Hello everybody, my name is John Hammond and welcome back from the YouTube video. We're looking at some more tri-hack me and this is a new room. It's out for a few days now. I'm bummed because there are some write-ups out already. I didn't make it right to the punch, but this is going to be showcasing gaming server, which was a super fun room. Sure, its difficulty is rated easy, but I think there were some really cool nuggets in here, so I want to work through this with you. I have the IP address and the room already started. So let's go ahead and jump in. I'll start off like I always do by making a room for a folder and a directory to work for work in in this room. Wow, we're already doing really, really well getting words and speech to happen. So I'm going to create a simple read me file where I will just kind of keep track of my notes and things. And let's start off with a simple rust scan to kind of see what open ports we're working with. Looks like we have port 22 open and port 80 open. So that is good to know. I will go ahead and get started with some simple Nikto and Durbuster or Go Buster scans. So we do some automatic enumeration kicking off in the background. While we are going to also do our own manual enumeration. So I'll start off with Nikto in that one window and I will start off with Go Buster in this window. I'll use Dur as the notion to make it OK, work in directory mode. Pass intact you to specify the URL and the word list that I'll use. So I'll use the directory list medium that typically ships with Durbuster. OK, now we can go to some manual enumeration and poke around ourselves. This is the IP address. Open it up in a web browser and I'm greeted with this dragon website. Lorm Ipsum. OK. So there's not a whole lot of actual content here other than I guess some pages to access. Just more lower Mipsum text nonsense. Is there a read more page that links with me to archive? This links me to about I can see down the bottom left of my screen here myths. And that takes me nowhere. OK, I will hit control you just to kind of view the source here. Kind of see if there's anything interesting in the HTML. I think that's always good practice. Same thing with always checking out static files like the CSS and JavaScript, maybe sure you don't see anything like crazy cool in there or it's boring in that it's a static file. It's not going to do anything dynamic in the case of CSS specifically. But it's always I think good practice just to check in case they hide anything in there. Oh, and actually it's a good thing that we did. There's an HTML comment here. John, please add some actual content to the site. Lorm Ipsum is horrible to look at. Great. This is awfully meta. They're talking to me, John. So maybe that's worthwhile. Maybe that's going to be a username we could work with. Checking out those other pages, I'll zoom out here. I see the index page that brings us to this archives page that's apparently just not a thing. What about that about HTML? There's a video here that is not a video. Incredible and an uploads page. Oh, OK. So sorry, I don't know if that was visible with my face in the way. There's an uploads page that I can just click on. And it took me to this location slash uploads and that had some interesting files in there. I wonder if there's like an upload functionality that we could get into. There's a meme.jpg, which would obviously be the first thing that we look at. Thanks. That's great. Manifesto.txt. Oh, and this is just a hacker manifesto. Very, very cool. It's a plain text file. So if I were to view the source, there's nothing else in here. If you really, really wanted to, sure, you could slap it in to a text editor and see if they're doing any tricks like hiding whitespace, dignography or anything, nothing there. So that's nothing we need to worry about. But kind of a nice little Easter egg if you're in the hacker manifesto. I like that. I dig that. And there's this dict dot list, which seemingly looks like a word list or dictionary list for potential passwords. I like this like season and then year. That's kind of known now as a pretty common technique for passwords that you might be using because you just look out the window and say, oh, it's snowing outside. It's winter 2020 or whatever. So this would be worthwhile. Let's go ahead and save this. I'm going to go back to my directory here and I'll W get this down. So that's downloaded. There we go. I have a dict dot list and all of those files there. We have Nikto's results here that found a robots.txt location. So let's hop over to robots.txt. I typed in Ribbit and OK. And that just tells me to look at this uploads directory that we were already in and pilfering out of. Cool. Seemingly nothing else in that there. Durbuster or GoBuster found uploads and also found secret. Oh, what is that? Slash secret. There we go. OK. And that's in the directory listing with the secret key. And that is a private key. OK. Awesome. So let's totally W get that down as well. W get. Grab that guy. And we knew that there was SSH open, right? Yeah, we saw that our Nmap scan or Rust scan, which will funnel to Nmap. And we have a potential username. And we also have a potential password list and we have this potential secret key. So I guess it's worth a try seeing if we can SSH into this machine. Let me grab that IP address. There we go. With the secret key and specifying the host and John as the username. My username is John on my machine, so I don't really need to supply that. But it's a good thing that I do to be explicit, you know?  So CHmod 600, so it has the permissions of just my user to be able to do that. There we go. Now I can run that one more time and that private key needs a password. OK, so that's not a big deal. We know that we have a word list we could use. So let's run John the Ripper. I have John the Ripper downloaded and installed in my op directory. That's where I tend to put all of my tools. So in their run folder, there is an SSH to John Python script that will allow you to take a private key and put into a format that John the Ripper can handle and then you could throw a word list at it and hopefully it could crack a password or figure something out. So let me run SSH to John on that secret key and I get this big, big, big, big amount of output. But that's going to put it in a format that John the Ripper can work with. So I will take that exact same command and I'll redirect it out to a file like for John dot text. OK, then I can just simply run John the Ripper on that for John dot text file that I just created and I'll specify the word list we want to use as that dictionary dot LST. Is that the name of it? I'm just going to control C to check. Yes, dict dot LST. So run that guy and we'll see if he gets a password and he does. OK, so the password for that private key is let me in. Great. So let's SSH tack I with our secret key to John at that IP address. So my clipboard. Thank you. Enter passphrase. We know that is now let me in. Great. I should be taking notes on all this. I literally didn't. I created that read me dot text file or read me dot empty and didn't do anything with it. So since we have initial access, since we are logged in as this John user, we're able to SSH in. We are now on the box and we can look at his home directory and we have this user dot text. So cutting that out, we can go submit that as the user flag. Great. OK, now we'll want to do some usual manual or automatic automated enumeration. I'll start with the immediate low hanging fruit just to see can I run pseudo and he needs a password and we don't know his password. We only know the password for that private key. So that doesn't work. I could type in something like please subscribe. But unfortunately, that's not his password, but it is my password. So if you want to subscribe, that might help. Shameless plug. Now let's go actually do some automated enumeration. So I will go ahead and upload a Lynn P's or an automatic enumeration script like Lynn P's or Lynn Enum. Lynn P's is great and fantastic. So I will do that. I'll do that with my poor man's pentest style. All that's really doing is going to create one protocol or one kind of communication transfer setup. I could be using Netcat to just listen on my attacker machine and send or listen on excuse me, listen on the host on the victim and then maybe like send along the file just cat it out to another network or Netcat connection and then it'll save it or pull it onto that file. I can redirect it out or you could do the same thing with W get just a download a file, you could do the same thing with FTP or HTTP do W get, right? Or SMB, etc. Enough background, let's actually run the command. Again, I store Lynn P's in my op directory. So let's slap that in and he's going to throw it in devshm. Great. Let me just check. Wake is good. So that's sent. I'm going to move into devshm and I might still have some files in there from when I did this momentarily moments ago. So let me just run that one more time. Super sorry. Ruin the ruin the illusion there. But now we've got Lynn P's. Let me mark that as executable. CHmod plus X and I'll go ahead and run it and save that output. I'll just pipe it to T so I can see the standard output and it'll be funneled into a file. So there we go. I do not have the entire Lynn P's script apparently. When this happens, I just like to check with MD5 some on the original file that's on the host and on my attacker machine. Yeah, those are different. So let me upload that one more time. Slap that along. That's sent now. Now does the MD5 some command give me the same hash? It does. OK, great. So let's actually run our Lynn P's script. Now there we go. The beautiful P that shows up and we're cranking through. I'll let this run for a little bit, but I will scroll up to the top and see what we can work with. I know reading Lynn P's output might be like weird and intimidating. And there's a lot to look through, obviously, if you kind of aren't familiar with it, especially knowing what's normal and what's not. So thankfully, Lynn P's does a really good job of like giving you a legend or like a color coding as to what might be potentially useful. In this case, it looks like we are running our operating system of Linux, that kernel version and it's Ubuntu 1804. I'm running as that John user and I'm in the pseudo group, but I don't know his password, so I wasn't able to run pseudo commands. I'm also in LXD or LXD, which is a kind of technology used for creating containers and Docker is like a similar tool. Maybe that's going to be an outlet. Looks like that is notified as, hey, this is a huge PE vector. You could potentially do some stuff with LXD. Let me tune into that later, but first let's continue scrolling through Lynn P's. Pseudo version is seemingly old. Maybe we could abuse that CPU information. Nothing sticks out. Same thing in the environment. These are all just regular normal environment variables. We can see here that we are a SLR enabled or address space layout randomization. That might get in the way of her to do some like nifty, crazy binary exploitation stuff, but I don't think we need to do that in this case. All the processes that are running dub dub dub data is the one that's actually running Apache right now. So that's the web server. Cron jobs. Oftentimes, we might see like interesting backups or things that get in the way. Looks like there's nothing out of the ordinary there. Same thing with services, nothing highlighted or enumerated. Same thing in et cetera. Hosts, nothing out of the ordinary. Lots of running things. My user, again, Pseudo is present and so is LXD. PK exec policy. Maybe that's going to be something interesting. Looks like these are the only users here. So John, this user that I'm running as in root are the only ones that have been bash and the output of it, it's that repassword. That's it. So OK, OK, OK, nothing immediately stands out. Yes, we know we have our private SSH key. We already got that. Nothing, nothing, nothing set UID binaries. See if there's anything interesting, easy low hanging fruit there. Nothing immediately stands out again. All this stuff is kind of normal. Same thing with set group ID. Oh, interesting that we have VIM information. LXCE cookies. OK, so maybe a little bit more pointing towards LXC and LXD. That's a lot of output and a lot of stuff and we can move on. OK, so now that that illusion is over, let's talk a little bit more about that LXC or LXD prevask. This is a thing, right? This is kind of well known and well documented. There is a lot of stuff on this. If I go check out this exploit DB entry, there's immediately kind of some option that we have here. This is a bash script, but it tells you like you have to do a little bit of stuff on your own attacker machine to be able to prep this. This will actually have you go download some tool and utility that will allow you to actually build Alpine, like build an image or the framework for a container to run in an LXC, right? That technology and software that will be able to run containers. The same thing that you might do when you're performing like a docker prevask is it because that is kind of a tight security thing. You have a lot of functionality when you're creating those and running those containers, you could potentially end up mapping the entire file system into the container. So you essentially could have root privileges because you can modify things as root inside your container and that's going to still take effect of the actual file system that you've mounted, or you could just peruse the file system, which is something that we could do to actually find that root flag or become that root user. So that's going to be kind of interesting and kind of fun. We could do that. Looks like they're using this build Alpine script. So this is out of an original GitHub repository. So let me actually go to that and check it out. I'll go to github.com, slap in that location here, this will build an Alpine Linux image for us. OK, so let's clone this and work with it. I am... Oh, Nikto found secret, nice. Go Buster and Nikto both found secret. I don't think we need to do anything more with those because we already are on the box. So let's go ahead and get clone this guy. And looks like we just have this dot slash build Alpine. Can I run this? Build Alpine, you must be run as root. OK, let's do a little pseudo here. Actually, before I do that, I want to at least present this good practice to you is if you know you're running a shell script as root, you should probably at least take a gander as to what it's doing. Make sure it's not going to fork bomb or RMRF or destroy things or completely, I don't know, clobber your machine with ransomware. Looking through this and considering it's on GitHub and it's kind of a trusted thing, it looks like it's got a decent amount of stars and forks, these amount of contributors, you shouldn't sure practice, you shouldn't blindly pseudo a shell script, especially like curling something or like downloading an install script and just pipe it to bash. That's also sometimes a bad idea. OK, this looks totally fine. Nothing, no RM, tack RF on my forward slash my removing my entire file system. Anyway, let's go ahead and pseudo this guy. I'll type in my password now that I trust this and it'll go do its thing. This failed. So I don't know if you're going to have this exact same predicament, but when the script would run for me, it would automatically select a mirror that wasn't a good mirror. It would either just hang or it would just kind of fail. So what this ends up doing is if you kind of follow through that code and you'll notice it created a new root FS folder in here. So I'm going to go into that and it just looks like a file system, right? It's the root file system. That script, though, that we opened up when I look at the mirrors. Let me control that for mirror here. It's pulling it out of the root file system. User share Alpine mirrors and mirrors dot text. So let me go ahead and cat that out. I don't need the forward slash in this case, because I'm going to be talking relative, not my absolute path. I have a lot of stuff in here. Let me sublime that out and I actually use the real forward slash that time. So I'm just going to open this up in a text editor and I'm going to remove a lot of the mirrors until I know maybe one that will work and one that will actually download things. I'll just leave the top one in this case. Now I'll go ahead and run that script one more time. Getting back to that parent directory. Let's see if this will be able to download it properly. OK, looks like it's moving. It's cruising along and it's going to prepare this Alpine image for me. Awesome. Now in my current directory, I have this big Alpine tar dot GZ file. Now we could go ahead and put this on the victim or target machine. Normally, sure, you could go ahead and create a container or an image with LXC or Docker and it'll just pull it down from the Internet. But keep in mind, these don't actually have Internet being inside of the tri-hack me network inside of that VPN. I had a thought and I was like poking around with this when I was going through it live or previously on my own, right? I thought like, well, this would be kind of cool and fun to just go ahead and create a SOX proxy or like funnel my internet through my attacker into the victim and the target machine so that it would be able to download things. You can set like HTTP proxy and HTTPS proxy and that might work. You can do that with like then run commands with curl or W get and be able to interact with it natively, but I don't think LXC was able to pull down an image through that. Anyway, if you guys have any interest in that, I could showcase a video where I'm putting together that SOX proxy and then using that on the victim so that the target and the reversal that you're working with, even if it doesn't have internet, you can basically run primitive commands like curl or W get and be able to access the internet. You can apt update or install chaos or whatever the heck you want. Terminal parrot, if you'd like to mean and troll, that's a thing and maybe we could do a video on that if you guys have an interest in that. Anyway, let's continue to do what we were doing. We've got this image created and we have created this so that we don't need to use the internet when LXC tries to create a container or an image from this. It can just take it locally from this file. So let's go ahead and throw that on the box.  Now that that's serving, this is going to end up being like another thing to download or get a file here. I'll use W get on the victim and actually let me mark this as a black so you know that that's the victim. Hopefully that's not too confusing. Grab on that port that we're serving this little tiny, tiny web server. Let's go ahead and grab that Alpine image here that we've downloaded. OK, so that's going to pull that all down. Looks like my web server saw the request. My face is in the way and you can see the victim is downloading that right now. While that's going, let's go ahead and kind of take another look at what we can do to perform this privilege escalation. This script might do some peculiar things where it's going to import the file name that's applied with an alias and try to initialize it. It'll try to create that Alpine image with a container name of privsk. And it's going to set that security privilege equals true and try to add the victim and like the real target here file system mounted inside of that container and mount root so that it would be able to access it from inside the container, kind of cool. Then we'll go ahead and start that and they'll go and execute a command there so we get access into it. What we could do is we could go ahead and try this. Let me, I guess, grab this code and let's on our attacker machine. Let's subble like, oh, I'm in the Alpine server there. Let's call this like LLXC privsk or something, .sh. Slap that in and let's move up a directory and run that exact same server. So now I can download this LXC privsk on the victim. LXC privsk.ch. Great, he's pulled that down and let's try and mark that as executable. And now let's go ahead and try and run that script. Looks like we need to supply the file name and we have this big, big Alpine image file now, so let's Alpine that. Supply that with that tack F argument, see if it created it. Looks like it did. It listed all the images that we have here. We've just imported that one successfully and we added that forward slash, note the victim file system inside the container. And then we jumped into the context of the container because we executed privsk and privsk is our container name in SH to give us a simple shell here. So now that we kind of read through and understood what that script was doing, we are in the container and we can now go ahead and move around. So nothing in my current directory. I'm root, right? But I am root inside of this container. Remember, if I were to move up in the other directory, I can move into home and you won't see that john user. If I were to cat out, etc. password, you won't see anything else because we are inside this container and not the actual target original machine that we were in. But we had mounted the root file system and slash mount root. So I could move in there and now I'm in the actual file system of the original target of the real victim and I could move into their root home directory because I have permission to do that now and I could just grab that root.txt. Neat, very cool. That's how we could just take advantage and prevesque on this box. Keep in mind, sure you're only doing that in the context of the container. But since we have access to their file system, hooray, we completed the room. Congratulations, everybody. Since we have access to this file system, we could modify that at center password and maybe change the password for the root user. Let me do that just to see if it'll make some sense here. So I'm moving into a set of password within this container. I'll cat out the current settings of password. You can see this john user there, and that's not me. That's that john user on the victim. So let me grab all of this data. I know it's gross, but I'll slap it into sublime text and then on my host, I'll go ahead and fire up Python. So I'm going to use Python so that I can import crypt and crypt is going to end up being that same library that creates the password hashes and in Shaw format and stuff that's going to be used regularly inside of an et cetera password or et cetera shadow. We could read et cetera shadow and maybe I guess sure you could modify and change that, but I think doing it instead of a password is just kind of easier and more sane. You can see John's password hash and maybe I guess we could crack his password hash if we wanted to, because we still don't know his password, but we can go ahead and set one for root and that might be kind of cool. Let's finish what I was saying. Sorry. Inside of Python, we've imported crypt and now I could use crypt dot crypt to calculate that hash or the cryptographic value for a specific password. I'll just set my password to please sub, please subscribe. And now that string, this is it returns back out to us is what we could use for the value of that root user. So let me patch this into where the X would be. And that's where normally you would see the password. If you were doing, if you had that access to et cetera shadow, now that that's created, what I'm going to do is I'm going to try and run nano inside of that target container. Let me see if I can actually run nano break. Nope, I don't have that. OK, do I have echo? I probably do. So I'll do use a little here, doc. I'll use cat up to end of file. And then I'll pump that into et cetera password. Maybe I will break the machine if I mess this up. Hopefully I don't.  And I will type in EOF to denote the end of file. Great. Now I can cat out et cetera password. And hopefully I didn't clobber destroy it. Looks like I was OK. And our root user now has a set password syntax in there. Great. So at this point, hopefully I can break out of my container. OK, OK. And I can change user to root. And the password that I have set is please sub. Did I fat finger that? Oh, no. Can I SU bash? Well, I mean SU, please sub. No. OK. Let's change the game here, then. We could just totally easily change our like John and that command that we ran. There's LXC, Proves, TechF, Alpine, just to get that container back. There we go. Now let's CD into et cetera password or CD. Mount root. And let's change that to that John user. Oh, goodness. Grab that password, slap it in for the John user so I know it. Or we could crack his password. We could kind of use whatever technique we wanted to. Et cetera password. Did I accidentally throw that into slash et cetera password? Is that why that didn't work? It is. Oh, you guys should have told me. You guys should have told me.  Let's let's find out. Let's use our here doc again. So cat EOF to password. And now I have that pre planted password into both root and John. So let me throw that in and that with EOF. Great. Now let's exit. And I can trust that this should work as you without it. Please sub. No, OK. Can I pseudo bash? Please sub. What the what? What is it's a password look like on this box? Well, what are you doing, dude? Oh, no. It doesn't have my dollar sign sixes. Because we're entering that in bash and bash is going to interpret those dollar signs as if they were variables. So this syntax is gone. Let's. All right. Third time's a charm. Third time's a charm, guys. Let's run it one more time back in the container. Let's include our backslashes there. Is there anything else that was weird and funky there? Let me just grab this syntax and kind of put it side by side to test it. I had up to. This position, there's something else missing. Oh, there's another dollar sign there. Are there any other dollar signs? Anything else that I'm missing? It doesn't look like it. If I miss it again, then we'll go for four times a charm. How about that backslash? Is that noted there? Or that's that's just a regular forward slash. That's not a concern. OK, OK. Now, pretty please. Pray to the demo gods. Ca, let's move into Mount. Root. And move into that, et cetera, page. And let's do our here doc password. Slap that bad boy in. To the classic EOF. Now let's count out password and do a sanity check before we remove this thing. Now our dollar signs are in place. Let me verify that this line is the exact same as it should be within sublime text or move our dollar signs. And that line should be identical. So if I search for that. Do I see it with red checks turned off? It is perfectly fine. OK, great. Now, hopefully clearing that out. Once again, sanity check, catting, et cetera, password. My dollar signs are present. Let me see if I can ask you and use the password. Please sub. I'm going to type that one more time to not fat finger it. And I'm right. All right, awesome. Thanks, everybody. Now we're actually root on the actual host target victim without needing to without needing to go through the container. That was a lot of fun. I hope you guys kind of enjoyed that.  And it's not fun to watch. But you guys say, hey, it's really, really cool to actually see you rework and problem solve and stuff like that. So I hope that was fun. Now we got the real root dot text actually on the box, not through the container. So we did it. We finished that room. And I think that was a lot of fun. I don't have a whole lot of practice with some of those LXC privests. And if we wanted to, sure, we could take a look at some of the walkthroughs that other folks, other folks had used. And that's a lot of the fun of doing this and learning and see what other tools people use looks like. Fuff was in there. I'm sure some W Fuzz. OK, and they're using the same sort of setup with LXC. Yep. Yep. Yep. Yep. That's really neat. That's really cool. That's really fun. I like this room a lot. I don't do a lot with LXC containers, but it's very, very cool to see that privest every now and again. But the benefit of try hack me is that, hey, you can take a look at how other people solved it in the world. They're all about kind of like education and learning first. So if you ever want to take a look at the write up, if you're banging your head against the wall for too long, that's an option. I dig it. I love it. Sweet. Thank you so, so much, everybody. Thanks you for thanks for watching. Thanks for hanging out. It's been great. I'm late on getting a video out. So I wanted to just like, hey, let's run through this thing. And I hope it wasn't too bad being an easy room. Maybe that LXC privest was kind of neat. And there was a lot of documentation, but a lot of resources and material out on that sort of thing. So please go Google around. Please go practice. Please go learn. And thanks so much for watching. If you guys did like this video, please do those. YouTube algorithm things. Maybe smash that like button, maybe smush, boop or bonk that like button. Leave a comment, subscribe. You know, I'd be super, super grateful and that's enough for now. Thanks for watching, everybody. I'll see you in the next video. Love you.


All right, so our trader is welcome on back here this Tuesday morning, May 10th, shortly after 9 a.m. Eastern time. Great to see all of us live inside the trading room. Mario, Michael, Leda, Norman, Ron, Gene, Bobby, Norman, Phil, Bob, Charles.  Great to see everybody live inside the trading room. Great to see all of us back on social media, Facebook Live or YouTube. Folks, hopefully we get that short covering. I mean, hey, we have a little pop here on Peloton, a couple of stocks looking to make a small rebound but we are hopeful to see that yesterday after such a big gap down, after such a big drop off from over the weekend and we just never really got it. Never even came close, in fact. Maybe kind of heading into the early afternoon, the S&P ended up making a small little dip back up but it was very brief, very small and then from there heading into the market close, even worse, we ended up seeing continuation of that trend down heading into the end of the day. So for this morning, we remain hopeful to see some short covering but don't hold your breath waiting for that. We have to kind of take it level by level. I would really look to follow a whole number of price levels on days like today. You could say that for really any day but for something that on a day that's much more volatile today, obviously yesterday, just to say you're more likely to find iceberg orders, larger orders, a total number of orders at those price levels. So for right now, at least Peloton making a push up over 12, actually there was a resistance not just at 12 but off 11.75 on this trade. So if you want to mark 11.75 to 12 as a potential support for this stock, you could do that but the news out on Peloton here to begin, P-T-O-N, they ended up taking a huge hit this morning in pre-market. I think they ended up reporting bad earnings, actually a whole bunch of different titles here, headlines. So quarter three EPS was down year over year and then essentially their sales missed on top. I don't know if they ended up lowering their guidance or their outlook for the remaining parts this year but either way Peloton took a huge hit early, ended up bottoming out. Well, take a look right off a whole number, right off of 10 bucks effectively and then ended up making the squeeze really from there. Right away this goes on our watch list just to begin coming off news. It's very volatile heading into the morning and I mean that in a good way. This stock trades a lot of volume day to day anyway. So I would assume the spreads to be pretty tight on this stock. I'd assume the order book to definitely fill in after the open, not to say it's level one or two though. Probably like more of a level three and even though it's more liquid, it could be like a level three to four in terms of how we categorize these stocks. So for any of our students at least like Mark and Norman and Michael and Mario later, Ronald, you folks know. I mean, that's how we kind of like ranked these stocks in terms of volatility. So for right now, hey, this is coming right back down from that 1250, 1260 area. Looks like it tried to make a push up but ended up failing to really do so. And we'll have to see if we can hold support around here that 1175 to 12 range. All right, so we have the peton trade on our pre-market list to begin. We've actually had a pretty good pre-market, all things considered this morning so far folks, between the EVAC stock, VRM really, that was the star of the pre-market so far. We'll get to those in just a bit. I do wanna recap a couple of the movers that we did catch from yesterday. And if you're joining us late to this week, even if you're joining us early this morning, perhaps. If you were not here yesterday, one of the big talking points that we had was, albeit the market was dropping, that doesn't mean that every stock is gonna drop off with the market. And that doesn't mean that there's not going to be any good long opportunities. So even if the markets drop off today, we remain hopeful to see a nice runner, VRM, EVACs like I just mentioned, but from yesterday, DWV, I mean, another vaccine stock here, blue water vaccines, ended up making a huge run up really throughout most of the day, right? Ended up popping shortly after 10 o'clock there, over four, took off really nicely up a buck. And then from there, as it re-broke over five, it made the next leg. So ended up running up beautifully for us throughout the entire day, more so perhaps the afternoon, but ended up falling off, right? What goes up unfortunately comes back down and what Fausto always says here in these meetings is, it'll come back down twice as fast. That's not always true. It's kind of just like rule of thumb. But if you take a look at this chart, you tell me, it came back down pretty quickly, maybe twice as fast. So for right now, hey, I don't know if news led to that drop off or what, but it's down 18% here this morning, this BWV. So it's a no-go for today, but it was a great runner that we had from yesterday. So we had the BWV trade. And then really, I will say aside from that, we did have a couple of decent pops and drops or pops I should say more from the morning. I think it was the SOPA stock that we had from pre-market SOPA. Another one that ended up just dropping off shortly afterwards though. Ended up making a pretty good move. It was more across the morning, like you can see here. I'm just kind of get the full view here for you. Ended up running in pre-market pretty early prior to the open, popped at nine o'clock during this very meeting. So hopefully, like I said just before, hopefully we can catch a nice pop here coming up, but ended up continuing, stalled out a bit, but ended up bottoming out right around 2.40, 2.35, and then ran back up for us heading into the early afternoon. So not the greatest look, but it was up big in pre-market, made a really good push in pre-market, but it did make a nice little move for us. You're heading into the late morning, early afternoon. Again though, what goes up comes back down. This one down nearly 8.5%. For right now, definitely a no-go for this soap hot trade for this morning. Then we had one more, but this one was more of a bust after the open all together. It was more of a pre-market one, if anything, but the BTTX, you guys remember BTTX from yesterday, it was more pre-market one. I want to give this a little shine. Ended up popping here after seven o'clock, ended up continuing up for us after eight, and then into the open. It did pop at first, but then shortly after that first pop, it ended up beginning to pull back. We wrote this one off earlier than the others at least, but again, I don't know. This one's actually up 3% plus, so it's actually stronger this morning compared to the others. I'll write it down just on the side list, just to come back to it if we need to at the end. All right, so hopefully we catch a nice runner at least today, even if we do see continuation across the market. Let's go across the percent gainers list and percent losers lists. Really quickly, for Grant, for Michael, for Norman, for Mark, for all of our students live inside the cyber group room. Today's Tuesday, right? What do we got going on today? Tuesday, a little housekeeping here in between 11 o'clock every Tuesday morning. Traders talk, right? So really quick, of course, for all of our returning students, like Lorian, Wayne, and Layton, Michael, Chris, you folks all know that already, right? I loaded that question up, but for any of our new students or even trial members testing our room out for the week, we're conducting a live workshop right here inside our live trading room this morning. So long as you could hear this voice right now in our live trading room, you have access for all of us on social media. You can go right down to the link on the blue banner below. But if you wanted to send over any questions, any trades that you wanted to go over with us, send it over to my email address, josh at C2trading.com. I'm just talking to all of us live inside the trading room specifically. So we'll begin that right at 11 o'clock Eastern time right here. All right, so with that said, maybe we'll go over BTTX from pre-market at least, we'll see. But let's go across the percent gainers and losers lists here. We'll see what else we could put on our watch list for the morning. Oof, another buyout. I'm not even gonna ask you folks this time, you know it's a buyout. All right, not a buyout, VRM. VRM, I don't think there's any news on this stock. I haven't seen any like actual news that came out on this stock this morning. So that leads me to believe it's just naturally a short squeeze. And well, if you take a look at the daily chart, you know, we can't really make too many assumptions in this trading world that we live in. And you know, with that said, like even if I'm technically wrong, that's all right, I can make a good assumption here. Without any news, this is just a natural short squeeze. How much this stock dropped off, not only back from late March, early April, but how much the stock dropped off back from late 2020, it was a $70 stock. Actually, that doesn't even reflect 70. There was a $70 stock back in 2020, same.  So for right now, hey, this one looks great, although it's kind of pulling back down a little bit on the intro day. Easily enough, we'll put this on our watch list, but for right now, I would definitely keep your eyes out on resistance, not just off the whole numbers, like I was kind of saying before in Peloton, but right now your new resistance, it didn't pop up up until just now, but at 180, you have a 49 or 50,000 share iceberg currently sitting on the S. So that should be resistant so long as that remains there, so long as that doesn't get pulled. And then otherwise, I would look for perhaps some support, not just off 150, but off like a 147-ish, 147. We had a lot of volume filled from pre-market early on this morning for the VRM. All right, so VRM goes on our list here. EVAX, E-V-A-X. Mike says that the VRM thinks it goes in earnings play. I didn't see the news on that. I thought, all right, well, I was wrong on this at least. I thought EVAX was earnings, it's not. This is more like phase one, phase two clinical trial news that came out. Looks like EVAX says that they've successfully produced all batches of personalized cancer immunotherapies for all patients enrolled in the phase one slash two A clinical trial, you know, blah blah blah. All right, well, it sounds like a nice headline. You know, I'm no scientist, I have nothing to do with vaccines. Let's just put it that way. It's just to say that in terms of the biotech world, I know that phase three is a lot more important than phase one or two. So for this to be up 35% right now, is it possible for it to run up more? Yeah, is it possible for it to do what it did back in October of last year, looking at the daily chart? Yeah, so you need to be really careful at this point, folks. It's already dumped back down quite a bit from the initial pop, you know, hasn't even tested to re-support yet. So, you know, for right now, I'll put this on our list, a little reluctant though, because I feel like this could just continue to dump off afterwards, but no, we'll see what happens here, very active at least, and it'll be tradable after the open by all measures. So, you know, we'll see what this could do. Dre, DRE, it is pretty expensive, Duke Realty, interesting. Yeah, not really doing a whole lot for me here. KXIN, I mean, same to be said here as I just said on EVAX, right? But this one just a lot less volatile. This one just more liquid, much slower moving. You know, it will be tradable after the open by all means, but it's just flat. It's been really flat since like pretty much eight o'clock.  So, you know, I'll tell you what, I mean, let's just keep going down the list right now. All right, this at least on the side. CLOV, also I was a little disappointed in early and pre-market. I didn't even put this on the pre-market watch list, I believe. So, you know, hey, this one I was hopeful for, but just never really ended up finding any sort of legs to push up. Oh, that's right, actually, I'm looking at the list right now. Clove, I did put on there early, but I put it like at the back end, you know, it goes to show I wasn't as interested in clove as I was on, you know, the others. But, you know, here it just really hasn't done anything since, maybe you could say up until now, you know, right now you could say it's trying to eke up a tiny amount here. So, clove, clover health investments, you know, we're familiar with this one at least. And, you know, like KXIN, it wouldn't hurt us to put this on the list, but unlike KXIN, at least this has like some sort of, you know, move up to a year. So, that's the difference there. I'll put this one on the main list. Keep it going, we keep it pushing a couple of ETFs here, not the UVXY or whatnot, but a LABU and then the cold. So, this is a biotech ETF, bullish triple leveraged. This is the opposite of LABD when you hear Fausto talking about LABD, LABU. You know, this is the bullish version of that. So, this is pushing up pretty nicely, perhaps indicative of how the markets can play out today. Hopefully, indicative of how the markets can play out today.  I'll put this one on our watch list. We normally don't focus on ETFs as often here, but when something like this is up as much as it is, and, you know, it's very liquid and more than that, it's just, you know, within our price range. Definitely, I feel like we should consider it more. You could see the same on cold. And I had cold on the watch list yesterday afternoon. All right, so I'm not going to put any more than those two, at least on our list, as far as the ETFs. But let's see if there's anything else to wrap up the gainer side of things here. Another one that popped in pre-market. This one I was pretty disappointed by the STIM trade. Ended up popping, you could just see the chart. I'm just going to move away from it, but jeez.  Let's just put it that way. There's better stocks to consider than this as of right now. You know, if this finds more legs after the open and it ends up making a better move then, or, you know, another run up perhaps, then we'll be there to try and follow it. Party City, last one here. I thought I forgot one. So Party City, we ended up seeing them get crushed yesterday. I thought that was off of bad earnings, if anything.  It is. I mean, it's already up seven plus percent from yesterday's close. So maybe after the open, it can make another dip and then we see a little short covering. You know, it's down enough from yesterday for me to consider, you know, a nice move up for today. So I don't mind at least slipping this on our list. It looks pretty flat right now. I will say that, but, you know, it's more in the sense of after the drop off, you would look for at least some sort of move back up. So it'll be a temporary bounce, if anything, but that's what I'll watch there. All right, let's hop on over to the losers list, folks. A lot of stocks down big.   So, you know, hey, right away, I'll put this on our watch list more of like a level four to level five stock, if we're being honest. And I say that more off like the liquidity. It is like a, you know, a 34-hour stock now is going from like 80 or 75 down to 31. So, you know, just given the range, this will definitely be more volatile, you know, after the open as it is now. So, you know, upstart will put on our list, but not for like more, not for like level one or two or three traders really. The BHC trade, ouch, ended up taking a huge hit here today, huge hit here the last few days. Wow, they've got crushed on the daily chart here. 22 down to eight over the last, what, like two weeks. So, that begs you to ask, you know, when is it going to bounce? But, I mean, this is down so much here in pre-market that my belief is that there had to have been news out for this stock this morning. So, up there, it's getting drilled prior to earnings, then the earnings came out. Yep, let's see, it looks like their sales ended up missing and then the earnings also. Then I think that they ended up lowering guidance too. So, with that, that's the bigger, you know, takeaway from the earnings report normally. So, huge drop off here today, albeit it's pretty flat right now. It's down enough where I'll definitely slip this on our list, the BHC trade, GDRX. This one trying to make a dead cat bounce right now early on. So, you know, it looks like it kind of bottomed out right off of like 615-ish, maybe 630-ish that ended up bouncing back up pretty nicely. So, you know, right now at least, you know, hopefully this will continue, but when we talk about a dead cat bounce, folks, just keep in mind that we're not expecting the bounce to be long-lived or, you know, to make a full recovery.  So, once the volume dies off on this, once the volume dies off on BHC and UPST and, you know, maybe a couple of others here as we go through, you know, once the volume dies off, typically so does the stock itself. So, you know, that will be kind of our rule for the day. Let's see what else we got here. LDI, now this isn't the best looker here for down to over 25%, so we'll pass on that. Novavax down big, although they're spiking back up right now pretty nicely. Geez, that's a pretty big spike. What they report earnings to, is like earnings day today for every stock. Yep, they ended up reporting worse than expected, quarter one EPS and sales results. All right, in terms of just the activity and the, you know, volatility, we embrace it, but I don't like to put out too big of a watch list. So, I feel like we already have, you know, a pretty decently sized list already. We have two, four, six, eight, 10. We have 11 different symbols already on our watch list, perhaps nine of them stocks, two of them ETFs, but you get my point, it's kind of a big list. I don't like to kind of overwhelm all of us here. AFRM, this is another one that looked pretty interesting from yesterday afternoon, ended up reporting earnings, and no, they're at all-time lows. So, with that, that's more compelling of a trade than, you know, anything else that we could find. So, AFRM, I'll have to slip on our list here too. Geez, it's a big list here, folks. I don't want to ask, but I have to. If there's any other stocks that are up or down, you know, that five or so percent that I look for, I type it in the chat board, let me know. Maybe we have to kind of consolidate this list down a little bit, maybe we pick and choose from this list now. But, you know, if there's anything else that looks really good, just let me know. I didn't really see anything too incredible for my side list, so I don't really have a great need to go through those right now. I marked up my neo-chart, but that's pretty much it, but I'm not, like, drooling over it. I like the Peloton trade a lot more. I like the VRM trade a lot more. All right, folks, I think that just about wraps it up. I don't see anything else inside our live trading room. I don't see anything on YouTube or Facebook Live, and I believe that we are good to go. From Brian, he's asking about the NCLH trade, so let's see. You know, NCLH is up over five percent, so I'm sure that's indicative of the other, you know, air and sea stocks, so, you know, it's looking pretty good.   If you personally do well on any of these stocks that I'm showing right now that are, like, trending up and moving up pretty nicely, if you're one that does pretty well on any of these stocks, then you should personally put more interest in those. You know, they look really good, but again, I just said it before, I can't put out, like, a 50-stock watch list, right? You know, so, hey, I'm gonna start with the stocks that I'm putting out on this list personally to begin. You know, those, plus, I guess, the NEO, but that's even just kind of on the back burner for right now, so that's my plan. But, you know, hey, if there's anything else that looks good, folks, we'll look to call it out after the market opens up, coming up to just about eight or so minutes. All right, folks, for all of us on Facebook Live and YouTube, I'll just say this here one last time. If you wanted to join us inside our live trading room, especially today, especially for this morning, as we're doing our live trader stock workshop there, just go right down to the link on the blue banner below to sign up. If you wanted to just send over a quick question or email first before joining us live, feel more than free to do so, just you can send it right over to josh at ctutrading.com. I always like to post my email there at the end of these streams. All right, for all of us inside the live trading room, Brian and Norman and Patrick, Chris and Lori and Michael and Leda and Wayne, I look forward to talking to you all coming up, just coming up here after the market opens up. Come a cyber group member today. Just click the link below and receive all these amazing products and a world of knowledge for just $9. Do it.


We're Mason and Vanessa Woodruff and today we're making five different cheesecake recipes to see which we like best. As an average home baker, I'm always curious to try new recipes, but it can be really overwhelming trying to select which recipe I want to make online. There's so many out there. So this inspired me to start my bake-off series where I pick five highly reviewed dessert recipes of a particular dessert, say cheesecake, to see what I can learn about it and which recipe I like best. It's been such a fun way to experience new desserts and learn from more experienced bakers online. So join us today as we learn all about cheesecake from five of the internet's most popular recipes. Let's talk about crust. As far as ingredients go, they all consist of the typical combination of graham cracker crumbs, sugar, salt, and melted butter. You will see some slight differences here where a few recipes excluded salt or used a combination of white and brown sugar as seen in Sugar Spun Runs recipe. Moving on to method, all recipes called for pressing the crust mixture evenly across the bottom and up the sides of the springform pan, except for once upon a chef's recipe that only required crust on the bottom layer. Including crust up the sides definitely created some extra texture in the final product and made a difference when eating it. However, from the baker's perspective, it can be annoying trying to achieve this with essentially a crumbly sand. Just be sure to use a measuring cup to press the crust mixture into the pan instead of just using your hands. Lastly, all recipes required baking the crust before adding the filling except Sugar Spun Run. It is worth noting that there was no discernible difference in the taste or texture of these crusts despite their small variations. Moving on to the filling. Again, the ingredients for this portion will also be very similar with slight variations across the five recipes. You can expect to see cream cheese, sugar, sour cream, vanilla, and eggs used in all of the fillings. The main variation will come in the amount of each ingredient that is used. The most notable difference can be found in the use of lemon juice and lemon zest in two of the recipes. We found there to be no change in flavor when only lemon juice was used in Sally's Baking Addiction's recipe. However, the lemon zest and lemon juice combo used in once upon a chef's recipe resulted in such a strong flavor you could almost call it a lemon cheesecake. Once upon a chef was also the only recipe that called for a small amount of flour. Ultimately, I think this contributed to the final texture and provided a bit more structure. While the ingredients are important, we actually found the mixing method to have more of an impact. Because the ingredients are so similar, the differences really come down to the texture of each cheesecake, which was partly achieved by the mixing method. Most recipes emphasized not over mixing the batter to prevent incorporating air and therefore bubbles into the batter. We found that the least mixed batters resulted in a denser, creamier cheesecake. Whereas in contrast, the New York Times cooking recipe specifically called for significant mixing of the batter and resulted in the fluffiest cheesecake of them all, a true delight to eat. While the mixing method is important, the bake and cool down process just might be the most impactful on the final result. Sugar Spun Run and Sally's Baking Addiction both kept the oven at the same temperature for the entire bake, whereas New York Times cooking, once upon a chef and Lauren's latest, all started at higher oven temperatures to bake the crust before reducing to bake the cheesecake. All five recipes had different results when it came to browning and cracking on the tops of the cheesecakes. The New York Times cooking recipe was the only one that warned of and encouraged browning, which was a relief. In contrast, once upon a chef instructs to cover up the top of the cheesecake with foil if it starts to brown. Unfortunately, this caused the rising top to stick to the foil and it ripped upon removal, a sad sight to see after all the work put into it. Finally, Lauren's latest recipe had three reductions in the oven's temperature and it was the only cheesecake to achieve a perfect top with no browning and no cracks. This was a surprising result considering the fact that this was one of the two recipes that did not call for the infamous water bath. Prior to this experiment, I assumed a water bath was necessary for a perfect cheesecake. The second recipe that did not require a water bath was sugar spun run. However, as mentioned earlier, it did bake at the same temperature for the entire time, which contributed to the browning and cracking on top, leaving me to think that Lauren's latest tactic is the better one. It is worth noting that the two recipes on the bottom of our preference list were the two that did not use a water bath and both were quite dense. While most recipes bake for about an hour and 15 minutes, they all approach the cool down process very differently. And the cool down process is very important as it determines the final texture of your cheesecake. Allowing the cheesecake to slowly and gently cool down ensures a smooth top and a set filling. As usual, sugar spun run did nothing special for the cool down process. All you have to do is take it out of the oven and cool it to room temperature before chilling in the fridge overnight. From start to finish, this recipe is a no fuss, simple task. Next, once upon a chef instructs you to remove the cheesecake from the oven but allow it to cool down in the water bath for another 45 minutes before transferring to the fridge to chill overnight. The three remaining recipes instruct you to turn off the oven, crack the door and allow the cheesecake to cool for one hour. Lauren's latest recipe takes it one step further and instructs you to leave the oven door closed for 30 minutes prior to cracking it. All five recipes encourage you to chill the cheesecake in the fridge overnight to get the best results. Wow, that was a really long day of baking. But we learned quite a bit about cheesecake. Yes, we definitely did chef. Not a bad week to be the savory cook in the house. And as the resident taste tester of the house, let's get into our ranking, shall we? Sorry, the number five, sugar spun run. It's a very classic cheesecake, arguably the easiest recipe of the bunch. So if you need the easy recipe, can't go wrong here. Very creamy, ultra rich, borderline stodgy, would be it's negative when it's down here at the bottom. Next on the list is Lauren's latest. Look at the topping. There is no browning in sight, no cracks to be seen. I don't think that's ever happened making a cheesecake my entire life. So that's really exciting. It's got nice, great flavor. It is very creamy, almost ultra rich. So if you like a rich cheesecake, go for this one. Number three on the list, tried and true, always a safe bet for Vanessa, one of your early inspirations, Sally's baking addiction. This is a great cheesecake that borders somewhere between ultra rich and creamy, light and fluffy. The flavor on this is probably the strongest of the bunch. It's extra tangy, not in a bad way. Overall, really great cheesecake. Coming in at number two is one spot a chef. This is a nice fluffy cheesecake, which is our preferred texture and has a nice strong forward lemon flavor. You could almost say this is a lemon cheesecake, thanks to the inclusion of lemon zest and lemon juice. If you're looking for a lemon cheesecake, this one's for you. And Vanessa keeps telling me to shut up about blueberry compote, but if you have a blueberry compote recipe or some fresh summer strawberries, please put it on top of this cheesecake. It'll be a lot of work for one day, but you would enjoy it. Okay, drum roll. You can probably get ducked by now. New York Times, number one cheesecake. Buy a long shot. Buy a long shot. We love this cheesecake. It's aesthetically pleasing. It's nice and tall, but it's somehow the perfect ratio between crust to filling in the nicely browned topping is not only beautiful, but adds another texture between the two. It's almost like eating a cheesecake sandwich, which I never knew I wanted. I can't say enough of good things about it. Zero negatives, five stars would make again. It's the perfect cheesecake, at least for us. We found that we liked a more light and fluffy cheesecake as opposed to a rich and dense cheesecake. If you like a creamier cheesecake, you're gonna wanna start on this side and work your way this way. What kind of cheesecake do you guys like? Do you prefer rich and creamy or light and fluffy? Let us know in the comments below. And if you like this style of video where we do bake-offs or we've done other cook-offs, it's the savory cook in the house. I know a guy. Be sure to subscribe, check out some of our other videos, and we hope you enjoyed, and we'll see you next time. Bye.


Hey guys, it's Nate, AKA The Foot Accountant. Welcome back to the channel. We have our official Festival of Football car design that was released yesterday on the loading screen. There's actually two car designs. I wanna talk about why that is, and talk about why we might have some new live items coming into FIFA and some, I guess, theories around what those items may be. Also, team of the season rewards today. Ultimate team of the season rewards. And of course, yesterday with the re-release of the 88 Plus and the 90 Plus Tots packs, we have got fodder moving on the market. We have some cards going downwards before rewards. And I also wanna talk a bit about maybe a week in league rewards, market rise, and maybe our people are just saving packs for the promo that's gonna be coming on Friday. I don't really know. I think it's gonna be a mix of both. So we'll talk through that a little bit today as well. But first things first, we got some more information about Festival of Football and man, we were joking on stream earlier today that when I saw this car design, I actually put on sunglasses or shades because I mean, the car design is just so bright. I mean, they chose literally the two brightest colors they could have, bright yellow, bright green, and they just put it into one car design. And we have this whole loading screen here with like all the other colors under the rainbow and they chose just two. It almost makes the car design look a bit two-dimensional because it's just two colors with a little bit of black outlining thrown in there too. But I don't know why they did that. But it looks interesting, right? The design part looks really cool. And I'm curious to see how players look on it with the dynamic images and such. But what does this card mean, right? Well, I think we had a little bit of an insight into that because they released a second loading screen, which is the one that we see now as you load into FIFA. And it shows you the same exact card, but with two upward arrows on the top.  That means some sort of like upgrade boosted card or basically it tells us that we're getting some sort of new live item released on Friday. Now there's a lot of theories I'm gonna talk about today whether this is like a card's gonna be in packs and it's gonna be like the what if promo where cards upgrade based off of scenarios or maybe based off of how they perform in the tournament or this could be basically just a Euro version of showdown SBCs. So I'm gonna kind of take us down two different roads. I think those are the most likely scenarios with these cards right here. So first things first, what are other cards in FIFA that have those two arrows at the top? Well, I got one of my team and I can show you and that is this man right here, Mr. Neres, right? He's got the two arrows on top because this is a showdown item that was upgrade, right? Upgraded, he only got a plus one, but when these showdown cards get a plus one or a plus two, the little arrows at the top, they activate to be a light green instead of just being kind of dark and I guess black is what the color they are when they're not upgraded. Same thing with regular lawn and these are what if cards. The arrows are kind of dark and not there, then they get upgraded and boom, now they're white up in the top of the card. So I think with those arrows right there, that means to me that I don't, I know some people are saying these could be road to the final items, they could be live items that like upgrade over time, over the course of a tournament, but I really feel like this is gonna be a one time upgrade. I'm really leaning towards the fact that these cards would be basically the exact same as the showdown cards. I don't even know if these are gonna be like what if plusses, but that's kind of the two things that it could be. Maybe they're releasing these festival football cards into packs and hey, if a team gets past this stage, then boom, they get an upgrade or if they get out of match day and get to the, you know, out of the group stages and get to the knockout rounds or whatever, then they get the upgrade or I really feel like what it could be is literally just a festival football card for showdown SBCs and we, okay, so if that's the thing, right? Let's just kind of again, take you down this road. If it's just literally another card design for showdown SBCs, then that for me wouldn't, I wouldn't think there would be new players in packs this Friday. Now, with a whole card design, usually when they release a card design like that on a loading screen, usually it means those cards in packs though. So that's the other, I guess, thing in my mind is saying, hey, it might be more of like a what if promo where we had cards that had to complete objectives to get upgraded. So it's kind of a combination of those two things in my opinion on what we could be seeing on Friday, but regardless, this is our card design. They released it to us and it's very interesting, right? So some people are looking at this and saying, hey, since there's those arrows at the top, could be like a road to the final. I guess, yes, you could say so, but road to the final in the Champions League and Europa League and FIFA, those cards don't have the arrows. So the arrows usually signify a one-time permanent upgrade with the what if cards. That's a one-time permanent upgrade. And the same thing with the showdown cards. It's a one-time kind of boosted upgrade too. So that's the kind of update or upgrade I would be expecting for whatever kind of festival football cards, however these are gonna be put out. But I kind of wanted to talk you through those two scenarios right there, whether they're just SBCs, or whether it's cards that are in packs that have objectives or whatever to upgrade. But again, this is like how many times have we had live items this year in FIFA? This is like the year of live items, right? What if for the first time ever, you know, we have headliners, of course, we got ones to watch is the showdown cards are technically kind of like live items that upgrade. You've got road to the final. So we have more and more live items coming out and a brand new one with these Festival of Football cards. So I'm very curious to see how that has played out and how that has played through with the content on Friday. Now let's talk about the market a little bit too, right? Because let's say that this is like SBC based promo and that card design is there because they're gonna be releasing SBCs and players in that manner. We saw fodder take a jump yesterday. 84s were high, right? They took a jump right when the 88 plus and the 90 plus were released for a second time and now they have dropped down low into rewards. This happens almost every Wednesday into Thursday morning because you see people that say, oh my goodness, pack supplies coming, I gotta sell my cards. So right now you're looking at 84s back down in the five range, you're looking at 85s in the 10K range. Now this is not like super duper low, but hey, if you think this is gonna be an SBC promo and if you wanna speculate that much and you don't think there's gonna be a lot of lightning rounds or packs opened on Friday for what these loading screens may say as a new festival of football, sort of Euro's Copa America content, then maybe you're watching SBC fodder today during rewards because there's probably gonna be another little bit of a dip and prices are gonna go even lower during rewards, especially on bid. I mean, yes, when rewards come out today, there might be some people going out and buying those cards to finish up an 88 plus or a 90 plus team and season player, maybe to finish Usman Dembele or any of the SBCs that are still active that have been released this week, like Tevez, again Dembele, he expires tomorrow and Javi Martinez, all this stuff expires on Friday. So you might have a few people that are going to craft these SBCs after rewards, which could make fodder go up a little bit after weakening rewards, but that's something you could keep an eye on. I mean, again, in the long run, these cards right now are still pretty cheap. Under 6,000 coins for 84s when they peak multiple times above 10,000 coins this year. I mean, even yesterday and today, there were some 84s that were hitting 10K, especially if you list for Lazies. I sold some 84s at 10K today too. So if you think that the promo's gonna be SBC based, then maybe you would want to get it on those fodder cards earlier, but if you think the promo's gonna be pack based and you think there's gonna be cards in packs based off of this loading screen and cards being shown on the front, then maybe you're waiting until like Friday, I guess, because you're thinking lightning rounds, you're thinking more supply for the market there. And I guess we could get some more information on the loading screen today. Like if they showed players on the loading screen if they hinted positions, if they hinted stats or nations or anything like that, then that would kind of make us think that it's gonna be sort of a pack promo and not more of an SBC based promo. And then you would say, all right, I kinda wanna wait on the fodder until Friday with the lightning rounds and stuff like that. So the one thing we're kind of still waiting on too is the guaranteed Ultimate Tots SBC. And a lot of people are like, AO, where is that at? Now we don't have any code dropped for that still in this game. We do not have an Ultimate Tots SBC added to the code. If that were to be added, then it could be dropped today. If they dropped it early today on Thursday into the daytime, then that would maybe make fodder go up even more. Of course, some of the higher rated fodder too because that should be an 88 or an 89 rated squad if it were to be released. Now again, last year, I don't think we've talked about this too much because I didn't expect it to happen this way again. But they released, I believe, the Ultimate Tots guaranteed SBC after Ultimate Team of the Season had technically ended. Like, Ultimate Tots ended on Friday, summer heat started. Then they released the Ultimate Tots SBC on Saturday, the day after that. So that has me very curious as maybe that's gonna happen again today. So just watch of course for the code and see if that is released. And when that code, if that code does drop, then I do think you're gonna see some people go out and start to buy up some of those cards to SBC fodder because yes, they have dropped a little bit lower. And it's very interesting to see the people that have invested in that stuff kind of sell off.  I have not. I really have not. I've listed more of it up today and I've gotten some more lazy sales. But that's what I would say to do.  This guy, Parejo, I'm pretty sure is like 13,000 coins right now. I just lazy sold them for 20,000 coins, right? Erickson, I sold at 16K. He shows on foot bin as like 12K. Deenye is like a 7K card. I'm selling him at 10. So the same thing with Pogba, right? Pogba shows on foot bin as like 19K. Sold us at 24. So all I'm saying is list your cards up for lazies. There's people out there doing SBCs and they don't take the time to search for the actual lowest price. They just go and buy the card and you'll be surprised how many lazy sales that you do get. Now, let's focus on weak and weak rewards today, right? Because again, you have a lot of coins coming onto the market today with this ultimate team of the season being in reds and being in tradable 100K and sorry, not 100K, top 200 and elite packs, right? A lot of supply today. Now I wanna talk about this because last year during Ultimate Tots rewards, it was very easy to see since this team is so small and they made it only 15 players and you have a lot of those like three player packs and a lot of those, you know, to 11 player packs being open today for tradable elite plus rewards.  Cancelo, I think, takes a drop today. I think DeVry, Oblak, we're gonna be sick of them, right? Because everybody's gonna be seeing DeVry and Oblak in their packs. Now if you see Oblak, it's like, okay, almost, you know, a lot of Tots could be behind him still, but you know, a lot of Kane, Oblak, DeVry or the Fridge as people call him and Cancelo today from rewards in my opinion.   They're gonna open their top 100 packs and you know, inside of it, there's gonna be Mbappe and Ronaldo or Mbappe and Ronaldo and Messi and it's gonna be like OMG, this guy just made like 15, 16 million coins, right? That's, there's gonna be crazy amounts of coins made on part of the market today. So that in my mind does make me think that you might have some cards just very popular team this season. It's like maybe this Neymar who right now is at like 10 million coins. He's actually up from where he was. This guy might go higher today. You might have some also, some higher tier icons. Like I keep looking at this 94R9.  He's been 5.1 to 5.2 at some points this week. I feel like this 94R9, he's dropped off a lot. He could rebound back a little bit. Even some of your icon moments potentially as well, maybe like a hullet, maybe a croif. Some of these guys you might see more sales on them today because some of those elite plus level players are gonna have big time money, big time money to go out on the market and to buy some of these cards and spend some coins, right? So that's one thing I do think some of the markets gonna uptick today. Now I think people also are gonna be like, well Nate, are people saving packs for the new promo that's coming out on Friday tomorrow? And some people might be because I feel like people have seen how the pack weight for summer heat is just, not summer heat, sorry, for ultimate team the season is just not been that good. And some people might be seeing that and saying I'm just gonna hold my packs. I'm not gonna spend any coins this week or open my packs and just wait until Friday. So I feel like there's a slight risk of that. And I'm not expecting a huge market rise today but I think a lot of people who did Ust-Mandem-Belay, you know, trying to link those kind of cards together.  I bought one at 330 today. Like that's really low. I'm gonna pick this up and that's another one because again, that's a card that rose up a lot last week.   I think some of these Ultimate Tots cards, quick note, I think some of these cards will take a dip at rewards and then go up. Like people wanna buy Theo Hernandez, right? This is one of the top tier left-backs in the game, 550K right now in the PlayStation. I would not be surprised if a card like this goes up after a reward today. Goes down for a bit and then goes up. So I know stuff like that.  He was 250 earlier in the week. But a lot of people getting a guy like Cancelo today. Actually, this Rubin Diaz is a pretty sizable undercut. There's a 280 and a 264. But you know, I'm not gonna really involve myself with this guy because I think a lot of people are expecting Cancelo to be packed. And yeah, this guy might go up. But you know what? I'm gonna try to put myself in some other areas of the market where people might not be buying as many cards and just see if that kinda works out well today too. Cause I don't wanna be in a place that I feel like is over-invested. So like this Kingsley Coman was interesting. He was 300K flat earlier today. I think that was a really good price for this card. He could rebound with those French links. Again, with the Usman being out and that kind of being a hype SBC. So I'm kinda looking at some icons. Not necessarily all French icons, but just cards that dropped off a lot from last week. Like this Roberto Carlos was 560K on the weekend. I got one at 438 or something like that earlier today. That was a big W. This Puskas, wow, 465. Is that gonna go unbid? Because I would gladly pick that up unbid for 465 literally right now cause I think this is gonna be 540K tomorrow. This Etto was like 485. He's back up to 550. You know, even some of your Argentine links might do pretty good. Zanetti's cards. I know I'm kinda watching like Maradona as well. I've kinda spent all my coins to be honest with you. But you know, guys that did Tevez and maybe they're trying to play with Chan Calais and some of those other cards. You know, this Maradona's up 100,000 coins. He might keep going. And that's one thing I wanna point out as well. These cards are gonna fall behind the radar today. These guys are gonna kinda fall behind the radar. Like look at this right here. Chan Calais is 246,000 coins. If this is a card that you guys want for your team, 100% start watching this item because he is dropping of course from where he was. And I think there's potential that this guy gets supplied at rewards and then bounces up big time afterwards because a lot of people are linking him to Tevez. So that's one thing I keep watch out for for sure. And I'm gonna be in a little bit of a bidding war here with this Pushkas probably because some other smart trader was watching this guy expire as well. So as you can tell, I'm watching a lot of icons because I like the rarity for the mids and the baby icons. I talk about that a lot. So you know, just trying to find some undercuts, try some open bids and deals tonight on just really rare cards that I think could go up. But again, focus on the meta stuff. And again, just look at some cards that rose last week, like that Jordi Alba. He is one that rose pretty much last week. I know there's tail Hernandez in the team, but I don't think that's gonna affect the Jordi Alba price that much. They're pretty different price ranges and also very, very different links. So those are my thoughts on that. I do think you'll see the market rise a little bit today. But again, I think the fodder part of the market's interesting for me. And I'm very curious to see what happens with, you know, people maybe not opening their packs because of the promos tomorrow. But I, you know, if I were you guys, I wouldn't not open your packs. I would still open them. And I still got a good deal on this push guys. So I'm happy about that. I'll be able to sell that well above 500 caves surely tomorrow. So happy about that one for sure. That's a GG. If it lets me exit there, boom, there we go. So I think that's the video for today boys to be completely honest with you. Hopefully we get some pack code added for the ultimate totes guaranteed. That would be like a last splash of hype for the day today for ultimate team this season. But of course, good luck for your guys as reds. I hope you all get some sort of crazy card in your red picks today. I've got silver one reward. So we'll see if silver one can be OP for us yet again. But if you have any questions or you have some ideas about what you think this new promo is going to be, drop them down below in the comments for sure. Because that's going to be a lot of the hype and a lot of the questioning over the next day or so is what in the world is this promo going to look like and what is it going to be? So hopefully we get some more information on a loading screen about that today as well. If you enjoyed this video, smash the thumbs up on a comment down below if you have any questions and subscribe if you're new. This has been Nate the Foot Accountant. I'll catch you guys later. Peace.


And then we've got the FICA, which is usually just a 6260 times 0.062. Looks a little bit different here. I'm not sure exactly, but in any case, it's usually more of a flat tax, so it's usually more of a straightforward kind of tax. But there it is. And then you got the payroll tax payable. Then we've got the FICA employer. This is the FICA tax, which includes social security and Medicare. So social security is 0.062 plus 0.0145 or 0.0765 times the 6260.