{"report_id":"2a026af7-2a3b-4179-ad2f-e036c1909a1d","version":6,"status":"done","tags":[],"date":"2026-06-03T07:51:03Z","url":{"schema":"http","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"title":"The Practical Nanny – Your straight-to-the-point solution for your sleep struggles","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-08T07:51:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-03","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"thepracticalnanny.ca","ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2024-11-04","domain_rank":0,"first_seen":"2026-06-03T07:51:04.220501Z","last_seen":"2026-06-03T07:51:04.220501Z","alert_count":1,"request_count":26,"received_data":1201303,"sent_data":13272,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]},{"fqdn":"0.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":67278,"first_seen":"2012-05-21T07:08:47Z","last_seen":"2026-05-29T00:57:22.780907Z","alert_count":0,"request_count":2,"received_data":30350,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2026-06-01T07:38:41.319106Z","alert_count":0,"request_count":1,"received_data":13283,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s0.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":56327,"first_seen":"2017-01-30T05:08:18Z","last_seen":"2026-06-01T18:53:12.206244Z","alert_count":0,"request_count":4,"received_data":242525,"sent_data":2262,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2026-06-01T07:46:19.769776Z","alert_count":0,"request_count":3,"received_data":753,"sent_data":1778,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"r-login.wordpress.com","ip":{"addr":"192.0.78.18","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":230904,"first_seen":"2012-05-21T07:12:00Z","last_seen":"2026-05-29T01:04:16.823206Z","alert_count":0,"request_count":1,"received_data":573,"sent_data":653,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9590f58e80fe2b8db9414bb2830ed3b","sha1":"70d725acc34c61c80c93629aa0a76b5b54776c96","sha256":"2f18019f6597af3f045fb726b51d7e35934367a24372aef07758b674f7248ea1","sha512":"445d511665b0ff97cc1eb9215f8dfd4e1935cff849164fc29785e59eee05def5e6777fdedfde3de3a66b4dab5b94063598ec30ddd6ee07a90fd8dc50caa79f35","ssdeep":"96:NKy173a7ymf1DnXyM2GXEcHXHe8k8KOHgJsmH85bctMzK6kxIpu0fieAFHg:NfBWf1DnXyM2G0ZzOHzt5xwepvieAtg","tlshash":"95b1438b6b9c0e18887610627d90b395387dd63cb90acf35acbe45286dd9efbc151e4c","size":5578,"data":"","first_seen":"2026-06-03T07:51:07.47644Z","last_seen":"2026-06-03T07:51:07.47644Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wpcom-actionbar-placeholder-js-extra","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f1dd05e3f86c74582c0a1f0c42adb57","sha1":"33eb126dfb9724a376d126c24068826aa86c4759","sha256":"deca083051345586cbfa47820a3ce5d41d819b59cf040b565c369cc08104d16b","sha512":"9026b47ec5d3a53e39f573c9c37f93898c555d509cbdb8d6f41e7a2c54ac2b884c85463ef07e16760e07bb202650dbfea8559236f886d84b294b33cf1acfb724","ssdeep":"","tlshash":"1f11f99ff9c32c52a2a385f06c79639ec820f877cc40a000bfad8c3c03706d720a0608","size":999,"data":"","first_seen":"2026-06-03T07:51:07.477811Z","last_seen":"2026-06-03T07:51:07.477811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/jetpack-mu-wpcom-settings-js-before","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1513397f9bc467ff641ea3cf26830c63","sha1":"a9dfb9978be350f52ea624c538435a4f12cd55a5","sha256":"ac0160f863637409b1728056566aa0f52009de12e05ee7e30aca00f4d4871af0","sha512":"5354e636641850f4d498512fa0124a588c857d298f3e50c26a0ebabf102938a16eda2667c7cb30322da8ed31e41c7710fd69fecd73c746bf5241dcb7b949a17b","ssdeep":"","tlshash":"a3f0a757c1dc4959655507b44c9426f2804fe32cc885f2c5fcfb943910a154536bd540","size":562,"data":"","first_seen":"2025-12-17T04:52:47.243201Z","last_seen":"2026-07-07T02:22:48.902276Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/query/view.min.js?m=1779418693i\u0026ver=7a4ec5bfb61a7137cf4b","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"92a06776c5fbf8926b5944c44b55f139","sha1":"b890e5cc493a4ca5b763546d03b1ed43ae9ab223","sha256":"7a4ec5bfb61a7137cf4b86933edc388ff46deb9602d99d84ffb6d5b057a39cd8","sha512":"b1e908e3ca4b5de13a0ca70cf6969a1588bb9941bf2b99a4c9cea067aa0b9b6f831d57bf48669e1e6548a6e7cebc5139440da2a9043f7eaf0ce7add962f0f9a4","ssdeep":"","tlshash":"1811ce783372e9b68cbf51664127610263b2a0e9950cd2e09e945c6783a57c1ef4f293","size":966,"data":"","first_seen":"2025-11-26T01:26:55.82524Z","last_seen":"2026-07-27T10:49:00.885514Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-includes/js/wp-emoji-loader.min.js","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"55f0f9399e03b35a6189a8aeaf9b5693","sha1":"df3014dd833677cc4aa7643c82f4dca310234e19","sha256":"2a36d5b5e21ccca49a9ee36a39b031dbeeeccc83e0515a99a68fcbbd918091fe","sha512":"161594d4a8696b27bfa6f81c7eb19065e8ea18ee36864adf4ad30f22b333244c498c727240c0bd38cb80b601b0f556b6d94d2f46e0570b3f911a4e68fb8aec28","ssdeep":"","tlshash":"2e81859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea31418b5893c274a46","size":3950,"data":"","first_seen":"2026-01-16T21:43:40.572833Z","last_seen":"2026-07-24T02:11:05.031731Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045d9793bea2147d49e2091523bca32f","sha1":"add12c4d76b79a2ac35faec35f62d29a95aba30f","sha256":"e08353fd145bf9e8bfd944b3d6f4ccfa8ee927eda9209edeb5b1744e3b3a85b7","sha512":"9ca71c48df2dddcf5fb60a035e0a40426e4f46ac7c8acdd14fcf1faf60ebd152d3fad1477b9de2d62e3034d2cea7fb54ed6c70f79c4888228b463b1e5c2b3114","ssdeep":"","tlshash":"a5d05e44db5da880803d3024df6f61cc241d527b945008ea1d06e2b0ad74a2f8115cee","size":261,"data":"","first_seen":"2023-03-07T01:29:43Z","last_seen":"2026-07-05T08:21:38.6835Z","times_seen":17083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202623d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","size":21889,"data":"","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-07-27T12:48:27.211308Z","times_seen":11143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"474e4081c28b3e3b1297cb65cf42b7e0","sha1":"0ecabe1e300b3c681bd3db142198aac3a96b3cf5","sha256":"0be192a656be21a54c9a2e4040e96041cd8f479240387354853db0bd820c98ce","sha512":"16f49cdd96353d4f4bd283500db59f977687ba98b4c3351f179ba36f7610f9982504e51b927314cf386649932de9c02c005edc721e0511ca037f9c301e121040","ssdeep":"","tlshash":"0201f99fb9c32c52a2a345c06c79639ec820f877cc40a000bfad8c3c03306d720a0608","size":664,"data":"","first_seen":"2026-06-03T07:51:07.482307Z","last_seen":"2026-06-03T07:51:07.482307Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/rlt-proxy-js-after","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eeb64dc46a6fca20389eb26e96b026","sha1":"c20ebb67fa557a34e05dc67b229af6c6f0a64380","sha256":"6727eaeb67a426f6bbc26676a36e972cd21321023d770451e13f68df08019c48","sha512":"2eb533fa41e772b2871a11930a82b213b4c724315eff71eaaf3d1d5aedb2b402e7c2299a142e097763dac4019092f26114406cb05b9314bdb24033c3b6c34df9","ssdeep":"","tlshash":"f3f0228fc0880828ceaa0c3220203b23800b8cb3c822c28008aa80bc00b08f022b388f","size":457,"data":"","first_seen":"2025-11-25T06:06:20.794598Z","last_seen":"2026-07-07T02:22:48.900991Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wpgroho-js-extra","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"351a2ec1ae58ed31e43b7e161226295e","sha1":"df3a71058fe9026500b8c0c439ad22d9604277de","sha256":"8ff32c6195bdb3f6154a94bae663aa748aaa547cc3c4c5eb126abc7c53d8b75c","sha512":"01375f5b22d0ebb5197b314962d8ca0dd90339be2cbfdb053fc6134995749cc0e31290a6b45aefebf9acd9e000e8557b9993366460abef68ed4798ac57fb6ee5","ssdeep":"","tlshash":"95112228c0ac2e00b3c00c30883e0033820c8802c08f0e00ba088003a03000382b0000","size":858,"data":"","first_seen":"2025-11-19T03:48:19.64147Z","last_seen":"2026-07-21T20:20:49.023736Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20f28367474656433454746ff8ef98c6","sha1":"8ac98731563b007a440724309bc803643caaf394","sha256":"dcabf1e5ffab3fd493dab24c5b66f41a4875dca57bae2feffe942ea7fdbf5b61","sha512":"583215d89020360844b0afeef26ee267d60537b0b7297fae381e179a3ddab4287027e6d33c080309827ff782b6116e070f9dcf6ee176711376a2e2e76c152a61","ssdeep":"","tlshash":"2dd0a96781dc4aa965a507b48c9026f2800fe32cc886f2cafcfba43a10a294536bd940","size":223,"data":"","first_seen":"2025-12-03T18:28:02.018232Z","last_seen":"2026-06-07T08:08:43.58771Z","times_seen":4313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54ea2b29fba1624d68bfe357436dcbd9","sha1":"3398d6ddcc12beb44794acf1d83bb372c02588c6","sha256":"b4395288010b99ce8a1bf3dd97af8969a7e8e24d48ce1b28aeec04c83cfa4a42","sha512":"5986590ceab1b2d31dc8cc6374dc3f9021bdfb40c835e9918d5e5acd551064353d5cc6ede84f4fc4d6fa83c7c27a90ad25ba43911fe9eea54ee0c5d2ac4f3917","ssdeep":"","tlshash":"0ab0928f91985869deaa4c6220203b23804b5cb39962c59048aa95bd15b19f125b799f","size":113,"data":"","first_seen":"2025-11-18T17:28:57.936421Z","last_seen":"2026-07-05T08:21:38.702313Z","times_seen":9506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","size":12829,"data":"","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-07-27T12:25:45.035402Z","times_seen":25900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"43d3c2bb73181f4d393133bba8e9a708","sha1":"0e916979dd33f38c086286da23569db54956fd5e","sha256":"efaa5193bbad9c60ffd1d7a4bc428630806d507a8b9a0df401ab0995f7424968","sha512":"84376561bcf41d5462186e409d0ad6750d1721f297c25d799c1b4be131ab4c18132df92acf2bcd9907be09393fbc556a9995a980491fe171b4b06daf5b7db540","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKK2:YYJC0cHWujsIl39KK2","tlshash":"bd031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51fbfbd","size":40144,"data":"","first_seen":"2026-05-22T04:28:27.661154Z","last_seen":"2026-07-27T10:57:35.304418Z","times_seen":3343,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-03","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T19:10:39.384572Z","times_seen":309244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/js/rlt-proxy.js?m=1720530689i","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"146180a330ce9e46e1f9adee12415931","sha1":"6424ee3ad0e04217ad924f8232c66780fb206917","sha256":"4e1ddbb805779444ab8a88a9527fec667fc9686d1247f88727ad3a04b9ec0573","sha512":"8cd22742bab345037fab961b9bc72bf5ad764dbcfadbe6a9fddb60b982deeb07c64b4bcb2259eedbce6d39794ebd4eb15decd05335434967aa2a14bb586f8751","ssdeep":"","tlshash":"8c51ce8fb515213917f29a2abb27360274770091590a9140c16999f13fbab8fc227fce","size":2481,"data":"","first_seen":"2024-07-09T18:34:31Z","last_seen":"2026-07-27T12:48:27.210311Z","times_seen":15577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","size":655,"data":"","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-07-27T12:48:27.163416Z","times_seen":19543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bffbf7e55194457b147b6683f8a1ed2b","sha1":"628605011087d8ff4f38a470f966e2927ba4a83a","sha256":"baa797800947c3b91895f89e61f3b9e561cb6ac8624d7adb4580e93359f746c0","sha512":"98a2a5cddf5b1d259d8e9d2b8e0b6326aa905e33c50862027cc0bde18ebc533675ab64ae1971f1493ad5575b809bfa21bc8a2c9334fcf60537405c25e4ecae50","ssdeep":"","tlshash":"bda0222800ac2e0033c00c20803a0033820c8802c08f0e00ba008003a03000382b0000","size":62,"data":"","first_seen":"2025-11-18T19:04:29.042779Z","last_seen":"2026-07-13T05:46:29.258174Z","times_seen":7476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","size":9088,"data":"","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-07-27T10:49:00.864785Z","times_seen":17826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd7a4b7f0042aca6fa1d52e933562a2","sha1":"4ad2ddea95ebe3b0a8155e4eeb3d9d0f29541e9c","sha256":"96a846e1d7b789c39ab9afd163f2629edd72b213cc3145c377e591b10343891a","sha512":"19b0f639a9981b7d7a376d9ba3c7c6857cd087c4688122d186278b45e313be7dfd0ebdec479dcec3acb5016a646e50a19fd2c931f9561b3cb298fcafd9b4e7c3","ssdeep":"","tlshash":"56517578337079b5caff4784f224d528b365ddc1440b28017d2926df26aefa181e1f6a","size":3090,"data":"","first_seen":"2026-03-26T15:40:50.79804Z","last_seen":"2026-07-27T10:57:35.320237Z","times_seen":5639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/js/bilmur.min.js?i=17\u0026m=202623","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","size":13941,"data":"","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-07-19T23:12:16.756811Z","times_seen":22298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2024/11/olivie-strauss-4uiwn-nfck8-unsplash.jpg?w=1440\u0026h=2160","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/olivie-strauss-4uiwn-nfck8-unsplash.jpg?w=1440\u0026h=2160 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 101064\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 05 Nov 2024 03:36:42 GMT\r\nexpires: Thu, 25 Jun 2026 19:59:45 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 30.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=1326.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101064,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"303a00de90b73eeed6c7107ec54727b8","sha1":"7d4d443dacd28a86c47bdb724ada94ec06a97042","sha256":"a9c7c1121efba65453d9cfe1f324e447c449f77eccbe45c3d15be14e942e38f3","sha512":"72d2fdd2456958b786f3f90a29c426b937e9746a57356f3a218326cdbaf28de662b8f127a6c76ea66970ebaeaf80c898413ea34bd1407a59853d4407e193d390","ssdeep":"3072:ZRAw8oD3a3Xl0LYoJ7Nvc+FpjcBmflJaBwzhgzMYN0:ZRnGl0LY27VpjcB2KBwVy0","tlshash":"3ca3128830b990230ff4163c92b5ab42d95ab8c6b76e31855de644f6271b93ecf1582b","first_seen":"2026-06-03T07:51:07.410103Z","last_seen":"2026-06-03T07:51:07.410103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1350,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/img_0273-e1738436505514.jpeg?w=910","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/img_0273-e1738436505514.jpeg?w=910 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 94394\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sat, 01 Feb 2025 19:01:46 GMT\r\nexpires: Thu, 02 Jul 2026 12:40:04 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 25.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=526.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 910x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d404e58b246b031afc48075862576e9a","sha1":"d40c16de7d915d696425c00e5f2eb7c65fe294d1","sha256":"b1841c9314f1b1f1648ff8bd21d3aa79ef4b0812f4822bea82a04a16f3b717ab","sha512":"48b2ce25c2d7e3c12624cc6eafc2a4d784893ad3ee357c055f438e621cc674cb1e875793481089c5073fe360c24bdbc3e349ec30bf90f6d19170ddf4b05e2b3b","ssdeep":"1536:8v6eh5O2Mi51Qwbutr/4r5YEKQ3U5kBPoqH0Sd8JqcocJOXhq4gcrW929RJy06wP:8Cehw2751QyutmOaxBP538JrghqlsHEO","tlshash":"b893128d17304facc6776293d5aa57a33b1422db12212fbcca28d61ff42d510b6e0ce6","first_seen":"2026-06-03T07:51:07.415197Z","last_seen":"2026-06-03T07:51:07.415197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2024/11/kateryna-hliznitsova-jt5iuqhtl7e-unsplash.jpg?w=1440\u0026h=961","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/kateryna-hliznitsova-jt5iuqhtl7e-unsplash.jpg?w=1440\u0026h=961 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 48596\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 05 Nov 2024 03:42:52 GMT\r\nexpires: Sun, 05 Jul 2026 04:31:58 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=886.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x961, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4ad7e02e2ce7ab5144bc2152751d9e4","sha1":"062eed5d97b6dfc2893a617ec2e0ea2555c257e4","sha256":"15dcde8bd15b3a52ec71557c81a27c6f2b0162e9e3cf1a9fd651f97dd2033378","sha512":"3bf5c1339f3ef201a65916a199379de8703b544fb503f4e3676e7462f948f0bc1e1863f8945108a1988f9ad1d91bd78a2dbd6ce2689fad6fb8e262b3afccd43e","ssdeep":"768:YD2e2D4UovZ0pu5soOQLUDCy48JMhfVLUNZXf9upgEmBXJkcmg45N81S:ODYovhTrLHy48J4AXXsgl32zNt","tlshash":"7a23f1f4f45295a12ec95a447c433b70b4d2b0c85d3920c3aaf6f1396ba06aeb815bd2","first_seen":"2026-06-03T07:51:07.416462Z","last_seen":"2026-06-03T07:51:07.416462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/09/diploma1.jpg","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/diploma1.jpg HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70573\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 30 Sep 2025 19:11:55 GMT\r\nexpires: Wed, 08 Jul 2026 20:49:34 GMT\r\nx-orig-src: 01_mogdir\r\naccept-ranges: bytes\r\nx-ac: 18.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=181.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70573,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 792x612, components 3","md5":"9f8b1bb3f6723c9a91d22ac42b76a79c","sha1":"dbbb100ef6af95d8deccc56ddb83b70d1e3f0b84","sha256":"e003f78bca812a38f066c0cee37545a1e4ab62f9d20ea318e15422007f4db4fc","sha512":"f4f422fa52dfc01779d324c4fc74c1ed54182c2fcbbd20876a54912b5185f11c62fd7f3f9ac3208fa1eea67f6ccf60cf16096a415bb4396bf01c2ce68ba7289b","ssdeep":"1536:C1vU36ge/aUmdSpKtsb5vzhxMI5i5fsi6:C1e2aBd18zvGsi6","tlshash":"6363ce772e82d833e91f95362b41320d712b511882876a317db56ffe872c51e5ccee98","first_seen":"2026-06-03T07:51:07.418065Z","last_seen":"2026-06-03T07:51:07.418065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202623d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.js?ver=202623d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Mar 2026 03:40:26 GMT\r\netag: W/\"69ba1eaa-5581\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nexpires: Wed, 10 Jun 2026 07:50:41 GMT\r\ncache-control: max-age=604800\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21885), with no line terminators","md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-07-27T12:48:27.211308Z","times_seen":11143,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":1,"connect":7,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-03T07:50:40.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\nvary: Accept-Encoding, accept, content-type, cookie\r\nlink: \u003chttps://public-api.wordpress.com/wp-json/?rest_route=/sites/beyondbabysteps.wordpress.com\u003e; rel=\"https://api.w.org/\", \u003chttps://wp.me/g1Tz6\u003e; rel=shortlink\r\ncontent-encoding: br\r\nx-ac: 29.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=362.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":157637,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17109)","md5":"5faf50f45fd0b1e4c4339d9ff4ed424b","sha1":"985c75cb0c055ba3c52f2361712c5073e0a1976d","sha256":"f9f385f010d302e2409b7857ebf133ab0da69ebfd08fe41e7c25d3d60a6175ab","sha512":"08ce2e6811b1ef982e65b0e8fd8448a24761a19c83c2992b2c1036c045a84d4602360e8a337a9142f8e0162e3961d17e5765472babc407b5665baef7890221c9","ssdeep":"3072:RzexKdpZPp84wvSAIeTV4/Cpl+jbuAFAxy2UchIkZeN:RiUZPp84wvSAIeTVQCpl+jbjujIk0","tlshash":"06f33b2143b944f43aaf8b52e809b31df009ee51cb4992e6f4f5c04899c9efa15b774e","first_seen":"2026-06-03T07:51:07.41988Z","last_seen":"2026-06-03T07:51:07.41988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1714,"timings":{"blocked":672,"dns":31,"connect":8,"send":0,"wait":370,"receive":0,"ssl":630},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css;charset=utf-8\r\ncontent-length: 432\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 19 May 2023 01:52:23 GMT\r\netag: \"6466d657-1b0\"\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3f85c8298bd1f63f17efd3b3967e2917","sha1":"8cbe853ab2335ce410d7d7ae5bc19de242f7fbb2","sha256":"77e6916cc1f597af2401037c2cebb3f392dfcd9993d1d4b716644c14c319363b","sha512":"bb9823f4d08eda8af271e8972745dee61b22fb2df65e0471f234f2a3b0e645d08e726710852c4e8fd78815a3334341008ef70f16d9f720094428a4c66a7754a5","ssdeep":"","tlshash":"1ce06d06b546bd85d4ce76ab2c9ed61c3fbc90c66e1e8b157611db7042388c0283a885","first_seen":"2025-09-08T19:08:06.188532Z","last_seen":"2026-07-27T10:49:00.876914Z","times_seen":9059,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/query/view.min.js?m=1779418693i\u0026ver=7a4ec5bfb61a7137cf4b","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/query/view.min.js?m=1779418693i\u0026ver=7a4ec5bfb61a7137cf4b HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65c-3c6\"\r\ncontent-encoding: br\r\nexpires: Thu, 27 May 2027 17:04:05 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 32.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":966,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (928)","md5":"92a06776c5fbf8926b5944c44b55f139","sha1":"b890e5cc493a4ca5b763546d03b1ed43ae9ab223","sha256":"7a4ec5bfb61a7137cf4b86933edc388ff46deb9602d99d84ffb6d5b057a39cd8","sha512":"b1e908e3ca4b5de13a0ca70cf6969a1588bb9941bf2b99a4c9cea067aa0b9b6f831d57bf48669e1e6548a6e7cebc5139440da2a9043f7eaf0ce7add962f0f9a4","ssdeep":"","tlshash":"1811ce783372e9b68cbf51664127610263b2a0e9950cd2e09e945c6783a57c1ef4f293","first_seen":"2025-11-26T01:26:55.82524Z","last_seen":"2026-07-27T10:49:00.885514Z","times_seen":432,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /w.js?68 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/12868-1717166113344.7605\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12829,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12829), with no line terminators","md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-07-27T12:25:45.035402Z","times_seen":25900,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":4,"connect":10,"send":0,"wait":7,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/1125-1684465005221.1526\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 17.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (655), with no line terminators","md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-07-27T12:48:27.163416Z","times_seen":19543,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/kamala/assets/fonts/fraunces_normal_300.otf","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /wp-content/themes/pub/kamala/assets/fonts/fraunces_normal_300.otf HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thepracticalnanny.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 66116\r\nlast-modified: Wed, 02 Oct 2024 01:13:57 GMT\r\netag: \"66fc9e55-10244\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Oct 2026 05:38:54 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca MISS\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 10\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=127.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66116,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"24516d087daee0ad554c151e605e2e12","sha1":"2eda516c68bbccf88e4cd279309747df00086d87","sha256":"da957aed852e385960f38262b363203edb286cd00786d15139431517cdc0d7e5","sha512":"5cb9503df2bcdd210c51f668a4968e76849a21c183bcc42296cc1f16e52268118c08334ff27a6d743a0e911fa86629b08a9499a4cfefd51a5cd3f457286079bd","ssdeep":"1536:8oXHndeApPbwOzZvC5/pksl67lBeY9Kt1h2Av92or4SjZSnYc7U2/WAp07x:8oXHVFE5BkslIBvMKU2/fC7x","tlshash":"a953c0d99b67dfa0c3d61db955f2c3619391e46edeb48381f01ecaa570257700c80bae","first_seen":"2025-09-30T05:04:49.269386Z","last_seen":"2026-07-18T08:00:17.967167Z","times_seen":55,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":55,"dns":1,"connect":12,"send":0,"wait":16,"receive":15,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.545568456659682","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.545568456659682 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg?w=192","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:42.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg?w=192 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2446\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 06 Jan 2025 21:42:58 GMT\r\nexpires: Wed, 08 Jul 2026 12:42:51 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 25.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=143.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x132, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"251cdb0c3aaf094517a6fd24ab39015c","sha1":"047520008b181a8d15c9fbbb7f6fe98f2ebed6d1","sha256":"36a9f41e6c1494f867283c8b8c377cbd640c388c6870e8beeda9388af6726cfa","sha512":"e1871fd49089f3a6d6687c4e178d9f20adcbe8ea87d58f38b6b158849c7066325abbcda288e93fad18d5053c050e4b8fec02b9dbae949d3af6d4634d148660d2","ssdeep":"","tlshash":"f5515ad826d887e3db63857222d407f004b32aeecf2ec609d6a911fdbac036210570f8","first_seen":"2026-06-03T07:51:07.424274Z","last_seen":"2026-06-03T07:51:07.424274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/_static/??-eJx9i0EOgjAQAD9kXTQ2cDG+ZWnWWth2G3Ybwu/FG1y8zSQzsFYXpBgVA/tQJoXaRpgxIyOobUzXoHqBQ5ebq9xiKgoLjSxxxwh7ddB/UyRxLAEtSTmJezOm5be+8vPW+6H3D9/dpy8yHDyp\u0026cssminify=yes","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /_static/??-eJx9i0EOgjAQAD9kXTQ2cDG+ZWnWWth2G3Ybwu/FG1y8zSQzsFYXpBgVA/tQJoXaRpgxIyOobUzXoHqBQ5ebq9xiKgoLjSxxxwh7ddB/UyRxLAEtSTmJezOm5be+8vPW+6H3D9/dpy8yHDyp\u0026cssminify=yes HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css;charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 22:55:06 GMT\r\netag: W/\"68d476ca-c93\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:52:01 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3219,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d7e14e7b2bd91f23d67f095e21956daa","sha1":"3e944c5496cead4e3eba378c86e243dbda531a91","sha256":"31b0bb312078bf8bf2c54d82b6bac7f784321c175b90f1977005c7668c51e8c1","sha512":"d7da7734b2f1480457a6dd99eb6610f5eea6a33735299c1f39e1eaaeeb321de772983b4a7b0928e03837e7a194273c3440c5ff336a6b77c59bd2b77772ed1b07","ssdeep":"","tlshash":"bb617c952b4a0a45cd4e026c6f55c641698eecb2df1e99f7f6c4b13ac68b3e401e260f","first_seen":"2025-10-31T11:05:08.118575Z","last_seen":"2026-07-18T08:00:17.849664Z","times_seen":29,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65d-c12\"\r\ncontent-encoding: br\r\nexpires: Thu, 27 May 2027 16:58:53 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 18.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"fdd7a4b7f0042aca6fa1d52e933562a2","sha1":"4ad2ddea95ebe3b0a8155e4eeb3d9d0f29541e9c","sha256":"96a846e1d7b789c39ab9afd163f2629edd72b213cc3145c377e591b10343891a","sha512":"19b0f639a9981b7d7a376d9ba3c7c6857cd087c4688122d186278b45e313be7dfd0ebdec479dcec3acb5016a646e50a19fd2c931f9561b3cb298fcafd9b4e7c3","ssdeep":"","tlshash":"56517578337079b5caff4784f224d528b365ddc1440b28017d2926df26aefa181e1f6a","first_seen":"2026-03-26T15:40:50.79804Z","last_seen":"2026-07-27T10:57:35.320237Z","times_seen":5639,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/kamala/assets/fonts/public-sans_normal_300.ttf","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /wp-content/themes/pub/kamala/assets/fonts/public-sans_normal_300.ttf HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thepracticalnanny.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/font-ttf\r\nlast-modified: Wed, 02 Oct 2024 01:13:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66fc9e55-eda8\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:54 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 31.arn _dca MISS\r\ntiming-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 10\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=145.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60840,"size_decoded":0,"mime_type":"application/font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409","md5":"9be6bd6f1023a845a708816ef6510e48","sha1":"2aa494b82eb33964c1d772123690c2e266e22c05","sha256":"ecca0fab406acde10168f915bdbc077baa0a6107ccea8c91c7e4dcebfbd17d90","sha512":"b0aa988d437bbf66f82d3aff07878ad81319b87ee9f29336f886c2bc0f346ce320b8df1b6ea1f989b992260619fc3f2573b84cb1bb7c18f9e836d5899c9817c3","ssdeep":"768:1gE+7s17PGsqgQQA8YI0QQQQQQQQQQQQQQQQQQeZvUpZ7PF9ct4pnjuN87Bc/hB8:aE+w9UQA6X0bEkjS/Lnix7","tlshash":"7a535c13b752ae07cfa36afcd922d3e86379bc46ee16414b7659de2968cb0f04c81345","first_seen":"2024-12-16T10:17:27.800261Z","last_seen":"2026-07-18T08:00:17.866666Z","times_seen":64,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":53,"dns":1,"connect":9,"send":0,"wait":8,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/kamala/assets/fonts/fraunces_normal_100.otf","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /wp-content/themes/pub/kamala/assets/fonts/fraunces_normal_100.otf HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thepracticalnanny.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 52444\r\nlast-modified: Wed, 02 Oct 2024 01:13:57 GMT\r\netag: \"66fc9e55-ccdc\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Oct 2026 06:05:14 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca MISS\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 10\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=106.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52444,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"7caf0f6c22d965e673af84d9ef1c2c03","sha1":"86218fb8574c415c10933a176923d9ad14091fec","sha256":"13a9378b07057f3d304742fe38a1b9631c3a4078d22dbf512cd0a44505c69c82","sha512":"dbdd33a2ea22dbaa293c944ec906b53d38e7f216559999b16e2322ea65ef9742bd1af81384764ef0ba2c4379f9fe344eb71bae478f077840f63d9c9d2239ce6a","ssdeep":"1536:DkbHO75SJARkSz9/NGFzSDjI50hGyXh6Pr7:DkbH8QAr/N5DThbM","tlshash":"8533aeecb317cfb4e7db06b960b3c3a556aae01edc66db4494ddca2440813740e99b1e","first_seen":"2025-09-30T05:04:49.289013Z","last_seen":"2026-07-18T08:00:17.854275Z","times_seen":25,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":52,"dns":0,"connect":12,"send":0,"wait":17,"receive":11,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?crypt=UE5tW3cvZGQybFV2N0NwUlNYOC5EflImOEQuU35obkhVSF9zM0RXb3hxcjNDeHpIVDM5emxYLTVVbG83el1sR0xGajRfLn53MnJnWkdnWiU%2FS0FfSDdnZmtqbC5Ca0tFazBEQ1EtMyxfT35WTEpfXVNTNFJVendTcnN%2BfDZLcWJVUitTW2I9SzVbalQxellEd2FWZHV0ckN6UGNEZUhhX011XXkyLXZ6R0lPaE4%3D\u0026v=wpcom-no-pv\u0026rand=0.6825370258943546","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /g.gif?crypt=UE5tW3cvZGQybFV2N0NwUlNYOC5EflImOEQuU35obkhVSF9zM0RXb3hxcjNDeHpIVDM5emxYLTVVbG83el1sR0xGajRfLn53MnJnWkdnWiU%2FS0FfSDdnZmtqbC5Ca0tFazBEQ1EtMyxfT35WTEpfXVNTNFJVendTcnN%2BfDZLcWJVUitTW2I9SzVbalQxellEd2FWZHV0ckN6UGNEZUhhX011XXkyLXZ6R0lPaE4%3D\u0026v=wpcom-no-pv\u0026rand=0.6825370258943546 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.js?v=20250204 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/17401-1738713594313.599\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9088), with no line terminators","md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-07-27T10:49:00.864785Z","times_seen":17826,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg?w=32","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:42.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg?w=32 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 300\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 06 Jan 2025 21:42:58 GMT\r\nexpires: Mon, 06 Jul 2026 15:00:03 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 25.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=172.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x22, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bd9682a397aeb39b39872e7fa9d4bf4","sha1":"6db0c111aae4540dc6ed80b7e52208ff698bec06","sha256":"ddbf173a00382ab060f6eef324b2e20f9618eb82bad7c9c064bc14ac3bd66d32","sha512":"e29d43ea2efe094218f7fdbf114a4854364ea57da8a561a1bca56a20357e1073379157579e931cb804e278599ede602c79464b7d0fb713141726c48b19fc3f3a","ssdeep":"","tlshash":"68e07d85c71cd0070468bc1e6896d9449f8f048bf793508d82cf28e44639060ed1184a","first_seen":"2026-06-03T07:51:07.451939Z","last_seen":"2026-06-03T07:51:07.451939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/img_9063-e1736199778374.jpeg HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11357\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 06 Jan 2025 21:42:58 GMT\r\nexpires: Wed, 24 Jun 2026 02:42:28 GMT\r\nx-orig-src: 01_mogdir\r\naccept-ranges: bytes\r\nx-ac: 25.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=159.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x277, components 3","md5":"e427cee42c7f29942190862d9936fcd3","sha1":"fec07ddb27e8257a03fc3e27a70e70936c19b095","sha256":"7bad02a93d365fdcb06b7d1dcbf6608a617e2d28bdde46badb2d766c5276462c","sha512":"911e33874cb299d3d780e2df0b6de318a7701cb841e79edda98ef20b07866c81f866a72c0d6b3c751fdc6fb2e3927f9238f0140c474bbb2102da32579ba24abd","ssdeep":"192:/61boZ/xCGPoRlBh0pEaSkbyA/MZsmtLnUSWMEbzdo9ZD3U+KQDnW42vp6xxfzRJ:iN4Jx+lBh0pXS+23UHM2i953BDnF2vpy","tlshash":"5f3206534442cfe30ab9dbd86f170f890f477b14a1803ec75a219a1f3f25ad654c959c","first_seen":"2026-06-03T07:51:07.452881Z","last_seen":"2026-06-03T07:51:07.452881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/image00050-1-e1736372039710.jpeg?w=1024","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/image00050-1-e1736372039710.jpeg?w=1024 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 74766\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 08 Jan 2025 21:33:59 GMT\r\nexpires: Sun, 28 Jun 2026 04:20:57 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 25.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=343.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x870, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d968b3adb1ccb3d56b7126622bcd92be","sha1":"fbc8ba84e89d5b559ff31642b7612d1d5b228284","sha256":"7fe98f44be41a6ac00b59d550dedbd4603bed0cc63fb0128b1c3d92886dd29a6","sha512":"a93bcf56c71cac9a62284f465c9f532fbaebb319de45a55a1b25536cb50a473f084613265419cd3aeb2f1935090f19c659b607107bbf5a9b88919e7d098a71d3","ssdeep":"1536:U6R+ux32DHYs2yTpfHi06G1hxSkUkmWBe39svnjIsLtRO9e:IM3GRTphxSPkmOeWvnjIiv","tlshash":"b773016783cb1cd8d6b61172cd68befdb06276b24064f8040bf951f31aad00e69b639d","first_seen":"2026-06-03T07:51:07.453816Z","last_seen":"2026-06-03T07:51:07.453816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/js/bilmur.min.js?i=17\u0026m=202623","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/js/bilmur.min.js?i=17\u0026m=202623 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 31 Oct 2025 10:41:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69049260-3675\"\r\ncontent-encoding: br\r\nexpires: Tue, 01 Jun 2027 00:00:00 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 29.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13940)","md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-07-19T23:12:16.756811Z","times_seen":22298,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.css?ver=202623d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.css?ver=202623d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Aug 2025 17:47:56 GMT\r\netag: W/\"68af44cc-1d85\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nexpires: Wed, 10 Jun 2026 07:50:41 GMT\r\ncache-control: max-age=604800\r\nalt-svc: clear\r\nx-nc: HIT arn 17\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7457)","md5":"76eb82b1efaf3230452da95b7887182f","sha1":"41dbbcbb61c92fd4f313116da3a14f48c2dce4de","sha256":"a3874c1e7d3b8e79b6bb7af0f74051bb75d0e2021e40538740a555f3c247004a","sha512":"2b4d8b97efac710d622abe97615c8646ed08082e12fa40a6fb41b394951a0d9677327929e274cf575fe5d2ecd29181f5daf79377384b85f82c7921a9f6c9c100","ssdeep":"48:AFRV7SZ5pzQhe4MGcYeSAsLEx5+VVLCtJIeCQYH1g2cH7Ay2qcVgENt+Gg1mcSu7:C1SZDcTMGPeeSP3qqc1n6S2f","tlshash":"2df14312df021225501a98b2d899f3aa9354f561d7f34189ff305d1e8b87aeaf360e3d","first_seen":"2025-08-28T00:14:25.895777Z","last_seen":"2026-07-27T12:48:27.192976Z","times_seen":19571,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/mu-plugins/actionbar/actionbar.css?v=20250116","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.css?v=20250116 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/18776-1750255843681.0737\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4069)","md5":"081b8dc6366ecbed4540e2095032527f","sha1":"7876286288d2add1e689c9577bf3702aa4a9999e","sha256":"e0149c0e2f0d8a3a537e61c08556fa18e30d249cc6c56e84c5b80f7adeb0fcdb","sha512":"6453382e84605235938f8cce58a0ff986018d7bc59e6d317f681166beabe5a2701db69d3d91b048a7ddb4246f6b8dc63e4e18f05ab5bf266f7b247ef039f23c3","ssdeep":"384:/eZ+AggqgWYwdqJWJ0KI3h3r3pRuYOHg8X1:/ep7kc3c","tlshash":"4a72cad173a23839f62bce53e7c1bd9a903d6a01a4639dddb8725408afb18c64f1b604","first_seen":"2025-09-11T07:13:10.091435Z","last_seen":"2026-07-27T10:49:00.889671Z","times_seen":17290,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2024/11/toa-heftiba-gkqilqnti-m-unsplash.jpg?w=1440\u0026h=2160","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/toa-heftiba-gkqilqnti-m-unsplash.jpg?w=1440\u0026h=2160 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:42 GMT\r\ncontent-type: image/webp\r\ncontent-length: 234926\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 05 Nov 2024 03:43:31 GMT\r\nexpires: Sat, 04 Jul 2026 23:20:17 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 11.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=1450.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":234926,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f0855fe8b205784f4df5854ea2f58422","sha1":"4d3a1fa2c37966e49a9d428ffe0200383c4a459f","sha256":"c0a8cbd0c544acef7585c743372345695e1acf7038bf9154ce3cd0d32584d2be","sha512":"969522835d82bbadd46e50004fe808e3b33a1f91af5ca29cdf439cd44d230aa17ccd040dc10af4a0ac67ed819bce10eb95bebf3528a196ea8d721da03577c344","ssdeep":"3072:m3A11IyKBfzPpxRHTzZ14WELihn/iuJzp14g/IkdCpnuj+NbGD9BxS1ktapDiFGG:mEcdNL4yNzYsj+kDrwaoVpI","tlshash":"ea3423f6fb70f297d168ea6b1385702f73806d2cae5c860f47f106ba57096ad858e701","first_seen":"2026-06-03T07:51:07.461949Z","last_seen":"2026-06-03T07:51:07.461949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1486,"receive":248,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2024/11/img_9650.jpeg?w=1024","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/img_9650.jpeg?w=1024 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36208\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Wed, 08 Jan 2025 21:55:36 GMT\r\nexpires: Sun, 05 Jul 2026 08:42:49 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 13.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=271.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x789, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d8290df5971caf74c89b73dca34cf060","sha1":"e97a06e95e73d6c044d6abd5ee5d87f5b7ed33d8","sha256":"3f6d4b28481bd04a4c68f314ebf8c2f36807536a444b9d5c1425b5b5196b0550","sha512":"012b227d595d7c2494b6fa734d4f84a4f20b0bba780004c2225391a32837b97330c447334917608ec2f8b7029fe6f28b9d5cc784b348c5553cc3b5df9f56c101","ssdeep":"768:O8JBrBUDhbmeTzehA7JqfV/UgPYxY3pO20R5SoO8fUGRTGLcB:O8JBNUDfzeh/fV/V2qpRoO8fXGQB","tlshash":"b5f2f106721013dbd350392b5e59b41ab56b4b4df788cdd39aa3cb28476bde00931baf","first_seen":"2026-06-03T07:51:07.464274Z","last_seen":"2026-06-03T07:51:07.464274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/09/img_9582-2677953295-e1730776300701-edited.jpg?w=1440\u0026h=1602","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/img_9582-2677953295-e1730776300701-edited.jpg?w=1440\u0026h=1602 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 132682\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 30 Sep 2025 19:14:11 GMT\r\nexpires: Sat, 04 Jul 2026 17:27:22 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 26.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=448.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132682,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x1601, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f167fd4957907b73b497626afef6c80f","sha1":"ed4c10b0b7971a3e7bad9d1bdc0ea10daf906d89","sha256":"48c9540f2f05560dbc8a21b612c94d20e1c8408ed310935839aee1ba5e7ebc44","sha512":"1c260b887d8efa8cac0a02158faee2293369b0f90481412fefde453a9bbe7f71111c156c47bdcf841602ba3c4e1e8b5b6efb02cbc1e495fd18d7009ea083ff3b","ssdeep":"3072:Qq3RTI+KL2YRvGIFB5/ZZMqa6fqZVRGjvS6w5nxI59/4OkIacsw4Jt:QWc+ozRvd9Wb6SZVRGja6EOy9Jt","tlshash":"99d312838552c13d529815a3f3d820e75bbafab65636fd9b74e38810f6e305d1de3600","first_seen":"2026-06-03T07:51:07.465302Z","last_seen":"2026-06-03T07:51:07.465302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65c-9cd0\"\r\ncontent-encoding: br\r\nexpires: Thu, 27 May 2027 16:58:52 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"43d3c2bb73181f4d393133bba8e9a708","sha1":"0e916979dd33f38c086286da23569db54956fd5e","sha256":"efaa5193bbad9c60ffd1d7a4bc428630806d507a8b9a0df401ab0995f7424968","sha512":"84376561bcf41d5462186e409d0ad6750d1721f297c25d799c1b4be131ab4c18132df92acf2bcd9907be09393fbc556a9995a980491fe171b4b06daf5b7db540","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKK2:YYJC0cHWujsIl39KK2","tlshash":"bd031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51fbfbd","first_seen":"2026-05-22T04:28:27.661154Z","last_seen":"2026-07-27T10:57:35.304418Z","times_seen":3343,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-03","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"r-login.wordpress.com/remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly90aGVwcmFjdGljYWxuYW5ueS5jYQ%3D%3D\u0026wpcomid=236873300\u0026time=1780473041","fqdn":"r-login.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.18","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 19:45:31 GMT","end":"Wed, 05 Aug 2026 19:45:30 GMT"},"fingerprint":{"sha1":"BD:CC:FF:05:E0:54:EB:C7:78:0A:8D:41:DA:3B:55:4D:3B:A4:EB:0D","sha256":"A9:A7:0F:DC:B9:16:7D:3E:A3:D8:D8:A9:BD:DC:0D:93:98:23:34:3A:19:8C:BD:CF:4E:F3:32:D3:65:56:62:78"}}},"request":{"raw":"GET /remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly90aGVwcmFjdGljYWxuYW5ueS5jYQ%3D%3D\u0026wpcomid=236873300\u0026time=1780473041 HTTP/1.1\r\nHost: r-login.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nx-ac: 17.arn _dfw MISS\r\nalt-svc: clear\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=145.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b492adc24811e63eb149eb9a55026999","sha1":"66866acf8d1341f3f566776d76795838dd467f3f","sha256":"cbe7b94d76edef18de9a3604b8bec57bb67e89965741870976292bbe32e44cba","sha512":"0497c593697299b2a6c8656354ef48dd7ca92fb47e2e28021f114c6a6945f45b5790ab1318856e2a96a51836fa7f1f6e3e177b190c289e9e02c735d4fc89880f","ssdeep":"","tlshash":"c1c09bdf5c35a8e72161049574317b5d7555d18ce945b710f5bb124006967d64805384","first_seen":"2026-06-03T07:51:07.466869Z","last_seen":"2026-06-03T07:51:07.466869Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":26,"dns":3,"connect":11,"send":0,"wait":153,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/kamala/assets/fonts/public-sans_normal_500.ttf","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /wp-content/themes/pub/kamala/assets/fonts/public-sans_normal_500.ttf HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://thepracticalnanny.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/font-ttf\r\nlast-modified: Wed, 02 Oct 2024 01:13:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66fc9e55-ed84\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:54 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca MISS\r\ntiming-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 10\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=123.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60804,"size_decoded":0,"mime_type":"application/font-ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409","md5":"d82e7bfdd8972c0ac10760699123ab2e","sha1":"94ebaa50b78c70878b9967d5e552d3b25bac1127","sha256":"2a003e71ccbb4e3689cfcd7a060adbca34c2b8cda6e64318c7435b3f0fd647e1","sha512":"fb11b9642480fb3ba772496fc591920593f2b6f2052b478cabd97e597c5ee3027bb53bc1470f84cae469c5e2bf61701a8fd13b35ad38c20625b9658eed0cddd7","ssdeep":"1536:md2zE+u4zQUQA6vd6VlPMOTDAsRyV0rWnEsEpndS:mIo+u4Z+gTEOTDAsR80r2hEpQ","tlshash":"ce533b13f7928e0bcb922abcd412d7f863b5bd56fe5602af7165de296c8b1f40c91240","first_seen":"2025-01-28T07:31:12.49526Z","last_seen":"2026-07-18T08:00:17.92258Z","times_seen":71,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":60,"dns":0,"connect":11,"send":0,"wait":16,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?blog=236873300\u0026v=wpcom\u0026tz=-7\u0026user_id=0\u0026arch_home=1\u0026subd=beyondbabysteps\u0026host=thepracticalnanny.ca\u0026ref=\u0026rand=0.2997718296428816","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 19:44:51 GMT","end":"Mon, 31 Aug 2026 19:44:50 GMT"},"fingerprint":{"sha1":"42:51:7D:8E:5C:5A:69:84:E1:DE:81:56:09:A0:5E:F0:DF:73:81:69","sha256":"B2:9B:2E:37:90:1C:35:4E:9E:08:7C:C5:EC:0E:FE:B8:B4:39:CE:28:20:4B:53:FF:4D:20:89:3B:86:65:6D:4D"}}},"request":{"raw":"GET /g.gif?blog=236873300\u0026v=wpcom\u0026tz=-7\u0026user_id=0\u0026arch_home=1\u0026subd=beyondbabysteps\u0026host=thepracticalnanny.ca\u0026ref=\u0026rand=0.2997718296428816 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 25 Nov 2025 13:52:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6925b48b-58ea\"\r\ncontent-encoding: br\r\nexpires: Thu, 20 May 2027 15:57:36 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T19:10:39.384572Z","times_seen":309244,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/uploads/2025/01/img_0359-e1738435403897.jpeg?w=1024","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/img_0359-e1738435403897.jpeg?w=1024 HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90810\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sat, 01 Feb 2025 18:43:23 GMT\r\nexpires: Fri, 03 Jul 2026 17:32:33 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 14.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=559.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x929, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"081a0f663fe305660b0af05148c101fa","sha1":"0883c5a00b91afb091c4e0e1234f1f40dbc85d25","sha256":"b9f1d0ba38f31a1513eaf6c70af69fab741a140cb9e7f3ac77ebe6669411190a","sha512":"418fa742b371aec8c3dc42da1c41cb516873d2f7037f00e6addf35e4889bfe117229a7377c5d16a6416527326fc57bf6799d220aa4ccbfbcd0a49ee92268321f","ssdeep":"1536:v1T5SflQ28JgKLlTlUClY2cw3jU28rmLAyHz412ovAiFfgNjlFX61sCw2pFzFy/J:v6flQ28JpJjlY2c6RLHHFqAsfglFKqnf","tlshash":"709312e826caa0b2d44e6b6749c60586534d398fe7568b0fe361f91ae568748ccf1338","first_seen":"2026-06-03T07:51:07.473344Z","last_seen":"2026-06-03T07:51:07.473344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/styles/block-library/navigation/style.min.css?m=1779418693i\u0026cssminify=yes","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/styles/block-library/navigation/style.min.css?m=1779418693i\u0026cssminify=yes HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65e-5108\"\r\ncontent-encoding: br\r\nexpires: Sat, 22 May 2027 03:19:43 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20744), with no line terminators","md5":"37ec4c2f5edd2b8126770bd55b6650f5","sha1":"b272e530996b8f0b2aac80f07cd5ccd8e1e46c80","sha256":"dc216bcd50e98d2837a2cbd9d73f3c3fdec6fdf1d9d06c3656e5680fde1e1576","sha512":"0eef2bc5d7d10b9170d661fc6caa719f22b6604ef60aa42706a8547a76e5e8577d5f10853d74b30de700ee7f2e55c56cb0dcce6f1d6f97fb8629590aa515aee2","ssdeep":"384:SsFyo7lc6g7jiUsA5ey1FW9X3MiUMFMTMqMfM3MqMSMWMCM9MVMn/UYv/kxrWCeG:SsFyo7lc6g7jiUsA5ey1FW9HMiUMFMT/","tlshash":"e892e3c05fb0acf4a9bb933b6e5490148623e903c5097ad5a0f3e694b68db545bd3f0b","first_seen":"2026-04-08T21:14:42.369495Z","last_seen":"2026-07-18T10:29:37.606569Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 317\r\nstrict-transport-security: max-age=31536000\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/471-1684460922208.3726\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=5.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":317,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"6134a117c00dc1171f42fd8c35b78e88","sha1":"cac0c7c889ea57043338802e8446e9ec8b78fad3","sha256":"224f43833c9a318a3d885fe2ecb4c5b0794e0617ebfff62ad8d729105929246c","sha512":"11896c7411aad29af74ba3fea6417b527271fcdc29e274006c76a7090e2d2114c9afae024d179e967472d7ed6c614db4975d7e256f5405e9199056e8aa1193e7","ssdeep":"","tlshash":"ebe078534791551c000ff5715cac056522543115f647f1e852b2d6319d4bfcc411770c","first_seen":"2025-02-19T23:14:00.002605Z","last_seen":"2026-07-27T10:49:00.904531Z","times_seen":12182,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thepracticalnanny.ca/wp-content/js/rlt-proxy.js?m=1720530689i","fqdn":"thepracticalnanny.ca","domain":"thepracticalnanny.ca","tld":"ca"},"ip":{"addr":"192.0.78.25","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://thepracticalnanny.ca/","date":"2026-06-03T07:50:41.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 16 May 2026 12:56:51 GMT","end":"Fri, 14 Aug 2026 12:56:50 GMT"},"fingerprint":{"sha1":"9D:00:5D:12:F1:C3:E7:6D:09:5B:9D:BD:64:DB:94:F6:23:94:D6:99","sha256":"1D:1C:3B:D3:E4:B9:C7:8F:7D:81:57:97:EB:C3:13:3F:18:06:28:DC:0F:AA:F9:ED:28:0B:32:7F:A8:7F:00:E6"}}},"request":{"raw":"GET /wp-content/js/rlt-proxy.js?m=1720530689i HTTP/1.1\r\nHost: thepracticalnanny.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://thepracticalnanny.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 03 Jun 2026 07:50:41 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/5444-1720530698843.6633\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 36.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2481), with no line terminators","md5":"146180a330ce9e46e1f9adee12415931","sha1":"6424ee3ad0e04217ad924f8232c66780fb206917","sha256":"4e1ddbb805779444ab8a88a9527fec667fc9686d1247f88727ad3a04b9ec0573","sha512":"8cd22742bab345037fab961b9bc72bf5ad764dbcfadbe6a9fddb60b982deeb07c64b4bcb2259eedbce6d39794ebd4eb15decd05335434967aa2a14bb586f8751","ssdeep":"","tlshash":"8c51ce8fb515213917f29a2abb27360274770091590a9140c16999f13fbab8fc227fce","first_seen":"2024-07-09T18:34:31Z","last_seen":"2026-07-27T12:48:27.210311Z","times_seen":15577,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
