 74 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 6f 70 61 63 69 74 79 Data Ascii: c: url("../fonts/fa-duotone-900.ttf") format("truetype")}.fad { position: relative; font-family: 'Font Awesome 5 Duotone'; font-weight: 900;}.fad:before { position: absolute; color: var(--fa-primary-color, inherit); opacity: 1; opacity
2024-10-29 14:27:49 UTC	16384	IN	Data Raw: 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 33 32 64 22 3b 20 7d 0a 0a 2e 66 61 64 2e 66 61 2d 63 61 72 65 74 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 33 32 65 22 3b 20 7d 0a 0a 2e 66 61 64 2e 66 61 2d 63 61 72 65 74 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 33 33 30 22 3b 20 7d 0a 0a 2e 66 61 64 2e 66 61 2d 63 61 72 65 74 2d 63 69 72 63 6c 65 2d 75 70 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 33 33 31 22 3b 20 7d 0a 0a 2e 66 61 64 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 30 64 37 22 3b 20 7d 0a 0a 2e 66 Data Ascii: content: "\10f32d"; }.fad.fa-caret-circle-left:after { content: "\10f32e"; }.fad.fa-caret-circle-right:after { content: "\10f330"; }.fad.fa-caret-circle-up:after { content: "\10f331"; }.fad.fa-caret-down:after { content: "\10f0d7"; }.f
2024-10-29 14:27:49 UTC	48	IN	Data Raw: 2e 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 2d 61 6c 74 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 31 30 66 33 35 Data Ascii: .fa-external-link-alt:after { content: "\10f35