Edit tour

Windows Analysis Report
https://2itchyfeets.com

Overview

General Information

Sample URL:	https://2itchyfeets.com
Analysis ID:	675655
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Antivirus detection for URL or domain

Found iframes

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5968 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1916 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 5044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=6620 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6596 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6608 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 6180 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2itchyfeets.com MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://2itchyfeets.com/wp-content/uploads/2021/02/cropped-Andaman-2.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-342x298.jpg	Avira URL Cloud: Label: malware
Source: http://2itchyfeets.com/	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.fitvids.js?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/style.css?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/02/1-1-100x75.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/06/logo-black.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/04/IMG-8611-1-342x298.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/js/enscroll-0.5.2.min.js?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/icons.css?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.7	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-342x298.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-342x298.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-342x298.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/fontawesome-webfont.woff2?v=4.7.0	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/12/PXL_20201124_054420751-1-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/03/IMG_5786-300x300.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/ionicons.ttf?v=2.0.0	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/bootstrap.min.css?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/responsive.css?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/2	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2022/05/GOPR6148.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/04/GOPR14442-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/css/custom_style.css?ver=6.0.1	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/js/owl.carousel.min.js?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.0.1	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/js/highfill.js?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/fonts/tauri/TwMA-IISS0AM3LpSUnIdTwqP.woff	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-342x298.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/06/IMG-1469-100x75.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.3.0	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2022/02/PXL_20210220_083427259-1-scaled-e1648402042267-1080x692.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2020/03/PSX_20200318_224946-100x75.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/05/IMG_E9975-100x75.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-100x75.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/uploads/2021/09/GOPR3232-1-1024x768.jpg	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.sticky-kit.js?ver=2.9	Avira URL Cloud: Label: malware
Source: https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.3.0	Avira URL Cloud: Label: malware

Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137195&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2F&ea=0&pra=5&wgl=1&dt=1659137194766&bpp=6&bdt=1923&idt=996&shv=r20220727&mjsv=m202207210101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=3759682058415&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137196&ga_hid=1848813144&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44763505%2C31068622%2C31062931&oid=2&pvsid=2789708031804395&tmod=883543464&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=1165
Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html
Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137195&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2F&ea=0&pra=5&wgl=1&dt=1659137194766&bpp=6&bdt=1923&idt=996&shv=r20220727&mjsv=m202207210101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=3759682058415&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137196&ga_hid=1848813144&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44763505%2C31068622%2C31062931&oid=2&pvsid=2789708031804395&tmod=883543464&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=1165
Source: https://2itchyfeets.com/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html
Source: https://2itchyfeets.com/category/india/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/category/india/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137237&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2Fcategory%2Findia%2F&ea=0&pra=5&wgl=1&dt=1659137237083&bpp=11&bdt=1535&idt=352&shv=r20220727&mjsv=m202207280101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D76bfd59f66e51f48-22852a22dfcd0097%3AT%3D1659104796%3ART%3D1659104796%3AS%3DALNI_MbqciKXyZSPbJgUuQvdiQrXwYsjIw&nras=1&correlator=1730307689834&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137237&ga_hid=932436335&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44763506%2C31068684%2C42531605&oid=2&pvsid=1869249780112009&tmod=2112119952&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=390
Source: https://2itchyfeets.com/category/india/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137248&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2Fcategory%2Findia%2Fsikkim%2F&ea=0&pra=5&wgl=1&dt=1659137248439&bpp=6&bdt=923&idt=164&shv=r20220727&mjsv=m202207280101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D76bfd59f66e51f48-22852a22dfcd0097%3AT%3D1659104796%3ART%3D1659104796%3AS%3DALNI_MbqciKXyZSPbJgUuQvdiQrXwYsjIw&nras=1&correlator=870368994427&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137249&ga_hid=26508960&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C44763505%2C31068487%2C44768832%2C31068684%2C42531606&oid=2&pvsid=3467133236738782&tmod=2107153340&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=241
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137253&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2Fcategory%2Findia%2Fkashmir%2F&ea=0&pra=5&wgl=1&dt=1659137252816&bpp=59&bdt=891&idt=977&shv=r20220727&mjsv=m202207260101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D76bfd59f66e51f48-22852a22dfcd0097%3AT%3D1659104796%3ART%3D1659104796%3AS%3DALNI_MbqciKXyZSPbJgUuQvdiQrXwYsjIw&nras=1&correlator=8017640478921&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137254&ga_hid=937261098&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C44763505%2C31068639&oid=2&pvsid=2690894056148535&tmod=475948022&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&cms=2&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=1040
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: Iframe src: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: Iframe src: https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9099252935780932&output=html&adk=1812271804&adf=3025194257&lmt=1659137260&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2F2itchyfeets.com%2Fcategory%2Findia%2Fandaman%2F&ea=0&pra=5&wgl=1&dt=1659137259380&bpp=8&bdt=1290&idt=639&shv=r20220727&mjsv=m202207210101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D76bfd59f66e51f48-22852a22dfcd0097%3AT%3D1659104796%3ART%3D1659104796%3AS%3DALNI_MbqciKXyZSPbJgUuQvdiQrXwYsjIw&nras=1&correlator=7683434238185&frm=20&pv=2&ga_vid=1112924731.1659137195&ga_sid=1659137260&ga_hid=2119705611&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C44763506%2C31068622%2C42531607%2C31067825&oid=2&pvsid=1575467177600286&tmod=880190330&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=890
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html

Source: https://2itchyfeets.com/	HTTP Parser: HTML title missing
Source: https://2itchyfeets.com/	HTTP Parser: HTML title missing
Source: https://2itchyfeets.com/category/india/	HTTP Parser: HTML title missing
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: HTML title missing
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: HTML title missing
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: HTML title missing

Source: https://2itchyfeets.com/	HTTP Parser: No <meta name="author".. found
Source: https://2itchyfeets.com/	HTTP Parser: No <meta name="author".. found
Source: https://2itchyfeets.com/category/india/	HTTP Parser: No <meta name="author".. found
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: No <meta name="author".. found
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: No <meta name="author".. found
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: No <meta name="author".. found

Source: https://2itchyfeets.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://2itchyfeets.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://2itchyfeets.com/category/india/	HTTP Parser: No <meta name="copyright".. found
Source: https://2itchyfeets.com/category/india/sikkim/	HTTP Parser: No <meta name="copyright".. found
Source: https://2itchyfeets.com/category/india/kashmir/	HTTP Parser: No <meta name="copyright".. found
Source: https://2itchyfeets.com/category/india/andaman/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 34.107.249.112:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.76.3:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.37:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.53.42.63:443 -> 192.168.2.6:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.53.42.63:443 -> 192.168.2.6:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.86:443 -> 192.168.2.6:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.203.97:443 -> 192.168.2.6:49840 version: TLS 1.2

Source: index.txt.tmp.0.dr	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: 000003.log0.0.dr	String found in binary or memory: https_www.youtube.com_0@1YtIdbMeta equals www.youtube.com (Youtube)
Source: 000006.log.0.dr, 000011.log.0.dr, 000008.log.0.dr, 000004.log.0.dr, 000003.log0.0.dr	String found in binary or memory: https_www.youtube.com_0@1 equals www.youtube.com (Youtube)

Source: History Provider Cache.0.dr	String found in binary or memory: https://2itchyfeets.com/2
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.0.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://apis.google.com
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr, 187eb575-77c2-4ca0-aa7e-c54634e1529f.tmp.1.dr	String found in binary or memory: https://dns.google
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: craw_window.js.0.dr, manifest.json.0.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.0.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.0.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr, craw_window.js.0.dr, craw_background.js.0.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.0.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: 0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: index.txt.tmp.0.dr	String found in binary or memory: https://www.youtube.com/

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1916 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2itchyfeets.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=6620 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6608 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1916 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=6620 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6608 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1624,17123832975864918833,11013922226083120991,131072 --lang=en-US --service-sandbox-type=video_capture --enable-audio-service-sandbox --mojo-platform-channel-handle=6608 /prefetch:8	Jump to behavior

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Name	IP	Active	Malicious	Reputation
gstaticadssl.l.google.com	216.58.215.227	true	false	high
stats.wp.com	192.0.76.3	true	false	high
pagead46.l.doubleclick.net	142.250.203.98	true	false	high
accounts.google.com	142.250.203.109	true	false	high
www-googletagmanager.l.google.com	172.217.168.8	true	false	high
i.ytimg.com	172.217.168.86	true	false	high
www.tripoto.com	34.107.249.112	true	false	high
adservice.google.com	172.217.168.2	true	false	high
static-doubleclick-net.l.google.com	142.250.203.102	true	false	high
youtu.be	172.217.168.14	true	false	high
2itchyfeets.com	103.53.42.63	true	false	unknown
c0.wp.com	192.0.77.37	true	false	high
partnerad.l.doubleclick.net	172.217.168.66	true	false	high
youtube-ui.l.google.com	142.250.203.110	true	false	high
googleads.g.doubleclick.net	172.217.168.34	true	false	high
play.google.com	142.250.203.110	true	false	high
pixel.wp.com	192.0.76.3	true	false	high
photos-ugc.l.googleusercontent.com	142.250.203.97	true	false	high
lb.wordpress.com	192.0.78.12	true	false	high
www.google.com	142.250.203.100	true	false	high
clients.l.google.com	216.58.215.238	true	false	high
s.w.org	192.0.77.48	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
adservice.google.de	unknown	unknown	false	high
static.doubleclick.net	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
v0.wordpress.com	unknown	unknown	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
34.107.249.112	www.tripoto.com	United States	15169	GOOGLEUS	false
216.58.215.238	clients.l.google.com	United States	15169	GOOGLEUS	false
172.217.168.8	www-googletagmanager.l.google.com	United States	15169	GOOGLEUS	false
142.250.203.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.168.86	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.203.98	pagead46.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.203.109	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.203.102	static-doubleclick-net.l.google.com	United States	15169	GOOGLEUS	false
216.58.215.227	gstaticadssl.l.google.com	United States	15169	GOOGLEUS	false
142.250.203.100	www.google.com	United States	15169	GOOGLEUS	false
103.53.42.63	2itchyfeets.com	India	394695	PUBLIC-DOMAIN-REGISTRYUS	false
192.0.76.3	stats.wp.com	United States	2635	AUTOMATTICUS	false
172.217.168.2	adservice.google.com	United States	15169	GOOGLEUS	false
192.0.77.37	c0.wp.com	United States	2635	AUTOMATTICUS	false
172.217.168.14	youtu.be	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

IP
192.168.2.1
127.0.0.1

Source	Detection	Scanner	Label	Link
https://2itchyfeets.com	8%	Virustotal		Browse
https://2itchyfeets.com	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label	Link
https://2itchyfeets.com/wp-content/uploads/2021/02/cropped-Andaman-2.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-342x298.jpg	100%	Avira URL Cloud	malware
http://2itchyfeets.com/	8%	Virustotal		Browse
http://2itchyfeets.com/	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.fitvids.js?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/style.css?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/02/1-1-100x75.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/06/logo-black.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/04/IMG-8611-1-342x298.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/js/enscroll-0.5.2.min.js?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/icons.css?ver=2.9	100%	Avira URL Cloud	malware
https://dns.google	0%	URL Reputation	safe
https://2itchyfeets.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.7	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-342x298.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-342x298.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-342x298.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/fontawesome-webfont.woff2?v=4.7.0	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/12/PXL_20201124_054420751-1-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG_5786-300x300.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/ionicons.ttf?v=2.0.0	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/bootstrap.min.css?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/responsive.css?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/2	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2022/05/GOPR6148.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/04/GOPR14442-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/css/custom_style.css?ver=6.0.1	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/js/owl.carousel.min.js?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.0.1	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/js/highfill.js?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/fonts/tauri/TwMA-IISS0AM3LpSUnIdTwqP.woff	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-342x298.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/06/IMG-1469-100x75.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.3.0	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2022/02/PXL_20210220_083427259-1-scaled-e1648402042267-1080x692.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2020/03/PSX_20200318_224946-100x75.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/05/IMG_E9975-100x75.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-100x75.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/uploads/2021/09/GOPR3232-1-1024x768.jpg	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.sticky-kit.js?ver=2.9	100%	Avira URL Cloud	malware
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.3.0	100%	Avira URL Cloud	malware

Name	Malicious	Antivirus Detection	Reputation
https://c0.wp.com/p/jetpack/11.0/css/jetpack.css	false		high
https://2itchyfeets.com/wp-content/uploads/2021/02/cropped-Andaman-2.jpg	true	Avira URL Cloud: malware	unknown
https://www.tripoto.com/img/widget/tripoto_approved_blogger_2.jpg	false		high
https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css	false		high
https://c0.wp.com/c/6.0.1/wp-includes/js/dist/vendor/wp-polyfill.min.js	false		high
http://2itchyfeets.com/	true	8%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.fitvids.js?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/style.css?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/masonry.min.js	false		high
https://2itchyfeets.com/wp-content/uploads/2019/02/1-1-100x75.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/06/logo-black.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2019/04/IMG-8611-1-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi_webp/mCgfMcVAc4U/maxresdefault.webp	false		high
https://2itchyfeets.com/wp-content/themes/highfill/js/enscroll-0.5.2.min.js?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/09/PXL_20201124_045302761-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://www.google.com/recaptcha/api2/aframe	false		high
https://c0.wp.com/c/6.0.1/wp-includes/css/dist/block-library/style.min.css	false		high
https://2itchyfeets.com/wp-content/themes/highfill/css/icons.css?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.7	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/category/india/andaman/	true		unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/wp-mediaelement.min.css	false		high
https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/10/IMG_20210214_214410_766-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/jquery/jquery-migrate.min.js	false		high
https://static.doubleclick.net/instream/ad_status.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false		high
https://stats.wp.com/e-202228.js	false		high
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-includes/js/wp-emoji-release.min.js?ver=6.0.1	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://pixel.wp.com/g.gif?v=ext&j=1%3A11.0&blog=158033015&post=0&tz=0&srv=2itchyfeets.com&host=2itchyfeets.com&ref=&fcp=3438&rand=0.012172007544815289	false		high
https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/fontawesome-webfont.woff2?v=4.7.0	true	Avira URL Cloud: malware	unknown
https://googleads.g.doubleclick.net/pagead/html/r20220727/r20190131/zrt_lookup.html	false		high
https://2itchyfeets.com/	true		unknown
https://2itchyfeets.com/wp-content/uploads/2021/12/PXL_20201124_054420751-1-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/mediaelement-migrate.min.js	false		high
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG_5786-300x300.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/	true		unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/mejs-controls.svg	false		high
https://2itchyfeets.com/category/india/sikkim/	true		unknown
https://2itchyfeets.com/wp-content/themes/highfill/css/fonts/ionicons.ttf?v=2.0.0	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/05/PXL_20201030_1053397492-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/css/bootstrap.min.css?ver=2.9	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/embed/mCgfMcVAc4U?controls=0&rel=0&disablekb=1&showinfo=0&modestbranding=0&html5=1&iv_load_policy=3&autoplay=0&end=0&loop=0&playsinline=0&start=0&nocookie=false&enablejsapi=1&origin=https%3A%2F%2F2itchyfeets.com&widgetid=1	false		high
https://2itchyfeets.com/wp-content/themes/highfill/css/responsive.css?ver=2.9	true	Avira URL Cloud: malware	unknown
https://youtu.be/mCgfMcVAc4U?_=1	false		high
https://c0.wp.com/c/6.0.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js	false		high
https://c0.wp.com/c/6.0.1/wp-includes/js/jquery/jquery.min.js	false		high
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/renderers/vimeo.min.js	false		high
https://2itchyfeets.com/wp-content/uploads/2022/05/GOPR6148.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/04/GOPR14442-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/css/custom_style.css?ver=6.0.1	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/js/owl.carousel.min.js?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.0.1	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/js/highfill.js?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/fonts/tauri/TwMA-IISS0AM3LpSUnIdTwqP.woff	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2021/04/IMG_20201023_182126_102_edited-e1618305673125-342x298.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2019/06/IMG-1469-100x75.jpg	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/wp-mediaelement.min.js	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/css/style.min.css?ver=4.3.0	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2022/02/PXL_20210220_083427259-1-scaled-e1648402042267-1080x692.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/category/india/	true		unknown
https://2itchyfeets.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2020/03/PSX_20200318_224946-100x75.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2019/05/IMG_E9975-100x75.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/mystickymenu.min.js?ver=2.5.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/uploads/2019/03/IMG-9908-100x75.jpg	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/imagesloaded.min.js	false		high
https://2itchyfeets.com/wp-content/uploads/2021/09/GOPR3232-1-1024x768.jpg	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/wp-content/themes/highfill/js/jquery.sticky-kit.js?ver=2.9	true	Avira URL Cloud: malware	unknown
https://2itchyfeets.com/category/india/kashmir/	true		unknown
https://yt3.ggpht.com/ytc/AKedOLQeV4iUlsxGdc0Wn2sl_yIEP1XDDG_BSCTgDJdY_A=s68-c-k-c0x00ffffff-no-rj	false		high
https://www.google.com/js/th/f2rKiNYtp5mcnE6SIkgPJqBXFZM4eH8COPZoJ440RtI.js	false		high
https://2itchyfeets.com/wp-content/plugins/social-warfare/assets/js/script.min.js?ver=4.3.0	true	Avira URL Cloud: malware	unknown
https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/mediaelement-and-player.min.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.google.com	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.0.dr	false		high
https://dns.google	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr, 187eb575-77c2-4ca0-aa7e-c54634e1529f.tmp.1.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.0.dr	false		high
https://www.youtube.com/	index.txt.tmp.0.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.0.dr	false		high
https://www.google.com/	manifest.json.0.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.0.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	craw_window.js.0.dr, manifest.json.0.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.0.dr	false		high
https://accounts.google.com	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	false		high
https://2itchyfeets.com/2	History Provider Cache.0.dr	true	Avira URL Cloud: malware	unknown
https://apis.google.com	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_window.js.0.dr, craw_background.js.0.dr	false		high
https://clients2.google.com	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.0.dr	false		high
https://ogs.google.com	0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp.1.dr	false		high

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	675655
Start date and time: 29/07/202216:25:22	2022-07-29 16:25:22 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://2itchyfeets.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.win@41/133@34/18
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: http://2itchyfeets.com/ Browse: https://2itchyfeets.com/category/india/ Browse: https://2itchyfeets.com/category/india/sikkim/ Browse: https://2itchyfeets.com/category/india/kashmir/ Browse: https://2itchyfeets.com/category/india/andaman/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jul 29, 2022 16:26:31.679094076 CEST	192.168.2.6	8.8.8.8	0x4ecc	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:31.679714918 CEST	192.168.2.6	8.8.8.8	0xed1e	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:31.683223009 CEST	192.168.2.6	8.8.8.8	0xa594	Standard query (0)	2itchyfeets.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:33.462306023 CEST	192.168.2.6	8.8.8.8	0x4913	Standard query (0)	c0.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.024367094 CEST	192.168.2.6	8.8.8.8	0x255e	Standard query (0)	v0.wordpress.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.025095940 CEST	192.168.2.6	8.8.8.8	0x67b8	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.692305088 CEST	192.168.2.6	8.8.8.8	0xdb96	Standard query (0)	www.tripoto.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.753361940 CEST	192.168.2.6	8.8.8.8	0x3f85	Standard query (0)	stats.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:35.320951939 CEST	192.168.2.6	8.8.8.8	0x4c62	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.560194016 CEST	192.168.2.6	8.8.8.8	0x8423	Standard query (0)	adservice.google.de	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.560322046 CEST	192.168.2.6	8.8.8.8	0xc57d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.769419909 CEST	192.168.2.6	8.8.8.8	0x3dc	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.521290064 CEST	192.168.2.6	8.8.8.8	0x1824	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.653989077 CEST	192.168.2.6	8.8.8.8	0x3729	Standard query (0)	youtu.be	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:38.944856882 CEST	192.168.2.6	8.8.8.8	0x58cd	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.793381929 CEST	192.168.2.6	8.8.8.8	0xbbaf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.911147118 CEST	192.168.2.6	8.8.8.8	0xc1ce	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.917085886 CEST	192.168.2.6	8.8.8.8	0x8777	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.142395973 CEST	192.168.2.6	8.8.8.8	0xfe09	Standard query (0)	2itchyfeets.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.423429966 CEST	192.168.2.6	8.8.8.8	0x1e1d	Standard query (0)	www.tripoto.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.606121063 CEST	192.168.2.6	8.8.8.8	0xf7d9	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.673135996 CEST	192.168.2.6	8.8.8.8	0x895e	Standard query (0)	c0.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.382045984 CEST	192.168.2.6	8.8.8.8	0x583f	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.386466980 CEST	192.168.2.6	8.8.8.8	0x678	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:12.349261999 CEST	192.168.2.6	8.8.8.8	0x7c0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:34.319102049 CEST	192.168.2.6	8.8.8.8	0x11cb	Standard query (0)	2itchyfeets.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.023499966 CEST	192.168.2.6	8.8.8.8	0x1981	Standard query (0)	adservice.google.de	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.025341034 CEST	192.168.2.6	8.8.8.8	0x7d02	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.029643059 CEST	192.168.2.6	8.8.8.8	0x505c	Standard query (0)	c0.wp.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.075685978 CEST	192.168.2.6	8.8.8.8	0x47bc	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.690042019 CEST	192.168.2.6	8.8.8.8	0x3e0d	Standard query (0)	v0.wordpress.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.698906898 CEST	192.168.2.6	8.8.8.8	0xee9b	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:39.147728920 CEST	192.168.2.6	8.8.8.8	0x7339	Standard query (0)	www.tripoto.com	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:40.328155041 CEST	192.168.2.6	8.8.8.8	0xfcb7	Standard query (0)	pixel.wp.com	A (IP address)	IN (0x0001)

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Jul 29, 2022 16:26:31.696219921 CEST	8.8.8.8	192.168.2.6	0x4ecc	No error (0)	accounts.google.com		142.250.203.109	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:31.697299004 CEST	8.8.8.8	192.168.2.6	0xed1e	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:31.697299004 CEST	8.8.8.8	192.168.2.6	0xed1e	No error (0)	clients.l.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:32.074302912 CEST	8.8.8.8	192.168.2.6	0xa594	No error (0)	2itchyfeets.com		103.53.42.63	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:33.448631048 CEST	8.8.8.8	192.168.2.6	0x5234	No error (0)	www-googletagmanager.l.google.com		172.217.168.8	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:33.481235027 CEST	8.8.8.8	192.168.2.6	0x4913	No error (0)	c0.wp.com		192.0.77.37	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.043513060 CEST	8.8.8.8	192.168.2.6	0x255e	No error (0)	v0.wordpress.com	lb.wordpress.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:34.043513060 CEST	8.8.8.8	192.168.2.6	0x255e	No error (0)	lb.wordpress.com		192.0.78.12	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.043513060 CEST	8.8.8.8	192.168.2.6	0x255e	No error (0)	lb.wordpress.com		192.0.78.13	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.043745995 CEST	8.8.8.8	192.168.2.6	0x67b8	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.051086903 CEST	8.8.8.8	192.168.2.6	0xf73d	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.715488911 CEST	8.8.8.8	192.168.2.6	0xdb96	No error (0)	www.tripoto.com		34.107.249.112	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:34.772217035 CEST	8.8.8.8	192.168.2.6	0x3f85	No error (0)	stats.wp.com		192.0.76.3	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:35.340403080 CEST	8.8.8.8	192.168.2.6	0x4c62	No error (0)	googleads.g.doubleclick.net		172.217.168.34	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.586019993 CEST	8.8.8.8	192.168.2.6	0x15de	No error (0)	partnerad.l.doubleclick.net		172.217.168.66	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.587440014 CEST	8.8.8.8	192.168.2.6	0xc57d	No error (0)	adservice.google.com		172.217.168.2	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.587461948 CEST	8.8.8.8	192.168.2.6	0x8423	No error (0)	adservice.google.de	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:36.587461948 CEST	8.8.8.8	192.168.2.6	0x8423	No error (0)	pagead46.l.doubleclick.net		142.250.203.98	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:36.786397934 CEST	8.8.8.8	192.168.2.6	0x3dc	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	youtube-ui.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	youtube-ui.l.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	youtube-ui.l.google.com		172.217.168.14	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	youtube-ui.l.google.com		172.217.168.46	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.559418917 CEST	8.8.8.8	192.168.2.6	0x1824	No error (0)	youtube-ui.l.google.com		172.217.168.78	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:37.681607008 CEST	8.8.8.8	192.168.2.6	0x3729	No error (0)	youtu.be		172.217.168.14	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:38.972815037 CEST	8.8.8.8	192.168.2.6	0x58cd	No error (0)	static.doubleclick.net	static-doubleclick-net.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:38.972815037 CEST	8.8.8.8	192.168.2.6	0x58cd	No error (0)	static-doubleclick-net.l.google.com		142.250.203.102	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.820475101 CEST	8.8.8.8	192.168.2.6	0xbbaf	No error (0)	www.google.com		142.250.203.100	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.937203884 CEST	8.8.8.8	192.168.2.6	0xc1ce	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:39.937203884 CEST	8.8.8.8	192.168.2.6	0xc1ce	No error (0)	photos-ugc.l.googleusercontent.com		142.250.203.97	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.942994118 CEST	8.8.8.8	192.168.2.6	0x8777	No error (0)	i.ytimg.com		172.217.168.86	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.942994118 CEST	8.8.8.8	192.168.2.6	0x8777	No error (0)	i.ytimg.com		142.250.203.118	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.942994118 CEST	8.8.8.8	192.168.2.6	0x8777	No error (0)	i.ytimg.com		216.58.215.246	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.942994118 CEST	8.8.8.8	192.168.2.6	0x8777	No error (0)	i.ytimg.com		172.217.168.22	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:39.942994118 CEST	8.8.8.8	192.168.2.6	0x8777	No error (0)	i.ytimg.com		172.217.168.54	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.442943096 CEST	8.8.8.8	192.168.2.6	0x1e1d	No error (0)	www.tripoto.com		34.107.249.112	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.535181046 CEST	8.8.8.8	192.168.2.6	0xfe09	No error (0)	2itchyfeets.com		103.53.42.63	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.625232935 CEST	8.8.8.8	192.168.2.6	0xf7d9	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:47.691854000 CEST	8.8.8.8	192.168.2.6	0x895e	No error (0)	c0.wp.com		192.0.77.37	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.409755945 CEST	8.8.8.8	192.168.2.6	0x583f	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:26:48.409755945 CEST	8.8.8.8	192.168.2.6	0x583f	No error (0)	photos-ugc.l.googleusercontent.com		142.250.203.97	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.414524078 CEST	8.8.8.8	192.168.2.6	0x678	No error (0)	i.ytimg.com		172.217.168.86	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.414524078 CEST	8.8.8.8	192.168.2.6	0x678	No error (0)	i.ytimg.com		142.250.203.118	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.414524078 CEST	8.8.8.8	192.168.2.6	0x678	No error (0)	i.ytimg.com		216.58.215.246	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.414524078 CEST	8.8.8.8	192.168.2.6	0x678	No error (0)	i.ytimg.com		172.217.168.22	A (IP address)	IN (0x0001)
Jul 29, 2022 16:26:48.414524078 CEST	8.8.8.8	192.168.2.6	0x678	No error (0)	i.ytimg.com		172.217.168.54	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:12.378830910 CEST	8.8.8.8	192.168.2.6	0x7c0	No error (0)	play.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:34.708993912 CEST	8.8.8.8	192.168.2.6	0x11cb	No error (0)	2itchyfeets.com		103.53.42.63	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.044694901 CEST	8.8.8.8	192.168.2.6	0x7d02	No error (0)	adservice.google.com		172.217.168.34	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.048285007 CEST	8.8.8.8	192.168.2.6	0x505c	No error (0)	c0.wp.com		192.0.77.37	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.051057100 CEST	8.8.8.8	192.168.2.6	0x1981	No error (0)	adservice.google.de	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:27:38.051057100 CEST	8.8.8.8	192.168.2.6	0x1981	No error (0)	pagead46.l.doubleclick.net		172.217.168.34	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	youtube-ui.l.google.com		142.250.203.110	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	youtube-ui.l.google.com		216.58.215.238	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	youtube-ui.l.google.com		172.217.168.14	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	youtube-ui.l.google.com		172.217.168.46	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.103295088 CEST	8.8.8.8	192.168.2.6	0x47bc	No error (0)	youtube-ui.l.google.com		172.217.168.78	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.106827021 CEST	8.8.8.8	192.168.2.6	0xf81d	No error (0)	gstaticadssl.l.google.com		216.58.215.227	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.709341049 CEST	8.8.8.8	192.168.2.6	0x3e0d	No error (0)	v0.wordpress.com	lb.wordpress.com		CNAME (Canonical name)	IN (0x0001)
Jul 29, 2022 16:27:38.709341049 CEST	8.8.8.8	192.168.2.6	0x3e0d	No error (0)	lb.wordpress.com		192.0.78.13	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.709341049 CEST	8.8.8.8	192.168.2.6	0x3e0d	No error (0)	lb.wordpress.com		192.0.78.12	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:38.717750072 CEST	8.8.8.8	192.168.2.6	0xee9b	No error (0)	s.w.org		192.0.77.48	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:39.170213938 CEST	8.8.8.8	192.168.2.6	0x7339	No error (0)	www.tripoto.com		34.107.249.112	A (IP address)	IN (0x0001)
Jul 29, 2022 16:27:40.347242117 CEST	8.8.8.8	192.168.2.6	0xfcb7	No error (0)	pixel.wp.com		192.0.76.3	A (IP address)	IN (0x0001)

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:32 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:32 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-Ol9Yy4f2c07YNyYp5Cimrg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 29 Jul 2022 14:26:32 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5688 X-Daystart: 26792 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-07-29 14:26:32 UTC	2	IN	Data Raw: 33 31 61 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 36 38 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 36 37 39 32 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 31a<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5688" elapsed_seconds="26792"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-07-29 14:26:32 UTC	2	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><ap
2022-07-29 14:26:32 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:32 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:32 UTC	1	OUT	Data Raw: 20 Data Ascii:
2022-07-29 14:26:32 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 29 Jul 2022 14:26:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pT3XEB2OhweCm1jNBxyBug' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'nonce-pT3XEB2OhweCm1jNBxyBug' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-07-29 14:26:32 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2022-07-29 14:26:32 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://2itchyfeets.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\Users\user\AppData\Local\Google\Chrome\User Data\1f2d98dd-652a-4bef-a045-f98dd2c6475f.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\27906e4f-1a84-468a-803d-6a42fb8f55cc.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\3bbb87ad-ede4-4ee4-8f42-d96b4b2be975.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\8e5813a6-7b5d-4b1c-b3d5-d588f85a4bd5.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\98634fe3-b886-476a-9162-8d06e952bec2.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\00be7000-3595-4c6c-840a-0196eda650ad.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0df6c425-adf5-4d8d-83bf-9b61d8ba7027.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0f27c2b0-3e16-46f9-a1c9-d2e39d68c687.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2267de79-4b5d-4789-823a-31f7eb5f8fc4.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\28e5e69b-f482-4f1a-8d45-399c41dbe118.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\3b8fdf68-c12f-467d-9a7a-6155c42a5189.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\57a8bcb9-1c3e-4574-9fac-b37f1713f801.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5a773de4-8b9f-4822-a3c0-5d3a0e0c76fc.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\75cdaaf0-f2be-40c4-a158-ee698f6deded.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ac81657-3b67-41fa-8328-6ae520661092.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\93fbc3b8-4595-460a-886b-a76d4242538a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000001.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000004.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000005.ldb

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000006.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000007.ldb

Windows Analysis Report
https://2itchyfeets.com

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:33 UTC	80	OUT	GET /c/6.0.1/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:33 UTC	138	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:33 GMT Content-Type: application/javascript Content-Length: 11224 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 18 Nov 2020 09:06:06 GMT Expires: Sat, 29 Jul 2023 14:26:33 GMT Cache-Control: max-age=31536000 Strict-Transport-Security: max-age=15552000 X-nc: HIT hhn 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2022-07-29 14:26:33 UTC	138	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2022-07-29 14:26:33 UTC	139	IN	Data Raw: 20 22 2b 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 29 29 3b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 6e 2e 63 6f 6e 73 6f 6c 65 3b 73 2e 6d 69 67 72 61 74 65 44 65 64 75 70 6c 69 63 61 74 65 57 61 72 6e 69 6e 67 73 26 26 72 5b 65 5d 7c 7c 28 72 5b 65 5d 3d 21 30 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 65 29 2c 74 26 26 74 2e 77 61 72 6e 26 26 21 73 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 74 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 65 29 2c 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 74 2e 74 72 61 63 65 26 26 74 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 72 2c 6e 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0,s.migrateWarnings.push(e),t&&t.warn&&!s.migrateMute&&(t.warn("JQMIGRATE: "+e),s.migrateTrace&&t.trace&&t.trace()))}function t(e,t,r,n){Object.defineP
2022-07-29 14:26:33 UTC	141	IN	Data Raw: 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 2b 72 5b 30 5d 29 7d 7d 72 65 74 75 72 6e 20 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 7d 2c 70 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 70 2c 69 29 26 26 28 73 2e 66 69 6e 64 5b 69 5d 3d 70 5b 69 5d 29 3b 6f 28 73 2e 66 6e 2c 22 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 7d 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 73 69 7a 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 3b 20 75 73 65 20 74 68 65 20 2e 6c 65 6e 67 74 68 20 70 72 6f 70 65 72 74 79 22 29 Data Ascii: "Attribute selector with '#' was not fixed: "+r[0])}}return p.apply(this,r)},p)Object.prototype.hasOwnProperty.call(p,i)&&(s.find[i]=p[i]);o(s.fn,"size",function(){return this.length},"jQuery.fn.size() is deprecated and removed; use the .length property")
2022-07-29 14:26:33 UTC	142	IN	Data Raw: 20 6e 75 6c 6c 3d 3d 65 3f 65 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 5b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 2c 22 6a 51 75 65 72 79 2e 74 79 70 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 46 75 6e 63 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 2c 22 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 Data Ascii: null==e?e+"":"object"==typeof e\|\|"function"==typeof e?d[Object.prototype.toString.call(e)]\|\|"object":typeof e},"jQuery.type is deprecated"),o(s,"isFunction",function(e){return"function"==typeof e},"jQuery.isFunction() is deprecated"),o(s,"isWindow",funct
2022-07-29 14:26:33 UTC	143	IN	Data Raw: 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 3b 65 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 2c 65 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 21 65 26 26 21 31 21 3d 3d 74 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 29 2c 77 3d 2f 5e 5b 61 2d 7a 5d 2f 2c 78 3d 2f 5e 28 3f 3a 42 6f 72 64 65 72 28 3f 3a 54 6f 70 7c 52 69 67 68 74 7c 42 6f 74 74 6f 6d 7c 4c 65 66 Data Ascii: ,this.each(function(){var e=this.getAttribute&&this.getAttribute("class")\|\|"";e&&s.data(this,"__className__",e),this.setAttribute&&this.setAttribute("class",!e&&!1!==t&&s.data(this,"__className__")\|\|"")}))}),w=/^[a-z]/,x=/^(?:Border(?:Top\|Right\|Bottom\|Lef
2022-07-29 14:26:33 UTC	145	IN	Data Raw: 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 20 69 6e 20 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 4e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6f 3d 7b 7d 2c 74 29 69 21 3d 3d 6a 28 69 29 3f 28 75 28 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 69 29 2c 6e 5b 69 5d 3d 74 5b 69 5d 29 3a 6f 5b 69 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 4e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6f 29 2c 74 7d 72 65 74 75 72 6e 20 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 21 3d 3d 6a 28 74 29 26 26 28 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 4e 2e 63 61 6c Data Ascii: typeof t&&2===arguments.length){for(i in n=s.hasData(e)&&N.call(this,e),o={},t)i!==j(i)?(u("jQuery.data() always sets/gets camelCased names: "+i),n[i]=t[i]):o[i]=t[i];return N.call(this,e,o),t}return t&&"string"==typeof t&&t!==j(t)&&(n=s.hasData(e)&&N.cal
2022-07-29 14:26:33 UTC	146	IN	Data Raw: 6c 65 6e 67 74 68 29 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 43 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 73 2e 65 76 65 6e 74 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f 61 64 20 65 76 65 6e 74 20 6f 63 63 75 72 72 65 64 22 29 2c 48 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: length)s.event.addProp(o.pop());return t=C.call(this,e),n&&n.filter?n.filter(t,e):t},s.event.add=function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("jQuery(window).on('load'...) called after load event occurred"),H.apply(this,ar
2022-07-29 14:26:33 UTC	154	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 68 69 73 2e 6f 66 66 28 74 2c 65 7c 7c 22 2a 2a 22 2c 72 29 7d 2c 68 6f 76 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 68 69 73 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 7c 7c 65 29 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 6e 2e 64 6f Data Ascii: (e,t,r){return u("jQuery.fn.undelegate() is deprecated"),1===arguments.length?this.off(e,""):this.off(t,e\|\|"",r)},hover:function(e,t){return u("jQuery.fn.hover() is deprecated"),this.on("mouseenter",e).on("mouseleave",t\|\|e)}});function T(e){var t=n.do
2022-07-29 14:26:33 UTC	155	IN	Data Raw: 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 22 72 65 6a 65 63 74 65 64 22 5d 2c 5b 22 6e 6f 74 69 66 79 22 2c 22 70 72 6f 67 72 65 73 73 22 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 2c 73 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 5d 5d 2c 73 2e 44 65 66 65 72 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ["resolve","done",s.Callbacks("once memory"),s.Callbacks("once memory"),"resolved"],["reject","fail",s.Callbacks("once memory"),s.Callbacks("once memory"),"rejected"],["notify","progress",s.Callbacks("memory"),s.Callbacks("memory")]],s.Deferred=function(e

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:34 UTC	692	OUT	GET /c/6.0.1/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	693	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:34 GMT Content-Type: application/javascript Content-Length: 6475 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 11 Apr 2022 12:04:30 GMT Expires: Sat, 29 Jul 2023 14:26:34 GMT Cache-Control: max-age=31536000 Strict-Transport-Security: max-age=15552000 X-nc: HIT hhn 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2022-07-29 14:26:34 UTC	694	IN	Data Raw: 76 61 72 20 72 75 6e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 28 6d 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 29 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 69 3d 6d 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 61 3d 6d 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 3b 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: var runtime=function(t){"use strict";var r,e=Object.prototype,n=e.hasOwnProperty,o=(m="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",i=m.asyncIterator\|\|"@@asyncIterator",a=m.toStringTag\|\|"@@toStringTag";function c(t,r,e){return Object.defineP
2022-07-29 14:26:34 UTC	694	IN	Data Raw: 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 61 20 27 74 68 72 6f 77 27 20 6d 65 74 68 6f 64 22 29 7d 72 65 74 75 72 6e 20 79 7d 72 65 74 75 72 6e 22 74 68 72 6f 77 22 3d 3d 3d 28 6f 3d 68 28 6f 2c 65 2e 69 74 65 72 61 74 6f 72 2c 6e 2e 61 72 67 29 29 2e 74 79 70 65 3f 28 6e 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 6e 2e 61 72 67 3d 6f 2e 61 72 67 2c 6e 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 3a 28 6f 3d 6f 2e 61 72 67 29 3f 6f 2e 64 6f 6e 65 3f 28 6e 5b 65 2e 72 65 73 75 6c 74 4e 61 6d 65 5d 3d 6f 2e 76 61 6c 75 65 2c 6e 2e 6e 65 78 74 3d 65 2e 6e 65 78 74 4c 6f 63 2c 22 72 65 74 75 72 6e 22 21 3d 3d 6e 2e 6d 65 74 68 6f 64 26 26 28 6e 2e 6d 65 74 68 6f 64 3d 22 Data Ascii: ypeError("The iterator does not provide a 'throw' method")}return y}return"throw"===(o=h(o,e.iterator,n.arg)).type?(n.method="throw",n.arg=o.arg,n.delegate=null,y):(o=o.arg)?o.done?(n[e.resultName]=o.value,n.next=e.nextLoc,"return"!==n.method&&(n.method="
2022-07-29 14:26:34 UTC	696	IN	Data Raw: 6f 77 22 21 3d 3d 28 6f 3d 68 28 74 5b 6f 5d 2c 74 2c 69 29 29 2e 74 79 70 65 29 72 65 74 75 72 6e 28 69 3d 28 75 3d 6f 2e 61 72 67 29 2e 76 61 6c 75 65 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 6e 2e 63 61 6c 6c 28 69 2c 22 5f 5f 61 77 61 69 74 22 29 3f 72 2e 72 65 73 6f 6c 76 65 28 69 2e 5f 5f 61 77 61 69 74 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 22 6e 65 78 74 22 2c 74 2c 61 2c 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 22 74 68 72 6f 77 22 2c 74 2c 61 2c 63 29 7d 29 29 3a 72 2e 72 65 73 6f 6c 76 65 28 69 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 2e 76 61 6c 75 65 3d 74 2c 61 28 75 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 22 Data Ascii: ow"!==(o=h(t[o],t,i)).type)return(i=(u=o.arg).value)&&"object"==typeof i&&n.call(i,"__await")?r.resolve(i.__await).then((function(t){e("next",t,a,c)}),(function(t){e("throw",t,a,c)})):r.resolve(i).then((function(t){u.value=t,a(u)}),(function(t){return e("
2022-07-29 14:26:34 UTC	697	IN	Data Raw: 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 74 2e 41 73 79 6e 63 49 74 65 72 61 74 6f 72 3d 62 2c 74 2e 61 73 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 6e 2c 6f 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 50 72 6f 6d 69 73 65 29 3b 76 61 72 20 61 3d 6e 65 77 20 62 28 75 28 72 2c 65 2c 6e 2c 6f 29 2c 69 29 3b 72 65 74 75 72 6e 20 74 2e 69 73 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 28 65 29 3f 61 3a 61 2e 6e 65 78 74 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3f 74 2e 76 61 6c 75 65 3a 61 2e 6e 65 78 74 28 29 7d 29 29 7d 2c 78 28 4c 29 2c 63 28 4c 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 63 28 4c 2c 6f 2c 28 66 75 6e 63 Data Ascii: ,(function(){return this})),t.AsyncIterator=b,t.async=function(r,e,n,o,i){void 0===i&&(i=Promise);var a=new b(u(r,e,n,o),i);return t.isGeneratorFunction(e)?a:a.next().then((function(t){return t.done?t.value:a.next()}))},x(L),c(L,a,"Generator"),c(L,o,(func
2022-07-29 14:26:34 UTC	698	IN	Data Raw: 75 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 63 61 74 63 68 4c 6f 63 29 72 65 74 75 72 6e 20 6f 28 61 2e 63 61 74 63 68 4c 6f 63 2c 21 30 29 7d 65 6c 73 65 7b 69 66 28 21 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 74 72 79 20 73 74 61 74 65 6d 65 6e 74 20 77 69 74 68 6f 75 74 20 63 61 74 63 68 20 6f 72 20 66 69 6e 61 6c 6c 79 22 29 3b 69 66 28 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 72 65 74 75 72 6e 20 6f 28 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7d 7d 7d 7d 2c 61 62 72 75 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 65 3b 2d 2d 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e Data Ascii: u){if(this.prev<a.catchLoc)return o(a.catchLoc,!0)}else{if(!h)throw new Error("try statement without catch or finally");if(this.prev<a.finallyLoc)return o(a.finallyLoc)}}}},abrupt:function(t,r){for(var e=this.tryEntries.length-1;0<=e;--e){var o=this.tryEn
2022-07-29 14:26:34 UTC	700	IN	Data Raw: 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 3d 72 75 6e 74 69 6d 65 3a 46 75 6e 63 74 69 6f 6e 28 22 72 22 2c 22 72 65 67 65 6e 65 72 61 74 6f 72 52 75 6e 74 69 6d 65 20 3d 20 72 22 29 28 72 75 6e 74 69 6d 65 29 7d Data Ascii: ypeof globalThis?globalThis.regeneratorRuntime=runtime:Function("r","regeneratorRuntime = r")(runtime)}

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:34 UTC	721	OUT	GET /c/6.0.1/wp-includes/js/imagesloaded.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	722	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:34 GMT Content-Type: application/javascript Content-Length: 5629 Connection: close Vary: Accept-Encoding Last-Modified: Sat, 13 Jun 2020 18:53:27 GMT Expires: Sat, 29 Jul 2023 14:26:34 GMT Cache-Control: max-age=31536000 Strict-Transport-Security: max-age=15552000 X-nc: HIT hhn 2 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2022-07-29 14:26:34 UTC	723	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 34 2e 31 2e 34 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 2d 65 6d 69 74 74 65 72 2f 65 76 2d 65 6d 69 74 74 65 72 22 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: /! This file is auto-generated //! imagesLoaded PACKAGED v4.1.4 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==typeof
2022-07-29 14:26:34 UTC	724	IN	Data Raw: 45 76 65 6e 74 73 26 26 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 5b 65 5d 2c 6f 3d 30 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 69 5b 6f 5d 2c 73 3d 6e 26 26 6e 5b 72 5d 3b 73 26 26 28 74 68 69 73 2e 6f 66 66 28 65 2c 72 29 2c 64 65 6c 65 74 65 20 6e 5b 72 5d 29 2c 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 74 2e 61 6c 6c 4f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 7d 2c 65 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 Data Ascii: Events&&this._onceEvents[e],o=0;o<i.length;o++){var r=i[o],s=n&&n[r];s&&(this.off(e,r),delete n[r]),r.apply(this,t)}return this}},t.allOff=function(){delete this._events,delete this._onceEvents},e}),function(e,t){"use strict";"function"==typeof define&&de
2022-07-29 14:26:34 UTC	725	IN	Data Raw: 45 6c 65 6d 65 6e 74 49 6d 61 67 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 49 4d 47 22 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 68 69 73 2e 61 64 64 49 6d 61 67 65 28 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 3d 3d 21 30 26 26 74 68 69 73 2e 61 64 64 45 6c 65 6d 65 6e 74 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 73 28 65 29 3b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 74 26 26 75 5b 74 5d 29 7b 66 6f 72 28 76 61 72 20 69 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 6d 67 22 29 2c 6e 3d 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 69 5b 6e 5d 3b 74 68 69 73 2e 61 64 64 49 6d 61 67 65 28 6f 29 7d 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 Data Ascii: ElementImages=function(e){"IMG"==e.nodeName&&this.addImage(e),this.options.background===!0&&this.addElementBackgroundImages(e);var t=e.nodeType;if(t&&u[t]){for(var i=e.querySelectorAll("img"),n=0;n<i.length;n++){var o=i[n];this.addImage(o)}if("string"==ty
2022-07-29 14:26:34 UTC	726	IN	Data Raw: 62 75 67 26 26 61 26 26 61 2e 6c 6f 67 28 22 70 72 6f 67 72 65 73 73 3a 20 22 2b 69 2c 65 2c 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f 6b 65 6e 3f 22 66 61 69 6c 22 3a 22 64 6f 6e 65 22 3b 69 66 28 74 68 69 73 2e 69 73 43 6f 6d 70 6c 65 74 65 3d 21 30 2c 74 68 69 73 2e 65 6d 69 74 45 76 65 6e 74 28 65 2c 5b 74 68 69 73 5d 29 2c 74 68 69 73 2e 65 6d 69 74 45 76 65 6e 74 28 22 61 6c 77 61 79 73 22 2c 5b 74 68 69 73 5d 29 2c 74 68 69 73 2e 6a 71 44 65 66 65 72 72 65 64 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f 6b 65 6e 3f 22 72 65 6a 65 63 74 22 3a 22 72 65 73 6f 6c 76 65 22 3b 74 68 69 73 2e 6a 71 44 65 66 65 Data Ascii: bug&&a&&a.log("progress: "+i,e,t)},o.prototype.complete=function(){var e=this.hasAnyBroken?"fail":"done";if(this.isComplete=!0,this.emitEvent(e,[this]),this.emitEvent("always",[this]),this.jqDeferred){var t=this.hasAnyBroken?"reject":"resolve";this.jqDefe
2022-07-29 14:26:34 UTC	728	IN	Data Raw: 2e 63 68 65 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6d 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 74 68 69 73 29 2c 74 68 69 73 2e 69 6d 67 2e 73 72 63 3d 74 68 69 73 2e 75 72 6c 3b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 49 73 49 6d 61 67 65 43 6f 6d 70 6c 65 74 65 28 29 3b 65 26 26 28 74 68 69 73 2e 63 6f 6e 66 69 72 6d 28 30 21 3d 3d 74 68 69 73 2e 69 6d 67 2e 6e 61 74 75 72 61 6c 57 69 64 74 68 2c 22 6e 61 74 75 72 61 6c 57 69 64 74 68 22 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 45 76 65 6e 74 Data Ascii: .check=function(){this.img.addEventListener("load",this),this.img.addEventListener("error",this),this.img.src=this.url;var e=this.getIsImageComplete();e&&(this.confirm(0!==this.img.naturalWidth,"naturalWidth"),this.unbindEvents())},s.prototype.unbindEvent

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:32 UTC	4	OUT	GET / HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:33 UTC	5	IN	HTTP/1.1 200 OK Date: Fri, 29 Jul 2022 14:26:27 GMT Server: nginx/1.17.6 Content-Type: text/html; charset=UTF-8 X-Cache-Handler: cache-enabler-user Vary: Accept-Encoding X-Server-Cache: true X-Proxy-Cache: EXPIRED Transfer-Encoding: chunked
2022-07-29 14:26:33 UTC	5	IN	Data Raw: 31 65 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 20 3c 6d 65 74 61 20 6e Data Ascii: 1ed3<!DOCTYPE html> <html lang="en-US"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11" /> <meta n
2022-07-29 14:26:33 UTC	13	IN	Data Raw: 31 66 66 38 0d 0a 74 73 5b 32 5d 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 35 5d 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 20 68 69 74 4f 62 6a 65 63 74 2c 20 61 72 67 75 6d 65 6e 74 73 5b 35 5d 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 27 75 6e 64 65 66 69 6e 65 64 27 20 21 3d 3d 20 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2e 68 69 74 54 79 70 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 68 69 74 4f 62 6a 65 63 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 0a 09 09 09 09 09 09 09 09 09 09 09 69 66 Data Ascii: 1ff8ts[2];}if ( typeof arguments[5] === 'object' ) {Object.assign( hitObject, arguments[5] );}if ( 'undefined' !== typeof arguments[1].hitType ) {hitObject = arguments[1];if
2022-07-29 14:26:33 UTC	21	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2022-07-29 14:26:33 UTC	21	IN	Data Raw: 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d Data Ascii: ge: 36px;--wp--preset--font-size--x-large: 42px;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color-
2022-07-29 14:26:33 UTC	29	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	29	IN	Data Raw: 32 30 30 30 0d 0a 65 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6a 65 74 70 61 63 6b 5f 63 73 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 63 30 2e 77 70 2e 63 6f 6d 2f 70 2f 6a 65 74 70 61 63 6b 2f 31 31 2e 30 2f 63 73 73 2f 6a 65 74 70 61 63 6b 2e 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 32 69 74 63 68 79 66 65 65 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2d 66 6f 72 2d 77 6f 72 64 70 72 65 73 73 2f 61 73 73 65 74 Data Ascii: 2000e> <link rel='stylesheet' id='jetpack_css-css' href='https://c0.wp.com/p/jetpack/11.0/css/jetpack.css' type='text/css' media='all' /> <script type='text/javascript' src='https://2itchyfeets.com/wp-content/plugins/google-analytics-for-wordpress/asset
2022-07-29 14:26:33 UTC	37	IN	Data Raw: 6d 2d 35 37 35 22 Data Ascii: m-575"
2022-07-29 14:26:33 UTC	37	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	37	IN	Data Raw: 31 66 66 61 0d 0a 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 35 37 35 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 69 74 63 68 79 66 65 65 74 73 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 69 6e 64 69 61 2f 67 75 6a 61 72 61 74 2f 22 3e 47 75 6a 61 72 61 74 3c 2f 61 3e 3c 2f 6c 69 3e 20 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 31 32 36 39 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 Data Ascii: 1ffa class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-575"><a href="https://2itchyfeets.com/category/india/gujarat/">Gujarat</a></li> <li id="menu-item-1269" class="menu-item menu-item-type-taxonomy menu-item-object-category
2022-07-29 14:26:33 UTC	45	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	45	IN	Data Raw: 36 0d 0a 73 74 2d 69 6d 61 0d 0a 31 66 66 38 0d 0a 67 65 22 20 61 6c 74 3d 22 43 6f 6d 70 6c 65 74 65 20 67 75 69 64 65 20 74 6f 20 41 6e 64 61 6d 61 6e 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 2f 3e 20 3c 2f 61 3e 20 3c 68 33 20 63 6c 61 73 73 3d 22 70 6f 73 74 2d 74 69 74 6c 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 69 74 63 68 79 66 65 65 74 73 2e 63 6f 6d 2f 61 6e 64 61 6d 61 6e 2f 22 20 72 65 6c 3d 22 62 6f 6f 6b 6d 61 72 6b 22 3e 43 6f 6d 70 6c 65 74 65 20 67 75 69 64 65 20 74 6f 20 61 20 74 72 69 70 20 74 6f 20 41 6e 64 61 6d 61 6e 20 77 69 74 68 20 62 75 64 67 65 74 20 61 6e 64 20 69 74 69 6e 65 72 61 72 79 20 66 6f 72 20 61 20 77 65 65 6b 3c 2f 61 3e 3c 2f 68 33 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 Data Ascii: 6st-ima1ff8ge" alt="Complete guide to Andaman" loading="lazy" /> </a> <h3 class="post-title"><a href="https://2itchyfeets.com/andaman/" rel="bookmark">Complete guide to a trip to Andaman with budget and itinerary for a week</a></h3> </div> <div clas
2022-07-29 14:26:33 UTC	53	IN	Data Raw: 75 6c 20 63 6c 61 73 73 3d Data Ascii: ul class=
2022-07-29 14:26:33 UTC	53	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	53	IN	Data Raw: 32 30 30 30 0d 0a 22 70 6f 73 74 2d 6d 65 74 61 73 22 3e 20 3c 2f 75 6c 3e 20 3c 2f 64 69 76 3e 20 3c 2f 61 72 74 69 63 6c 65 3e 20 3c 61 72 74 69 63 6c 65 20 69 64 3d 22 70 6f 73 74 2d 32 33 33 32 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 20 67 72 69 64 2d 70 6f 73 74 20 70 6f 73 74 2d 32 33 33 32 20 70 6f 73 74 20 74 79 70 65 2d 70 6f 73 74 20 73 74 61 74 75 73 2d 70 75 62 6c 69 73 68 20 66 6f 72 6d 61 74 2d 73 74 61 6e 64 61 72 64 20 68 61 73 2d 70 6f 73 74 2d 74 68 75 6d 62 6e 61 69 6c 20 68 65 6e 74 72 79 20 63 61 74 65 67 6f 72 79 2d 75 6e 63 61 74 65 67 6f 72 69 7a 65 64 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 69 67 68 66 69 6c 6c 2d 70 6f 73 74 20 73 74 79 6c 65 32 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 73 74 2d 6d 65 Data Ascii: 2000"post-metas"> </ul> </div> </article> <article id="post-2332" class="col-md-6 grid-post post-2332 post type-post status-publish format-standard has-post-thumbnail hentry category-uncategorized"> <div class="highfill-post style2"> <div class="post-me
2022-07-29 14:26:33 UTC	61	IN	Data Raw: 20 74 72 61 76 65 Data Ascii: trave
2022-07-29 14:26:33 UTC	61	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	61	IN	Data Raw: 32 30 30 30 0d 0a 6c 20 77 69 74 68 6f 75 74 20 77 6f 72 72 79 69 6e 67 20 61 62 6f 75 74 20 68 6f 77 20 74 6f 20 70 6c 61 6e 20 66 6f 72 20 61 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 77 68 61 74 20 61 72 65 20 74 68 65 20 66 6f 6f 64 20 6f 70 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 74 6f 20 73 74 61 79 2c 20 77 68 69 63 68 20 61 64 76 65 6e 74 75 72 65 20 74 6f 20 75 6e 64 65 72 74 61 6b 65 2c 20 77 68 61 74 20 74 6f 20 70 61 63 6b 20 61 6e 64 20 6d 61 6e 79 20 6f 74 68 65 72 20 74 69 70 73 2e 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 69 74 63 68 79 66 65 65 74 73 2e 63 6f 6d 2f 61 62 6f 75 74 2d 75 73 2f 22 3e 4b 6e 6f 77 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 62 6f Data Ascii: 2000l without worrying about how to plan for a destination, what are the food options, where to stay, which adventure to undertake, what to pack and many other tips. <a href="https://2itchyfeets.com/about-us/">Know more</a></p> </div> </div><div id="abo
2022-07-29 14:26:33 UTC	69	IN	Data Raw: 6c 75 64 65 73 2f Data Ascii: ludes/
2022-07-29 14:26:33 UTC	69	IN	Data Raw: 0d 0a Data Ascii:
2022-07-29 14:26:33 UTC	69	IN	Data Raw: 31 38 30 33 0d 0a 6a 73 2f 69 6e 64 65 78 2e 6a 73 3f 76 65 72 3d 35 2e 36 27 20 69 64 3d 27 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 32 69 74 63 68 79 66 65 65 74 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6d 79 73 74 69 63 6b 79 6d 65 6e 75 2f 6a 73 2f 64 65 74 65 63 74 6d 6f 62 69 6c 65 62 72 6f 77 73 65 72 2e 6a 73 3f 76 65 72 3d 32 2e 35 2e 39 27 20 69 64 3d 27 64 65 74 65 63 74 6d 6f 62 69 6c 65 62 72 6f 77 73 65 72 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 Data Ascii: 1803js/index.js?ver=5.6' id='contact-form-7-js'></script> <script type='text/javascript' src='https://2itchyfeets.com/wp-content/plugins/mystickymenu/js/detectmobilebrowser.js?ver=2.5.9' id='detectmobilebrowser-js'></script> <script type='text/javascrip
2022-07-29 14:26:33 UTC	475	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6 HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	692	IN	HTTP/1.1 409 Conflict Date: Fri, 29 Jul 2022 14:26:33 GMT Server: Apache Content-Length: 83 Keep-Alive: timeout=5, max=74 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:34 UTC	743	OUT	GET /c/6.0.1/wp-includes/js/mediaelement/mediaelement-migrate.min.js HTTP/1.1 Host: c0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	769	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:34 GMT Content-Type: application/javascript Content-Length: 1191 Connection: close Vary: Accept-Encoding Last-Modified: Fri, 08 Apr 2022 20:07:18 GMT Expires: Sat, 29 Jul 2023 14:26:34 GMT Cache-Control: max-age=31536000 Strict-Transport-Security: max-age=15552000 X-nc: HIT hhn 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2022-07-29 14:26:34 UTC	769	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 26 26 28 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 3d 7b 7d 2c 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 2e 73 69 6c 76 65 72 6c 69 67 68 74 3d 5b 5d 2c 6d 65 6a 73 2e 70 6c 75 67 69 6e 73 2e 73 69 6c 76 65 72 6c 69 67 68 74 2e 70 75 73 68 28 7b 74 79 70 65 73 3a 5b 5d 7d 29 29 2c 6d 65 6a 73 2e 48 74 6d 6c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 53 68 69 6d 3d 6d 65 6a 73 2e 48 74 6d 6c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 53 68 69 6d 7c 7c 7b 67 65 74 54 79 70 65 46 72 6f 6d 46 69 6c 65 3a 6d 65 6a 73 2e 55 74 69 6c 73 2e 67 65 74 54 79 70 65 46 72 6f 6d 46 69 6c 65 7d 2c 76 6f 69 64 20 30 3d 3d 3d 6d 65 6a 73 2e 4d 65 64 69 61 46 65 61 74 75 72 65 73 26 26 28 6d 65 6a Data Ascii: !function(a){void 0===mejs.plugins&&(mejs.plugins={},mejs.plugins.silverlight=[],mejs.plugins.silverlight.push({types:[]})),mejs.HtmlMediaElementShim=mejs.HtmlMediaElementShim\|\|{getTypeFromFile:mejs.Utils.getTypeFromFile},void 0===mejs.MediaFeatures&&(mej
2022-07-29 14:26:34 UTC	770	IN	Data Raw: 22 2c 22 70 72 6f 67 72 65 73 73 22 2c 22 64 75 72 61 74 69 6f 6e 22 2c 22 74 72 61 63 6b 73 22 2c 22 76 6f 6c 75 6d 65 22 2c 22 66 75 6c 6c 73 63 72 65 65 6e 22 5d 2c 72 3d 30 2c 6e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 65 61 74 75 72 65 73 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 65 61 74 75 72 65 73 5b 72 5d 3b 69 66 28 74 68 69 73 5b 22 62 75 69 6c 64 22 2b 6f 5d 29 74 72 79 7b 2d 31 3d 3d 3d 6c 2e 69 6e 64 65 78 4f 66 28 6f 29 3f 74 68 69 73 5b 22 62 75 69 6c 64 22 2b 6f 5d 28 65 2c 61 28 74 29 2c 61 28 69 29 2c 73 29 3a 74 68 69 73 5b 22 62 75 69 6c 64 22 2b 6f 5d 28 65 2c 74 2c 69 2c 73 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 65 72 72 Data Ascii: ","progress","duration","tracks","volume","fullscreen"],r=0,n=this.options.features.length;r<n;r++){var o=this.options.features[r];if(this["build"+o])try{-1===l.indexOf(o)?this["build"+o](e,a(t),a(i),s):this["build"+o](e,t,i,s)}catch(e){console.error("err

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:34 UTC	958	OUT	GET /e-202228.js HTTP/1.1 Host: stats.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	958	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Etag: W/"6197c5cf-3508" Expires: Mon, 10 Jul 2023 23:11:57 GMT Cache-Control: max-age=31536000 Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * X-nc: HIT hhn
2022-07-29 14:26:34 UTC	958	IN	Data Raw: 32 33 30 61 0d 0a 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 3d 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 73 74 71 3d 77 69 6e 64 6f 77 2e 5f 73 74 71 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 74 5f 67 6f 28 61 29 7b 77 69 6e 64 6f 77 2e 5f 73 74 71 2e 70 75 73 68 28 5b 27 76 69 65 77 27 2c 61 5d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 69 6e 6b 74 72 61 63 6b 65 72 5f 69 6e 69 74 28 62 2c 70 29 7b 77 69 6e 64 6f 77 2e 5f 73 74 71 2e 70 75 73 68 28 5b 27 63 6c 69 63 6b 54 72 61 63 6b 65 72 49 6e 69 74 27 2c 62 2c 70 5d 29 3b 7d 3b 77 69 6e 64 6f 77 2e 77 70 63 6f 6d 2e 73 74 61 74 73 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 63 6c 69 63 6b 54 72 61 63 6b 65 72 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f Data Ascii: 230awindow.wpcom=window.wpcom\|\|{};window._stq=window._stq\|\|[];function st_go(a){window._stq.push(['view',a]);};function linktracker_init(b,p){window._stq.push(['clickTrackerInit',b,p]);};window.wpcom.stats=(function(){var _clickTracker=(function(){var _
2022-07-29 14:26:34 UTC	959	IN	Data Raw: 72 6f 74 6f 63 6f 6c 26 26 6c 2e 68 6f 73 74 2b 27 3a 34 34 33 27 3d 3d 3d 61 2e 68 6f 73 74 29 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 3b 76 61 72 20 5f 70 72 6f 63 65 73 73 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 74 72 79 7b 69 66 28 27 6f 62 6a 65 63 74 27 21 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 3b 77 68 69 6c 65 28 27 41 27 21 3d 3d 61 2e 6e 6f 64 65 4e 61 6d 65 29 7b 69 66 28 27 75 6e 64 65 66 69 6e 65 64 27 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 29 72 65 74 75 72 6e 3b 69 66 28 27 6f 62 6a 65 63 74 27 21 3d 3d 74 79 70 65 6f 66 20 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 3b 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 7d 3b 69 66 28 5f 69 Data Ascii: rotocol&&l.host+':443'===a.host)return true;};return false;};var _processLink=function(a,d){try{if('object'!==typeof a)return;while('A'!==a.nodeName){if('undefined'===typeof a.nodeName)return;if('object'!==typeof a.parentNode)return;a=a.parentNode;};if(_i
2022-07-29 14:26:34 UTC	961	IN	Data Raw: 2b 71 2b 27 26 72 61 6e 64 3d 27 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 69 2e 61 6c 74 3d 22 22 3b 69 2e 77 69 64 74 68 3d 27 36 27 3b 69 2e 68 65 69 67 68 74 3d 27 35 27 3b 69 66 28 27 73 74 72 69 6e 67 27 3d 3d 3d 74 79 70 65 6f 66 20 69 64 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 69 2e 69 64 3d 69 64 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 3b 7d 7d 3b 76 61 72 20 5f 63 6f 6d 70 75 74 65 50 65 72 66 6f 72 6d 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 63 6f 6e 6e 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 6f 7a 43 6f 6e 6e 65 63 74 69 6f 6e 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 43 6f 6e 6e 65 63 74 Data Ascii: +q+'&rand='+Math.random();i.alt="";i.width='6';i.height='5';if('string'===typeof id&&document.body){i.id=id;document.body.appendChild(i);}};var _computePerformance=function(o){var conn=navigator.connection\|\|navigator.mozConnection\|\|navigator.webkitConnect
2022-07-29 14:26:34 UTC	962	IN	Data Raw: 69 6c 65 73 3d 30 2c 6f 74 68 65 72 46 69 6c 65 73 3d 30 2c 63 73 73 44 75 72 61 74 69 6f 6e 3d 30 2c 6a 73 44 75 72 61 74 69 6f 6e 3d 30 2c 69 6d 67 44 75 72 61 74 69 6f 6e 3d 30 2c 66 6f 6e 74 44 75 72 61 74 69 6f 6e 3d 30 2c 6f 74 68 65 72 44 75 72 61 74 69 6f 6e 3d 30 2c 68 74 74 70 31 46 69 6c 65 73 3d 30 2c 68 74 74 70 32 46 69 6c 65 73 3d 30 2c 73 73 6c 46 69 6c 65 73 3d 30 2c 6f 72 69 67 69 6e 46 69 6c 65 73 3d 30 2c 65 78 74 65 72 6e 61 6c 46 69 6c 65 73 3d 30 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 72 65 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 65 73 6f 75 72 63 65 3d 72 65 73 6f 75 72 63 65 73 5b 69 5d 3b 69 66 28 72 65 73 6f 75 72 63 65 2e 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 29 7b 69 66 28 72 65 Data Ascii: iles=0,otherFiles=0,cssDuration=0,jsDuration=0,imgDuration=0,fontDuration=0,otherDuration=0,http1Files=0,http2Files=0,sslFiles=0,originFiles=0,externalFiles=0;for(var i=0;i<resources.length;i++){var resource=resources[i];if(resource.nextHopProtocol){if(re
2022-07-29 14:26:34 UTC	963	IN	Data Raw: 6c 65 73 5f 68 74 74 70 31 3d 68 74 74 70 31 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 68 74 74 70 32 3d 68 74 74 70 32 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 6a 73 3d 6a 73 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 63 73 73 3d 63 73 73 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 69 6d 67 3d 69 6d 67 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 66 6f 6e 74 3d 66 6f 6e 74 46 69 6c 65 73 3b 6f 2e 66 69 6c 65 73 5f 6f 74 68 65 72 3d 6f 74 68 65 72 46 69 6c 65 73 3b 6f 2e 64 75 72 61 74 69 6f 6e 5f 6a 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6a 73 44 75 72 61 74 69 6f 6e 29 3b 6f 2e 64 75 72 61 74 69 6f 6e 5f 63 73 73 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 63 73 73 44 75 72 61 74 69 6f 6e 29 3b 6f 2e 64 75 72 61 74 69 6f 6e 5f 69 6d 67 3d 4d 61 74 68 2e 72 6f 75 6e Data Ascii: les_http1=http1Files;o.files_http2=http2Files;o.files_js=jsFiles;o.files_css=cssFiles;o.files_img=imgFiles;o.files_font=fontFiles;o.files_other=otherFiles;o.duration_js=Math.round(jsDuration);o.duration_css=Math.round(cssDuration);o.duration_img=Math.roun
2022-07-29 14:26:34 UTC	965	IN	Data Raw: 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 36 29 3b 7d 7d 0a 72 65 74 75 72 6e 20 62 74 6f 61 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 72 61 6e 64 6f 6d 42 79 74 65 73 29 29 3b 7d 3b 76 61 72 20 5f 69 6e 69 74 54 72 61 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 6f 2e 5f 75 69 3d 6e 65 77 41 6e 6f 6e 49 64 28 29 3b 6f 2e 5f 75 74 3d 27 61 6e 6f 6e 27 3b 6f 2e 5f 65 6e 3d 27 6a 65 74 70 61 63 6b 5f 70 61 67 65 76 69 65 77 5f 74 69 6d 69 6e 67 27 3b 76 61 72 20 64 61 74 65 3d 6e 65 77 20 44 61 74 65 28 29 3b 6f 2e 5f 74 73 3d 64 61 74 65 2e 67 65 74 54 69 6d 65 28 29 3b 6f 2e 5f 74 7a 3d 64 61 74 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 36 Data Ascii: h.floor(Math.random()*256);}}return btoa(String.fromCharCode.apply(String,randomBytes));};var _initTracks=function(o){o._ui=newAnonId();o._ut='anon';o._en='jetpack_pageview_timing';var date=new Date();o._ts=date.getTime();o._tz=date.getTimezoneOffset()/6
2022-07-29 14:26:34 UTC	967	IN	Data Raw: 66 28 21 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 72 65 74 75 72 6e 3b 7d 0a 76 61 72 20 6f 3d 7b 62 6c 6f 67 3a 62 6c 6f 67 49 64 2c 70 6f 73 74 3a 70 6f 73 74 49 64 2c 62 6c 6f 67 5f 69 64 3a 62 6c 6f 67 49 64 2c 6a 65 74 70 61 63 6b 5f 76 65 72 73 69 6f 6e 3a 6a 65 74 70 61 63 6b 56 65 72 73 69 6f 6e 7d 3b 5f 69 6e 69 74 54 72 61 63 6b 73 28 6f 29 3b 5f 63 6f 6d 70 75 74 65 50 65 72 66 6f 72 6d 61 6e 63 65 28 6f 29 3b 5f 6c 6f 61 64 47 69 66 28 27 74 2e 67 69 66 27 2c 5f 73 65 72 69 61 6c 69 7a 65 28 6f 29 29 3b 7d 7d 3b 76 61 72 20 69 73 44 6f 63 75 6d 65 6e 74 48 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 21 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: f(!window.performance){return;}var o={blog:blogId,post:postId,blog_id:blogId,jetpack_version:jetpackVersion};_initTracks(o);_computePerformance(o);_loadGif('t.gif',_serialize(o));}};var isDocumentHidden=function(){return typeof document.hidden!=="undefin

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:36 UTC	4475	OUT	GET /adsid/integrator.js?domain=2itchyfeets.com HTTP/1.1 Host: adservice.google.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:36 UTC	4476	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info." Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cache-Control: private, no-cache, no-store Content-Type: application/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Fri, 29 Jul 2022 14:26:36 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-07-29 14:26:36 UTC	4477	IN	Data Raw: 36 62 0d 0a 70 72 6f 63 65 73 73 47 6f 6f 67 6c 65 54 6f 6b 65 6e 28 7b 22 6e 65 77 54 6f 6b 65 6e 22 3a 22 22 2c 22 76 61 6c 69 64 4c 69 66 65 74 69 6d 65 53 65 63 73 22 3a 33 30 30 2c 22 66 72 65 73 68 4c 69 66 65 74 69 6d 65 53 65 63 73 22 3a 33 30 30 2c 22 31 70 5f 6a 61 72 22 3a 22 22 2c 22 70 75 63 72 64 22 3a 22 22 7d 29 3b 0d 0a Data Ascii: 6bprocessGoogleToken({"newToken":"","validLifetimeSecs":300,"freshLifetimeSecs":300,"1p_jar":"","pucrd":""});
2022-07-29 14:26:36 UTC	4477	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:33 UTC	37	OUT	GET /wp-content/plugins/social-warfare/assets/js/post-editor/dist/blocks.style.build.css?ver=6.0.1 HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:33 UTC	78	IN	HTTP/1.1 200 OK Date: Fri, 29 Jul 2022 14:26:33 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Wed, 01 Sep 2021 15:45:34 GMT Accept-Ranges: bytes Content-Length: 2209 Vary: Accept-Encoding Content-Type: text/css
2022-07-29 14:26:33 UTC	78	IN	Data Raw: 2e 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2d 61 64 6d 69 6e 2d 62 6c 6f 63 6b 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 46 20 50 72 6f 20 54 65 78 74 22 2c 20 22 48 65 6c 76 65 74 69 63 61 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 73 6f 63 69 61 6c 2d 77 61 72 66 61 72 65 2d 61 64 6d 69 6e 2d 62 6c 6f 63 6b 20 2e 68 65 61 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 6e 6f 77 72 61 70 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e Data Ascii: .social-warfare-admin-block{font-family:"SF Pro Text", "Helvetica", sans-serif;font-size:13px}.social-warfare-admin-block .head{width:100%;display:-ms-flexbox;display:flex;-ms-flex-flow:row nowrap;flex-flow:row nowrap;-ms-flex-align:center;align-items:cen
2022-07-29 14:26:33 UTC	477	OUT	GET /wp-content/themes/highfill/style.css?ver=2.9 HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	505	IN	HTTP/1.1 200 OK Date: Fri, 29 Jul 2022 14:26:33 GMT Server: Apache Last-Modified: Wed, 04 Sep 2019 16:52:11 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 14966 Content-Type: text/css r-nuk EI wDi#>.AU"Lb><<D$@I>s<y%y~/BH~arbjR8\|N3]^N~J/Mt8(;&lZK~@+.WOmfO?%BCT;xut6KlOW$FVeZCy."jt<_]\| mBDU_iYxrW#Q%Ri!Qw.)P$W#[W6&}e\|iNhJmDv/77c???F~I2\|?E7Mw}ZNtok~eE(RALfb nt\O}J++K~% 'Sh}'mi ?4gOt('I\|tE 1!oo,9Ifai<I\|)TC$!(`g+Ir3~3$~ZC$h6??l)p'3[f2M3D}f/ATDgNN'XW>@uTLg\./KYc:tyFdNki/3k/q9M_0$Nf>VUuE.POhRo. `+.WDw:d/&V3.!uvBGCjSGXKby)7GB4)Ot-%P/-Iu:8#%:#\L(PS,L3~enb<h$.QSqM] ZS[K8nETNb.koJXa8/&%ZFqHiSaIe [o_ T"B-cMNV.+$?cLYuKRnQ w'o?,X\|-zIkzRlQmr+qmOV(+IpE--6 )gn{tR(EBA$_gsnS%fxSlPFx)PGE$(2.s`yzpRv7gaDYirOUB~wAc5}0Mt6=j<_gXx}>(LB+llVk~YmM4o'B?FkqBzDeXRlZa=,Gy^f)Tt T;}8&G B]R=Rp}V>Na!ngynZ{7{<}`fOLx1O',/Iep7s/_@OOyv4Vy42UE+"6\j',N)2">MWMCBx-{^HL.Pnl$\|6R>f2EQ^8$hDeDYs0Vc:/\|JV9&>tlgX/\|7V#d7id`&#[p<D[o@_F!,+K+N~m\|^z'4{N1F,f\$FD\|!1OWNhu2+S\6u[I,\P@hN:<wx7duV?lE 0#gj178MK$ j+0fPr'pqft6Jun;"S%-y5&!A0T;K7DJ&?^L#Fi;&Z_e^eoPHZ-k!Rz[}EIIx9JT59phZ'Jvc2i" KlhwW>p~~2Zk~eELnb~.&S?x]qG!_:-$P'I>(Ic)EkLOgR(&PKsMx,rSY`NK[iqz(vh"3m#+32d//2<evg'+}f$46(p/ {(h]zr^m2ol%yo49]Mc=[LWb,I,\1(dbI5GT;KT`5ia809N6mVolQT<=xQE\=MHLB(C)4NTyr0iA[ieJ.&E""H8=pemJuUZsxnu8Zq)E?<IRft\|RP~ZcG>/0+,JI<SP!%K<ftQvNgdlIDZ&[EVg-}4vBaJW0Y4CEj,8Sn,j{,3b!d`}ZnE~MyTW";hIl3R/UXrZ-kqkvktuSmr4~2P_pn"GVST!1.r+eOC$=\|k_j+Op[>}7zq{u &G 60?cNdk6cbF@v;&pY+YYB!B7GdZj>}CYZx:2+>P-\|vJnBEvN,j7LkP\J=M&{1_RusHYt%FggEQ=snmI 2g}woZn;XEZ35[\|Vv;+GVJxu<e(@/_QX~4NkR%5P^b1fDg`~q;\|@x-snWNqw8Zc7>6%LpiOzm",9Uj\|5zjFR/5h+t@(w'/CKm.l%lJ?M.!zl1rVom~Z~itrvV4(Vh)!ZjvYchn%y#Pt9FO@^?=+R!}sT^[0R~@?tx)INPi;[4Ouri'{Z%w,/p}wv$',)u}71m%{4fOc"<>5G\|8[z^p 2MobwB&l6<^MOGEgmRgF\+!\|9}cgKk$M<0?z7QV8c yyYt[7p\|Z '/Ci;+0[t:9zmU&&Q-{#8r>}?BIYA~)Z!FvNVp6~ ^ aW:Y4&;BacPr'pTNo\|:-l[4f16bPZa?mju&vKUc-wffnNYG~@4\|iD>fs+jQ'];"yv4Vyg\0X!w`3{>;5s/F\|:Z-kt1?G6E{MW HsTGMqbz{xe6"S2(H>V@+}S/0huw`4iOC<M.!zv[i\|om5MH&Q8_@,rg++}~Fj9\|Y][ohEemE+B-Y7NPpE1tBcGS:>E\b(A#X{5+dgL)F!{%:g+6# dGWlMBq/fC6Z/0+,wVIxyk)pyv5j&G[VV{>tKFB J0E&wj)r8w=2\|?NxkFZ;0f~})mn\|$"Q'\@++7_%a]gO~X)F>;KT,#\hnzm~ge<_]!f7iv4<_$]m0:_)hsZwlm;>5\r* o-4iE$JDx>nW$b!E/s_#r\|d\\|jePKvN$/rg'1j`eZj 'FV\|E675Rofn-"[o:,fz$g6% M-3uziG9wxr-C]{aF;i4"m"Hyv4V9;EF]c=niA`I^8"qT4oC"GSy=3~mkh~]=\yr_C/}YL[o5-9j\E7mOiQK$}3dRs<>Z8Aoh3F83(DK2ZH-T;Kvb(:o.S'Z1I0(RvV4OVoPR(g #+"!$ibkl8Qvl3aevg6% M-w~@?pO?5U?hFN8Z9;5oo4"ziG={8u;#l;yaac)FmF3wL1/"XoXYCl%d~Ei6;V%%w;{V$m!T1JBr)iry~B~T@D\zn$H1y6 njlCGOQ(}Z-Up~2@^gKkG-V&;~@6#NoW69- F;Rp8FRsjkY0Xw;hJq(C){+,;v4 --QDe[V<8,<]q'-{11;k`g{l1f}f)a6y%#w].$'f+!m58u?sfDz"+['-W>'%F$-n9D\|%)\|!x)7o2>x$xMvzqMZ/}UM(j"ZDN84lvV83(8cau&<_]jSmr4,"3Lnsa+7L(2F})r_%u[Sidhw'6^3\BU&Vf)R_,# {>WuhqbQ<=0^V{nv}b1LD`-`]:Z/G{I4 GRl{Zh'i;tdCG$.VB}`,E{ av-T\|n3_wxVt)MS,JC TU;zL./!?SIAXt!F?fqPI/\|$,:FaTpV 'b`Pr'-C{"oBnk_avm%\|Tewf;?2/}'ka+htH=})}(lyuG9-)U&]\##[{ a]ax=V-g{R-}KjNs;/{$gqHCxyp'=C <ntj,g/j)r8}`=A0'y@yF0KT97N-UYxR,=a1:\j#^gD~eI]IG6-XzL)K@++xA[TZ)X!uQ2k:Nd%E+x}Jy}s^d~rsqBaB/I^{O&SBZ$2\JSZamo[H,tdWdIr`[_lGoClUxDpB+,J1jW7>o9hnG&5C)Fgg<ohjaX-E7EQNQc}y!uMDDvJn(-,Yt9=f^uv<3\Y/ Mh`4k<Sm.V~!a`j;.fKT,CEz:j\|;Xx0FiQ+n@i{B/F&y;]DrsKS9:G[i} }[CG&lxh5nI\|,$:8\e<v_\|QCtvZrCZ<V>0),6#mcS'{1K2oiFy[ky5M %_"Kb0-Vu$]v\Z)De$ (0 q+.9gB+]qviH^EGl3o]H^yHv\V=/uWMQZ0s~2)CEfh<E
2022-07-29 14:26:34 UTC	513	IN	Data Raw: 79 31 08 ad ae c7 cd ba 5f 36 99 75 f3 5e 44 f2 ec 40 e5 56 fd 59 3c 40 ed 0c 57 d6 03 60 75 55 a1 c9 b8 c5 6f 81 17 aa aa dd 5f dd a6 c2 df bc f7 3d de ff fd e2 e4 3d 96 a4 c2 fb bf bf 84 eb 4c 4b 6d d8 19 4f fc 3b 4e 7f 8f 8b a4 db a2 75 e0 fc 6a 7c dd 64 b7 6e a7 9d 8f c0 9e 85 17 ed 69 eb b4 14 ae 5b 83 67 f7 4b a3 6b 95 b3 b3 b4 79 40 69 85 60 b0 42 ee c0 66 46 4b 09 31 b4 b2 b4 5b c7 4d d2 60 d5 a2 79 be b9 6a 3c 26 fb 4d a7 fa d1 fe Data Ascii: y1_6u^D@VY<@W`uUo_==LKmO;Nuj\|dni[gKky@i`BfFK1[M`yj<&M
2022-07-29 14:26:34 UTC	578	IN	Data Raw: 52 28 8c 56 9d 39 ae 0e d7 87 71 b7 24 ff 85 ae 68 d9 62 2b fd 80 66 db a7 0b 31 bb 49 b3 bb a7 c9 e4 f2 1c 7e aa 2d 29 04 7f 11 f9 12 1d 30 f8 45 59 c7 97 86 97 f0 dd 67 59 93 86 df 9f 5f 4e a6 56 e4 98 72 03 53 55 4b 19 89 2e 27 2a 10 f3 ed 50 6b b8 f2 54 11 ac b1 d4 51 96 0f d6 19 a9 83 5a b6 53 58 7c 07 27 73 88 f5 6d c7 70 0c 0b 82 11 5a 2f a8 73 6b 80 46 fe 13 0d f8 76 a0 51 dc 77 72 77 3a c4 7e ca e7 2f d8 89 83 28 97 6f 66 84 b7 c2 6a 6f 1d b7 61 f1 f4 f6 44 66 35 cd 24 92 76 db c6 54 5c 8a a5 62 90 a1 22 e3 dd 0d e1 c7 77 03 db 26 44 14 39 24 7a e5 03 64 18 2a 4b e6 53 f8 3d 35 2a 84 94 f0 99 d3 18 ee 84 56 6f ed 38 5d b5 bd a2 6a d7 6b fb 34 1a 86 a9 96 a4 35 f0 8b 13 d7 0a d7 fe 1a 02 f9 c1 19 3b fb ce aa 47 b0 5a 8a 1c cc 32 fd 6e 36 bf bd 48 Data Ascii: R(V9q$hb+f1I~-)0EYgY_NVrSUK.'PkTQZSX\|'smpZ/skFvQwrw:~/(ofjoaDf5$vT\b"w&D9$zdKS=5*Vo8]jk45;GZ2n6H
2022-07-29 14:26:34 UTC	584	IN	Data Raw: 3e 64 d7 50 41 c6 00 00 Data Ascii: >dPA
2022-07-29 14:26:34 UTC	584	OUT	GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.7.0 HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	688	IN	HTTP/1.1 200 OK Date: Fri, 29 Jul 2022 14:26:34 GMT Server: Apache Last-Modified: Tue, 12 Jul 2022 04:15:50 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 3861 Content-Type: application/javascript R6B-L)v!V8`oLi~tZIi ).-X)i,L-Wv.>P$%73;KvRRr.!#/>]V^d./\|!^3Qy5RqAdm,xNp%\|,JoO q 8g`tI/<7\fj/x+,yUn`\| .znST]=\|\|Z[.UrYXbC#"xcRM.Jp({%/?G`;.Hbg=8ctz%~h_FdK !99^6Q4e%DD3X+EgSkXO"2#c)#T$\`p='s5iKEP,#d6+,+n5K0}m?K3.~M^)pOWGmxfguTYg$r.!#/I~Q$,'$qy5RqAdm,8&mqFD?zdb#[oB^K#^Y7. hk% vU24JKb+Ro~bo\n'8Z"IqSJpdVddKx3&.%M;dahR1G>b(6Dh$ozproG$ibV\ez{Mht4Xj.\&iC%L~_c3mWqC$^^/dxL5N\|@6B6mNw^e?SE{4%m{fz@Bv{K%lxQZ3d6HX60f=Yn}p/\U2-/`x_Gttu4d!ii\-UXg56>4?ugU5MH+S$hPPT(Tr!Q^fhRCi7 Lie-!dU"\9w$YlZ9?H09`_YL+>eMT(e $p>w+yxlZ7/;Q}-QC-_C_,@?Yd?Stp\|d\Xuz]6{t8Fi<1:'1(MfhpcS/%[$WwW6QvNQ9{PO0mTeI8%].:'slq82Sx\^aebTr8Seo1QgmR;n[Wr!F'U^y'q]Eb[%}^.Ca)B1d;v:`+-={HJ+}!;$!F /MKo@HU/`RSmlJiI7NR2&'tnCM8E+>eb6Q(yXJ_/BBv\|&R><?~?.%[4y\YLggOa^?^p&Ze~Bg]u%3hSL,I'}$<J6x<=!y\|}pXEeltFelFBw"UIO3]n:9v&RR7`<pKP,"'-W\|5m lfkf0T\jq^1dWLa&=:fzv\|\..w)oit?f#Y\%-JF__2eN5Q"VC0N91s0[J+R%TJ/VU`l+c0tZush24\r}gbDil6hA\Zkx@)LS{FaTCmz kfoh65Q~- a,iLIy%k`ON<$qJ+!\|VP=6>[L[S=x}A1Q3\n4uNtotkv{@vzMv-akR3,_nn tW%za6Luki9l3<akWnK<+:fZAOkZ,yu65)hL1e\KZ21U%?e IO$frt&3`:?m\mAvs^ppu?ek4LRyj?c!A`'\|R \|OEA-6Wb[Jv$>&4k=\|ygJu^&(cLT@C#S6R(]w1!,]LWanpUcoj%X !!_-K$&VrP=}'[X#p3c9Q2MU!N7}*KDV3iVJ[J%lb%`_Nqp8y?.GTT+c32 g?z dWM}v7~[iO&\gkg!wtP)kfkoF55aGBv$sw$Y^R!b&BRrM8Kb6qiIOKIQsn#=kn& UJ%3eW2uRI4(Z(34d4\m<>bA{s+fT$\|M[f+fqzrt&<g5\|1%}x<}azy~%k3@L<ZC4TR(QYpe5HG%`w>q=HMYJ%sm<HO$\Ipp?Iqg-KEDO:03(_`+PxUFq[(%G4JK>>u(@=?<Xg9U~N@)~5fb3gIe32pZmln6AjAh\|nnW4Ga]bj9Gw8Oj<?)/ph\|2Bo$/eYrSj%`c'Cq'q[<wJ4(i$z.
2022-07-29 14:26:34 UTC	719	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6 HTTP/1.1 Host: 2itchyfeets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:34 UTC	920	IN	HTTP/1.1 409 Conflict Date: Fri, 29 Jul 2022 14:26:34 GMT Server: Apache Content-Length: 83 Keep-Alive: timeout=5, max=72 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:37 UTC	4736	OUT	GET /g.gif?v=ext&j=1%3A11.0&blog=158033015&post=0&tz=0&srv=2itchyfeets.com&host=2itchyfeets.com&ref=&fcp=3438&rand=0.012172007544815289 HTTP/1.1 Host: pixel.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://2itchyfeets.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:37 UTC	4737	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:37 GMT Content-Type: image/gif Content-Length: 50 Connection: close Cache-Control: no-cache Access-Control-Allow-Origin: *
2022-07-29 14:26:37 UTC	4737	IN	Data Raw: 47 49 46 38 39 61 06 00 05 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 06 00 05 00 00 02 09 0c 62 78 89 cd 6a 80 0c 05 00 3b Data Ascii: GIF89a!,bxj;

Timestamp	kBytes transferred	Direction	Data
2022-07-29 14:26:37 UTC	4910	OUT	GET /c/6.0.1/wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1 Host: c0.wp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c0.wp.com/c/6.0.1/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-07-29 14:26:37 UTC	4935	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 29 Jul 2022 14:26:37 GMT Content-Type: image/svg+xml Content-Length: 4598 Connection: close Vary: Accept-Encoding Last-Modified: Tue, 01 Aug 2017 04:43:51 GMT Expires: Sat, 29 Jul 2023 14:26:37 GMT Cache-Control: max-age=31536000 Strict-Transport-Security: max-age=15552000 X-nc: HIT hhn 1 Timing-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Accept-Ranges: bytes
2022-07-29 14:26:37 UTC	4935	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 30 30 22 20 68 65 69 67 68 74 3d 22 31 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 30 20 31 32 30 22 3e 3c 73 74 79 6c 65 3e 2e 73 74 30 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 20 2e 73 74 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 46 46 46 46 46 46 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 35 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 3b 7d 20 2e 73 74 32 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 46 46 46 46 46 46 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="400" height="120" viewBox="0 0 400 120"><style>.st0{fill:#FFFFFF;width:16px;height:16px} .st1{fill:none;stroke:#FFFFFF;stroke-width:1.5;stroke-linecap:round;} .st2{fill:none;stroke:#FFFFFF;stroke-width:2;stro
2022-07-29 14:26:37 UTC	4936	IN	Data Raw: 31 2e 34 20 37 63 2d 2e 35 2e 33 2d 2e 38 2e 31 2d 2e 38 2d 2e 35 56 32 63 30 2d 2e 35 2e 34 2d 2e 38 2e 38 2d 2e 35 6c 31 31 2e 34 20 37 7a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 20 31 68 32 2e 32 63 2e 36 20 30 20 31 20 2e 34 20 31 20 31 76 31 34 63 30 20 2e 36 2d 2e 34 20 31 2d 31 20 31 48 32 34 63 2d 2e 36 20 30 2d 31 2d 2e 34 2d 31 2d 31 56 32 63 30 2d 2e 35 2e 34 2d 31 20 31 2d 31 7a 6d 39 2e 38 20 30 48 33 36 63 2e 36 20 30 20 31 20 2e 34 20 31 20 31 76 31 34 63 30 20 2e 36 2d 2e 34 20 31 2d 31 20 31 68 2d 32 2e 32 63 2d 2e 36 20 30 2d 31 2d 2e 34 2d 31 2d 31 56 32 63 30 2d 2e 35 2e 34 2d 31 20 31 2d 31 7a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 31 20 31 2e 34 63 30 2d Data Ascii: 1.4 7c-.5.3-.8.1-.8-.5V2c0-.5.4-.8.8-.5l11.4 7z"/><path class="st0" d="M24 1h2.2c.6 0 1 .4 1 1v14c0 .6-.4 1-1 1H24c-.6 0-1-.4-1-1V2c0-.5.4-1 1-1zm9.8 0H36c.6 0 1 .4 1 1v14c0 .6-.4 1-1 1h-2.2c-.6 0-1-.4-1-1V2c0-.5.4-1 1-1z"/><path class="st0" d="M81 1.4c0-
2022-07-29 14:26:37 UTC	4937	IN	Data Raw: 32 2d 34 2e 32 2d 36 2e 35 20 37 2e 38 20 30 20 33 2e 39 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 32 32 2e 32 20 33 2e 34 68 31 35 2e 37 76 31 33 2e 31 68 2d 31 35 2e 37 56 33 2e 34 7a 4d 31 32 30 2e 38 20 32 76 31 35 2e 37 68 31 38 2e 33 56 32 68 2d 31 38 2e 33 7a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 34 33 2e 32 20 33 68 31 34 63 31 2e 31 20 30 20 32 20 2e 39 20 32 20 32 76 31 30 63 30 20 31 2e 31 2d 2e 39 20 32 2d 32 20 32 68 2d 31 34 63 2d 31 2e 31 20 30 2d 32 2d 2e 39 2d 32 2d 32 56 35 63 30 2d 31 2e 31 2e 39 2d 32 20 32 2d 32 7a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 34 36 2e 34 20 31 33 2e 38 63 2d 2e 38 20 30 2d 31 2e 36 2d 2e 34 2d Data Ascii: 2-4.2-6.5 7.8 0 3.9"/><path class="st0" d="M122.2 3.4h15.7v13.1h-15.7V3.4zM120.8 2v15.7h18.3V2h-18.3z"/><path class="st0" d="M143.2 3h14c1.1 0 2 .9 2 2v10c0 1.1-.9 2-2 2h-14c-1.1 0-2-.9-2-2V5c0-1.1.9-2 2-2z"/><path class="st4" d="M146.4 13.8c-.8 0-1.6-.4-
2022-07-29 14:26:37 UTC	4939	IN	Data Raw: 22 73 74 31 33 22 20 63 78 3d 22 31 37 38 2e 32 22 20 63 79 3d 22 31 30 32 2e 38 22 20 72 3d 22 36 2e 35 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 37 38 20 39 2e 34 63 30 20 2e 34 2d 2e 34 2e 37 2d 2e 39 2e 37 2d 2e 31 20 30 2d 2e 32 20 30 2d 2e 32 2d 2e 31 4c 31 37 32 20 38 2e 32 63 2d 2e 35 2d 2e 32 2d 2e 36 2d 2e 36 2d 2e 31 2d 2e 38 6c 36 2e 32 2d 33 2e 36 63 2e 35 2d 2e 33 2e 38 2d 2e 31 2e 37 2e 35 6c 2d 2e 38 20 35 2e 31 7a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 36 39 2e 34 20 31 35 2e 39 63 2d 31 20 30 2d 32 2d 2e 32 2d 32 2e 39 2d 2e 37 2d 32 2d 31 2d 33 2e 32 2d 33 2d 33 2e 32 2d 35 2e 32 2e 31 2d 33 2e 34 20 32 2e 39 2d 36 20 36 2e 33 2d 36 20 32 2e 35 2e 31 20 34 2e 38 Data Ascii: "st13" cx="178.2" cy="102.8" r="6.5"/><path class="st0" d="M178 9.4c0 .4-.4.7-.9.7-.1 0-.2 0-.2-.1L172 8.2c-.5-.2-.6-.6-.1-.8l6.2-3.6c.5-.3.8-.1.7.5l-.8 5.1z"/><path class="st0" d="M169.4 15.9c-1 0-2-.2-2.9-.7-2-1-3.2-3-3.2-5.2.1-3.4 2.9-6 6.3-6 2.5.1 4.8