{"report_id":"6defd0d4-1e23-4103-b1a9-4f82a61ea0a4","version":6,"status":"done","tags":[],"date":"2026-03-22T02:18:29Z","url":{"schema":"http","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"title":"FinanceBlueprints","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T02:18:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts-api.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":166248,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2026-03-18T22:07:44.69218Z","alert_count":0,"request_count":1,"received_data":6474,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"r-login.wordpress.com","ip":{"addr":"192.0.78.19","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":230904,"first_seen":"2012-05-21T07:12:00Z","last_seen":"2026-03-19T02:10:28.927494Z","alert_count":0,"request_count":1,"received_data":590,"sent_data":660,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cw-static.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":176391,"first_seen":"2024-04-22T17:14:51Z","last_seen":"2026-03-20T13:52:07.846812Z","alert_count":0,"request_count":1,"received_data":16613,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"dn0qt3r0xannq.cloudfront.net","ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-01-21T11:08:15Z","last_seen":"2026-03-20T12:22:01.417303Z","alert_count":0,"request_count":3,"received_data":415793,"sent_data":1447,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"s0.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":56327,"first_seen":"2017-01-30T05:08:18Z","last_seen":"2026-03-16T12:17:59.820171Z","alert_count":0,"request_count":2,"received_data":52865,"sent_data":989,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"raven-edge.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":46082,"first_seen":"2024-06-27T19:03:05Z","last_seen":"2026-03-20T12:22:01.37338Z","alert_count":0,"request_count":2,"received_data":7184,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cadmus.script.ac","ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-18","domain_rank":18316,"first_seen":"2023-03-09T12:55:25Z","last_seen":"2026-03-16T12:29:56.21669Z","alert_count":0,"request_count":1,"received_data":233874,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"0.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":67278,"first_seen":"2012-05-21T07:08:47Z","last_seen":"2026-03-18T22:04:14.146135Z","alert_count":0,"request_count":2,"received_data":30358,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":171612,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2026-03-18T22:04:14.066645Z","alert_count":0,"request_count":2,"received_data":93670,"sent_data":1070,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"geo-location.prebid.cloud","ip":{"addr":"52.84.50.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-01-27","domain_rank":57585,"first_seen":"2022-09-28T00:11:58Z","last_seen":"2026-03-20T12:22:00.429003Z","alert_count":0,"request_count":1,"received_data":599,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"defaultstartermobile.wordpress.com","ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":0,"first_seen":"2024-10-22T13:50:49.460086Z","last_seen":"2026-03-21T12:59:21.474486Z","alert_count":0,"request_count":1,"received_data":51423,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geo.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49510,"first_seen":"2024-11-21T16:53:44Z","last_seen":"2026-03-20T12:22:00.747933Z","alert_count":0,"request_count":1,"received_data":519,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2026-03-16T00:11:25.084295Z","alert_count":0,"request_count":1,"received_data":13283,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"blueprints.finance.blog","ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2016-10-10","domain_rank":0,"first_seen":"2026-03-22T02:18:32.110851Z","last_seen":"2026-03-22T02:18:32.110851Z","alert_count":19,"request_count":19,"received_data":770562,"sent_data":11520,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"edge.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":64087,"first_seen":"2023-03-14T16:14:38Z","last_seen":"2026-03-19T11:00:27.56837Z","alert_count":0,"request_count":1,"received_data":475797,"sent_data":1428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"i.clean.gg","ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-04-01","domain_rank":10789,"first_seen":"2018-05-23T22:36:18Z","last_seen":"2026-03-20T10:49:20.278739Z","alert_count":0,"request_count":2,"received_data":1001,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"defaultstartermobile.files.wordpress.com","ip":{"addr":"192.0.72.17","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":0,"first_seen":"2022-05-30T13:40:15Z","last_seen":"2026-03-21T12:59:21.624018Z","alert_count":0,"request_count":1,"received_data":51389,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"raven-static.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49158,"first_seen":"2024-07-02T04:50:19Z","last_seen":"2026-03-20T13:52:07.76265Z","alert_count":0,"request_count":1,"received_data":514161,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2026-03-15T23:39:45.342233Z","alert_count":0,"request_count":6,"received_data":1499,"sent_data":3720,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"event-ingestor.judy.pnap.aditude.cloud","ip":{"addr":"131.153.232.246","port":443,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"domain_registered":"2021-12-29","domain_rank":51266,"first_seen":"2024-04-25T06:11:02Z","last_seen":"2026-03-20T12:22:00.290529Z","alert_count":0,"request_count":1,"received_data":508,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"public-api.wordpress.com","ip":{"addr":"192.0.78.23","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":55730,"first_seen":"2012-07-08T04:15:07Z","last_seen":"2026-03-18T23:18:22.472342Z","alert_count":0,"request_count":1,"received_data":708,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"blueprints.finance.blog/wpcom-actionbar-placeholder-js-extra","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad45391455948f484b32336b10c0bd00","sha1":"d8c6758fda2ba71985d8016528e14630450e3c4d","sha256":"bd00c4d4da9c007fecbb93a31f28fafbee0a1f9e5f4bc479e628ceeea3443fa5","sha512":"c7041f2ddaa7ae7f10c8af93b0258901a25ea3d7d424eca6cb7e87ab381b8ecb21cb9f0a06a22430c89a57c00732013f1100fcca6c9226f4d7a406cd50f7e4ea","ssdeep":"","tlshash":"5b11dcaff5ca1d51536302f0bd6d679fd856e83bdca0e515ae9ccc6c03b0596a091a08","size":973,"data":"","first_seen":"2026-03-22T02:18:34.963916Z","last_seen":"2026-03-22T02:18:34.963916Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53d464354766b79c95125b382e45052","sha1":"3236f1621303c030047177f674e6d56d6711a263","sha256":"791b0fd5cc7d1ab05a8670b858c9995a97bad717dc016ffdacff1de7cadba4a9","sha512":"eec2f4c333b4e9a03e9926e51d1d15fe75d905eacd1212041986c736cc4ca056f1e6b8f5693a8e79f3455ec32690a9cb7aa2433be354876e23c14f4c63b7a9dd","ssdeep":"96:NKy173a7ymf1DnXyM2G2cHXHe8k8KOHgJsmH85bctMzK6kxIpu0fieAFVg:NfBWf1DnXyM2G2ZzOHzt5xwepvieAvg","tlshash":"00b1338b6b9c0e18887610627d60b395387dd63cb90acf35acbe45286dd9efbc151e4c","size":5580,"data":"","first_seen":"2026-03-22T02:18:34.964625Z","last_seen":"2026-03-22T02:18:34.964625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045d9793bea2147d49e2091523bca32f","sha1":"add12c4d76b79a2ac35faec35f62d29a95aba30f","sha256":"e08353fd145bf9e8bfd944b3d6f4ccfa8ee927eda9209edeb5b1744e3b3a85b7","sha512":"9ca71c48df2dddcf5fb60a035e0a40426e4f46ac7c8acdd14fcf1faf60ebd152d3fad1477b9de2d62e3034d2cea7fb54ed6c70f79c4888228b463b1e5c2b3114","ssdeep":"","tlshash":"a5d05e44db5da880803d3024df6f61cc241d527b945008ea1d06e2b0ad74a2f8115cee","size":261,"data":"","first_seen":"2023-03-07T01:29:43Z","last_seen":"2026-05-27T17:21:46.465177Z","times_seen":16197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a7a7ca40aed945a42dbf180dc20cd98","sha1":"e128149f04bc51d2462547c181109252997d600c","sha256":"8d232630201a81a9926bb7391a0ae86b477a563d0a9e8a17c3722a3a9e58af43","sha512":"63e655c1377b483df1c6569da8f2e8f28cd74ecf5a622bd051deec28f3c69bfa30a1655f32c1d0f1bff634f05aa49cf1cf42e50d4b2382ef9eb59b384934738c","ssdeep":"","tlshash":"a101dcaff5ca1d51536302d0bd6d679fd856e83bdca0e515ae9ccc6c03b0596a091a08","size":733,"data":"","first_seen":"2026-03-22T02:18:34.966078Z","last_seen":"2026-03-22T02:18:34.966078Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=da12a5b570b01325a073317062c56733\u0026modules=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%3D%3D","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46d526ca3f732c138551b90bd0779826","sha1":"7cc4254e7cf4c643f0d7c9747605c1017f6eb7c8","sha256":"b8686dc8b3ebea2b485dd6056e4316f95d4f38420d600e82458d5f5082e01b23","sha512":"7b56d1ac2aa9a7170337734d66041528a5bd41720ec236020480746aac3271331b2a8a01219a92643bc8467d02bed79e1ebd6600cb48bfd7005734347c6af5a6","ssdeep":"6144:eBOk7yDHicCxqh3u8oC77NPUSEyzQ20hplpp8JrM2yJy:o+DCcCxqRu9O7NsSEn20hpl8hM5y","tlshash":"09a42b8b33c6f0bb53d714d4d57b0215f2698904740ed060f629ada72826daf62a3f7e","size":475214,"data":"","first_seen":"2026-03-18T02:31:45.488925Z","last_seen":"2026-03-26T13:03:03.560953Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/sandbox%20eval%20code","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"f019f144761e15f741f6ab1e4cf566a5","sha1":"1c73bccb222e44ae4633750eda7c357460a81a03","sha256":"4cacaf0fd3e370c4840c87c79f923f1ffb69ff7ce5d8172390783c8f83861d62","sha512":"614dbb696b7185a4291bf2c43c4b7442e46740b0a76ec537472bb0fdae208c239642f5160175cef935876f72df688409f170513809606f8aefdfe6613f88947f","ssdeep":"","tlshash":"04c08c92aa5018ed2a602ab176206013e2c676012be3d585f00a00ab5080eba18585a0","size":148,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-05-27T17:21:46.488288Z","times_seen":37209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/components/activity-refresh-component.059097ebda70e7a1783a.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65092d726781d8adf50f0edff0ba4819","sha1":"7e3a9cf674485f2854411dd72b9af3ceafb6d053","sha256":"40a8af4b41e9b658bb6dd46d66203b3ae93238a637e9705c1d9ba64d13cbbef0","sha512":"25e5ad332f3da91ce1faf72bc0d661e8df44e0198e4570caabc4ea9ca8db6ddc7adadca5f11ea5540bff07e8ad8b62020cfa9b74cb6694e25d4ec03eb56d58e2","ssdeep":"","tlshash":"be6113c6e37d763016eea1d8986fb443a01f30958524025e7a2d85e0edcd8ab31d7b7b","size":3325,"data":"","first_seen":"2026-03-21T12:55:04.601419Z","last_seen":"2026-03-24T00:30:51.47632Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cw-static.aditude.io/tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z","fqdn":"cw-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"508f305951cba4b4f8ee602768d4d136","sha1":"d25f1791489f11911bcedc2b27116620130b8c87","sha256":"a9672abf801be8d6ba8b9a1063ee861854d1acd78631523328be56f8e437adb5","sha512":"c59e19db1ce1bdf1dc6d3b51a1581f7f00da7063c98d4e7d2c7d23dc93ebb9b839f5793597de87262a24498fc51010b2fe9a17749db8a7e569a218de51450090","ssdeep":"384:Lce0VB3XzlEdEPyTCtYf0LF4fP3/xkCXdzW969cTX/buFUEiXZmlDte4:Lce+3XzloEPyTCyf0LFGP3OCXdzWDTXW","tlshash":"1972098b36e6b03542b144f581f75211a124372938099094fe9d9cab3735eafa632f7e","size":16091,"data":"","first_seen":"2025-03-14T22:45:29.616912Z","last_seen":"2026-05-27T17:21:46.41352Z","times_seen":5135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"88f5e1859a61a6144748cff58d80c844","sha1":"71448e4a0606038eba1907066499bf42bf86b309","sha256":"0c0530e66f27f9baf6235ace89f4c8e7e8f49b1abdb0db34e86ee1b97a5c4157","sha512":"160d29b597246838e8f35617a900cfdd0e46e26433186fc6c320c5147668150203d9b6204aba6df24f939de47d65650d757fb51cce2614452c982bff09f865bd","ssdeep":"","tlshash":"f3d02e1380dc099920a007b44d9022f2848fa32cc885b2cafcee903a19a240062b9a40","size":249,"data":"","first_seen":"2025-12-03T16:21:58.436726Z","last_seen":"2026-03-22T19:25:12.585463Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d791b0deb9032213491b9cbfdf878d47","sha1":"480c1f89c02b3016c7c4800a3b79f62889a3807f","sha256":"df32a81b6c0ea6a818f2c689dd6ad16e11aafec37fae50631b13388a2cd892f6","sha512":"f613863b4007a4d480daaee922639b209592bcb8fc7c1365a6cda3a9b2b7be2fd56fbc18b3de106a9543e9ca3fa48c7eed6a7695c58f3dc2ac5fb48946a975b0","ssdeep":"","tlshash":"4cc02b8fc0c41c95dda64c2231203b1380874cf34821c54008ddc1bd2ab28f064f798f","size":139,"data":"","first_seen":"2025-11-18T19:04:32.054673Z","last_seen":"2026-03-23T10:37:33.188581Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wpgroho-js-extra","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"94c21323f714f86580239d6475352382","sha1":"08a1207dbccf6729970ba471ecc42a0057e47e87","sha256":"02c436a262fb1faa99eb703d3820940bca8542ce153eada356de22cdca212285","sha512":"e34f2893e5422bbb7e80ed92fd3cedec328032b6e75c8049a50d550581b78189fac26c43d2fd04b7d052457eaac4b952b0728bb3c7234555397b706d7d77ed93","ssdeep":"","tlshash":"0af01214c0d82dc133d01c31a279006383c95545c06e0e14694cc1436e32002c1f1348","size":513,"data":"","first_seen":"2026-03-22T02:18:34.968461Z","last_seen":"2026-03-22T02:18:34.968461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/jetpack-carousel-js-extra","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cda1e2c5ce16580a4d7bcf5377b86852","sha1":"87d674a5f3a0efafa684908bdee33df0b0af265e","sha256":"0ced00dd71a5027633edd1493d314ef39eef507919afcd5406d47ec6794d1536","sha512":"65d8176438d65424e6f256464ca502851c28e56152f895b7ea070679db7ccaa63c0cbb3abb49daeab00f1a7786d4a77d40bf1e4b9c496a97f61b69b0f7e42f6d","ssdeep":"","tlshash":"e8512f29d1cc466131b369f2ad8823aa78fd2359c990af2dcd7c847c83c1f09a818b0d","size":2704,"data":"","first_seen":"2026-03-22T02:18:34.969364Z","last_seen":"2026-03-22T02:18:34.969364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-includes/js/wp-emoji-loader.min.js","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"787c19e69b1eba3a0f707e85a9daa35e","sha1":"c013eab32093d1105abf7465775bb124e66a6b04","sha256":"28b277a4edd35abbb7a3ab35a5e7869e8cbe0b3ac7740a8f96224e652da8ea73","sha512":"6fc93f999f02cac62195201a18c4d8220d88c803c5072f083c4f04912e15cfb78db064e014a446fb9fb2e60ee18178aaf700983f68afc636d679d0b50fbf904e","ssdeep":"","tlshash":"2c81969ae77a3cdbb2f900f2697a0d47eb614435d6c8d438c9bda3141cb5893c274b46","size":3960,"data":"","first_seen":"2026-02-02T06:16:02.980054Z","last_seen":"2026-03-22T02:18:34.970258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4d1da2d4c387f5247975ea36a29e5454","sha1":"76918da9607a16c1ce97e44b61ec6655ad175050","sha256":"3fdd6b0834c6e74e1310a68d72e3336505d70d531530850b8a84ff1c8677db2c","sha512":"ee87713d051993bee37e06c14c97eeadb4e1b8dc709d520e207cef332bf2122fc4719da19a156d199406e0583f70c23bc3e17d0d543758231688c91aa6ef2924","ssdeep":"","tlshash":"b3300000000000000c00000000000c003000030000000000000000000000000000c000","size":4,"data":"","first_seen":"2023-03-07T01:17:50Z","last_seen":"2026-05-27T17:21:46.486814Z","times_seen":14244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-05-27T18:16:17.397716Z","times_seen":143553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/jetpack-mu-wpcom-settings-js-before","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9522ae5f01f1f7355c7ef485709b8af3","sha1":"b7966f93a0e781e93000e1954f2d604d78250c7d","sha256":"a84d8a548347d14ad5d0cf8ae5d0021ea882b0ebf271fff883efb3fa3d4d3d2e","sha512":"88a27c118070e14f8599274cd4410e68a7d047be4dca04b49f7b7101092c99cbb3941961e345069c93b340a11ae8a1eac7fc2cac96a47e347eb77e0e725cd443","ssdeep":"","tlshash":"19f02e13c0dc099920a007b44d9022f2848fa32cc895b2cafcef903a19a2400a2b9a40","size":495,"data":"","first_seen":"2025-12-16T10:25:55.312929Z","last_seen":"2026-03-22T02:18:34.972414Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d1fa339e4080a43e9ce1eef890e52a8","sha1":"70e86ebc3f3c2a137c8b5950654e3bf340ee4732","sha256":"1f3f0259efc6b8cce2c05571c34366068ba314490f7b31060650621e4ef0fbca","sha512":"2707e4524c2d704e2e7c578b3614f7cac710e503f65b412e41ec07d9d9aafbb2ea59dc1eba18a3da69b44c5e5267815dc9ff4cd1111e078007fe38cc27180358","ssdeep":"","tlshash":"a0f09e589a9a7468a4e0dd6cf5bcdf853ba555d8c13d3d98cdfcc00e1a84e0081a8b4d","size":523,"data":"","first_seen":"2026-03-22T02:18:34.973236Z","last_seen":"2026-03-22T02:18:34.973236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33202f55788c1353f1793b630c04e6cd","sha1":"a05fb815b7046560d9bc97123c52e8cc353c8943","sha256":"499fbbc525043de9b3fc549052d5760b0755c57ecaa593d808d14e295dfa93ad","sha512":"d90592857e3823d32d91a3491177c4d8714c60e2fdf653fb738896f3fc7bc7c6697d4f6b4acdc22d3927d2770ae2773ff9e12337688782ac1293840ec10fdb35","ssdeep":"","tlshash":"b61155f6b71c265d8f792122a42a34cdfa3d843548189e56ec2e9c5cb2d5bf913a1a0c","size":927,"data":"","first_seen":"2023-03-08T15:34:41Z","last_seen":"2026-05-27T17:21:46.472187Z","times_seen":3439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b18b401b63f458f4701ba9c8d8da6c55","sha1":"bc03ae229619c863c4718193312a87a069d2a12c","sha256":"8f8625976ab3e06f25aba14f27e2ad1840ca0ea4f4d69ef09aa4091244dac89e","sha512":"c53caae3304d53c56e0f0058c10031e18d4676175bae2e7ce65d5c2d8ea3c4094f3f31f1f64af2fd4d8370e4d10ecc25bd59b3fb4369b2f588bb5945ff013b72","ssdeep":"","tlshash":"679004d53cc330117173c343d555f755d31333441170c0dcd014351c101504341d71d4","size":48,"data":"","first_seen":"2023-03-07T13:44:32Z","last_seen":"2026-05-27T17:21:46.475434Z","times_seen":4691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T17:21:46.477984Z","times_seen":73596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5f6fc77eeff45d88d6b8968839f71e","sha1":"8227df4241f330157226c57f4460ca1c4024f963","sha256":"8d7878b78344df2c75fcb56b7c4f940e570d1d2743301adabdd2ff9bc4609a8a","sha512":"fa0260a1bf810df0f63e4034e7cb3561314c816065e72cd6ae6f57f7665bdaf17e77e7bfd08a9f83a17a40d1df11b2d995836656ffd5c251f4a2fbd59f7a788d","ssdeep":"384:VOnAnqGGvxMZ/Pgc11FA3fufwD/NnACOLrPFVAAjTnlelo8EVcz:VOnJUAc13yEGBACADA0Bcz","tlshash":"919274c871e2b0b646e3e4f9517f414bf33a3a5564ada460e029e0e43dbd98dc423f99","size":20664,"data":"","first_seen":"2025-10-17T19:11:39.0764Z","last_seen":"2026-05-27T17:21:46.46266Z","times_seen":3488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","size":9088,"data":"","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-05-27T17:56:14.395095Z","times_seen":13818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c24cdee1177a34c49e33bf25d3cdd5ea","sha1":"d4b64c175f191c7f178f21f349d35a667f158960","sha256":"3f7c0a0efd320ac614d98a470df3fbba2d21d764c45901addbb318a03ffaad46","sha512":"3b6102fd702a17d927163feac4f4c1520448bf4ed0c8ee3be9714dd392f68286d105e95a60d69e59d675dc555b7b299a75207e10ecbaadb7450e4378477e16d6","ssdeep":"768:iZkcQfcXacYCp73BExH+/JNHkRfawlBWr/fKm/:iZk9fjcYCp9cH+/JNER/g7CG","tlshash":"91e2f9973765b02203eb90fee03f1106f371d669581d842cf288aceb356e64592a7f76","size":34018,"data":"","first_seen":"2026-03-20T19:17:59.576677Z","last_seen":"2026-03-23T16:33:50.725391Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"208c95c8810b39d05748063e8de68d67","sha1":"1b4fbb7eed0a5f5e54470f199b8b62f228ab0edf","sha256":"517629f5b38a0cdbd7dfe1e8dc598572cfd0cc658d9fff4bb57a50d0aba421cd","sha512":"037eb84f6130f511b5ec340892a005bb10d598d4ba1904cd53003a6014e78a71b163b05a1de46c42e914d3de30f396de18e9912fbbfb026fdeb6686ad7345cfb","ssdeep":"96:J74+fhu95v3urgXlL92ZUipq9Df6jjLbKuOFgKXZnUikEfmbxzUaK0/CUb/p3TE:tmb+ILuQ5f6vLbnGfmbdtK0/CU7xE","tlshash":"39d185cef78c153a41b03659afab3699353fa071380980b5a58485e43699a5fc336f8d","size":6286,"data":"","first_seen":"2024-11-15T12:13:12.060624Z","last_seen":"2026-05-27T17:21:46.410664Z","times_seen":3344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8518138035ca3485025a2ad8c79595d7","sha1":"6aef21bead376067a6b4ffb041442abd07fc7ad2","sha256":"45a7813892f10ccf563a2915ad7e859a445a54ffc39058760ea3ef958d4ca959","sha512":"39420784e624817e7e31fd3fae50913969e108a62a4ec306ca892100f251f8155121a2b132c95a4435394e746e5466bc9d1fc6f3d295d3841edaf6402a23219d","ssdeep":"","tlshash":"6bf08bbaa86f6d7c867980052d71d07abe742c246650e802f658df2a5521f2038a6b9c","size":577,"data":"","first_seen":"2023-03-09T22:41:31Z","last_seen":"2026-05-27T13:50:42.279204Z","times_seen":3141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/sandbox%20eval%20code","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-05-27T17:21:46.478563Z","times_seen":73749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202612d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","size":21889,"data":"","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-05-27T17:21:46.446812Z","times_seen":6578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??-eJyFkFsKwjAQRTdkOlgprR/iUmSahjptJgl5tLh7U6yiFfRruId74DIwOyGticpEaLXthdOpJxNgtr7DLgipMQQVYMgIoxZTWQxhB28ap5ckLXNGQtP4UD7AVoxXxbnmUgsTesJFcJ4Y/U0YnKjHSNZsrX8rJTuYyuUUbTKdVj/2Dio6lOOaga01cCEjoU2kO5DobQpKv3pPUDB97Xp/w1oTs8sP2MTsnfm0r+vDsWoOTTXcAW1/kGk=","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c034906145798e283dbf27d8d59cc4c1","sha1":"1e0a28deb6203ff5dec1e74f871c73030f6c10d1","sha256":"ed739a1c0c6f80961c10dab82a8040eeb6fc9ed19614c4fcd5ecb74e44895d70","sha512":"4e1ceb0bb03163f5ed5a6b7d00cd28c779e29969555ab7b337f80af2f02baf5727c78d1c5374a2e0da55278ed5e24b0ae0d8dda40532f28bcacbaccdcc0bcd08","ssdeep":"1536:1es8PN0VBHmD5TNhJAcBj4Hvr8l12i0PcxMtjj7vB5kH7gsrsCb41bYNNFuSGioe:0f3eNVF5cN8em/wxvGiWdM","tlshash":"78e33a95738c343106e751aa947f1246b33c29366445c4a8bd7eece92964e8e6073ffc","size":146397,"data":"","first_seen":"2026-03-21T12:59:23.189812Z","last_seen":"2026-03-22T02:18:34.956065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","size":12829,"data":"","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-05-27T18:08:34.209789Z","times_seen":20719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/sandbox%20eval%20code","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-05-27T18:16:17.42063Z","times_seen":156853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30712ebe86eac5a7acfe2f0b60234cd4","sha1":"5ab9ad4113eba10e25e55b9a3fb91309a1819631","sha256":"8c4ee09bec913f38f8e10e47a16ec13b8351ed851e16742372dcaab42d250a45","sha512":"c4ebdd758bb5564a7767a647ed86db45696f868c8bb758fcc8bab436fbfb3ac9a64352f1798fe3be5caa8679cd0f23c1a3a0e3604d24f8af9cf802b4bd1acd1f","ssdeep":"6144:08Ws5SAoXm617xswex+1T4zdYIofNkLB9BhyiG:ZToXm6EdYnfKR05","tlshash":"29845c9677a0f42903e290ec883f3602f2692956740dd058fb9eccd76b5c95d12b2fb6","size":376605,"data":"","first_seen":"2026-03-20T19:17:59.58328Z","last_seen":"2026-03-23T16:33:50.728879Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"437aea085f90a27de0a4f114dd2690fe","sha1":"ca337f5337c5879a588ee0ab9fdb935cceaa12f6","sha256":"55c0bb26e39409cbc5795d2c0138555edac8eae3ef33dcc8738eb49589b3dec7","sha512":"1d5bf9669fe20eb568797c9ec811caf9b3132f2f0d65c987fbb38fd0f412c8402dbc6b96b8eacad7193411a3f182a974559590b22737ccfc9eca9b8b3bf7ea0b","ssdeep":"","tlshash":"04b0121440d82dc133d01c21a239006383894545c05e0e14694cc1436e32002c1f1248","size":88,"data":"","first_seen":"2025-11-18T19:04:32.06257Z","last_seen":"2026-05-26T04:20:38.185805Z","times_seen":1273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"640041eec8b119901aa0ee1cc22526ce","sha1":"70007872f41132e7388fa2e2aebb39b106a4667e","sha256":"47c7390cb4fe5198396239ea5781dbada0efa22a2911d1c08c3eb1ebbaaff0d6","sha512":"2e8340731fbb96f713c79ed387b75bf035680b3d64bdd6e16f40cfb1cdfbfaccf37f2935125ee18b335095897b7b884b91e2bd7c51a017e4474ced726ae449bb","ssdeep":"","tlshash":"fc2181daff8d341f01256c1cac4e77c8e51cc172eb7164e6bd096aad21595ac2068cde","size":1377,"data":"","first_seen":"2025-04-23T19:04:27.28688Z","last_seen":"2026-05-27T17:21:46.479202Z","times_seen":6659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/wordpress-main-Uv94n/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1add60c3b3b3c3bfd0180d4d587704e4","sha1":"9387d56528bb1c8169c68b3a6bf6a845febbdb5e","sha256":"197b9521e7fe8bb715f131d56ea1b207aeb0a4847c1040ea65c67035db8bd1c1","sha512":"fb493b42196724a076fbbaea16e233ac08195dd12395528c31114aac590d3a7492a0b7b69c0e1719c141d34c2e8834c522a4f78b90d56df4503880e4bc04e8c7","ssdeep":"96:5ma/XNk7S1k2PWt+RzO9FsFJNo38uGy/HcL2Jl4XfamGGCM/kkNRGMzyExokqdVy:Aa/XNVTqnumM9yPiUmfCDXEWu","tlshash":"a2a1955df790a4f206c481da8a3b6362f23045223505c0ec750d7acb2e57e9766908bb","size":4734,"data":"","first_seen":"2026-03-20T19:17:59.546587Z","last_seen":"2026-03-24T13:43:25.600686Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","size":655,"data":"","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-05-27T17:21:46.411577Z","times_seen":15305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"801178d03ddd16532a908bd40a33c106","sha1":"3b06cfa00a29dd9a023ed57032f9363395703aa9","sha256":"882e8e11a9899a86919497a09e27f2ee739cfc32b3051e57db61f12426186f67","sha512":"cb8ad9ec415de84d9d128289f2d09e9ab4c7be68329b659a5bfb2fb129cc8427f0ce07e8b032b66b3baa6f47a979661ed396ffa67d11545aab363d48f82b7e6b","ssdeep":"96:+eKBXm3gZ7bjwyskbd4swadGXR04Xw2ltJCytxWkBhAxV+EhZ27y8q2pr1c+S:+eWm3gZ7XwUGXR0YDJgThM02Xo","tlshash":"cbe1d8e8f39d836e41b471652906dbf9363dfc325587d81a7d09683800d042e9b36e9b","size":6836,"data":"","first_seen":"2024-03-02T16:16:51Z","last_seen":"2026-05-27T17:21:46.483814Z","times_seen":3409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/js/bilmur.min.js?i=17\u0026m=202612","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","size":13941,"data":"","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-05-27T17:21:46.452638Z","times_seen":18542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-beta2-61800","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-27T18:18:45.094224Z","times_seen":245805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.19.7-pc0d25/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c8576961fa4589228f660a437868e9e","sha1":"d5d39614541e3e0119d1d4bec73e6c338506c3d0","sha256":"88ae4d42211bf291e799eaf04b0912a3e296e2e69508c25d12d8ab42910207f1","sha512":"4edea96dec14d237cda69f980c6147ca94f3d592b5404d94ad9171d80282f333e88b104478a64de1e54664ac36f3d0bf498e44b1c28d7f6d26662373eb06e98b","ssdeep":"3072:t4659Qr8cJsktyDt+KI+UkjbhqupGXdc0RrK0EYzAVn0jE0c2ZKJp4BY5afvH9tF:W49XcK8dc0RrK0fzAVnz0HZ+4B1CkGG","tlshash":"f9b418957035a81fc35a80adb623380aaf7b558df408a2b5f73ccdfa34d428191a7779","size":513639,"data":"","first_seen":"2026-03-20T13:52:11.557478Z","last_seen":"2026-03-24T13:43:25.583485Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cadmus.script.ac/dy5zgrznaumwk/script.js","fqdn":"cadmus.script.ac","domain":"script.ac","tld":"ac"},"ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca185699e72d180175666a908fe4d7d1","sha1":"0551d2b0a4e42ddb3fb6570868385fea414ae826","sha256":"1e78178faaebd5dd14d24beb4b0ac2658160935cf17e50f3c06968a3acb8ad49","sha512":"9364b02d1b555a76803b5ff58deeb3a239c9e13643e57f6b8d1a8a5223ae658ae054d1b441bac47c44327542192d4c070b53dc5af8c5df3fde252831bcbb8d60","ssdeep":"6144:ApzdQpSndmavI3hhtzXCYZGDdCSP2GUrU:Mzd6uAhh5XwDd21rU","tlshash":"c33419d16dd970dac967d026d23f434aa04fda86e98d49408632ed3c3ef614af47ea31","size":233475,"data":"","first_seen":"2026-03-22T02:18:34.961204Z","last_seen":"2026-03-22T02:18:34.961204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amazon-adsystem.com/aax2/apstag.js","fqdn":"c.amazon-adsystem.com","domain":"amazon-adsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7099d0c144c906961206e41b26b23c05","sha1":"59a67da2d27d4e5fc0e183bb2baeebe39404f553","sha256":"3f19f9cf504b435adb7e62aac1b420facfc0048d6a4950910fd6f126548cc69e","sha512":"c92d4da99978949c6a2d856ee6afd9f61d296e4e0414e6197f600312dc79e2e639755874c2776e9cc80dfe8341ac5210567afdc4d79193f8f750e759d36b700a","ssdeep":"","tlshash":"de31db6d69f10c650061b42b1baba6757726409b2d88fed1fe4c96708f0e05fa1f0bdc","size":1585,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-05-27T17:21:46.472942Z","times_seen":36456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/comment-like-js-extra","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2aa6fa5dbc3a541a32af8e713dd10f3","sha1":"bd16253efb36548f7e8586d5c3507c79b57a5f76","sha256":"14daf8062469941f1fd7a4c3bdc772b59214fea5de4be931e45360e39a410954","sha512":"d97fc9118528685e00016fd2fbae1b532a349581c9df8c2543efcf69584454a6ebb32414468ed3bf0beeef2055759c921d65b229d0e3edc5bef6c4cd44de75a1","ssdeep":"","tlshash":"cc21a79ae1cd4846517629b824696056d9964f83c458854c52de895909b1d70a0aa724","size":1199,"data":"","first_seen":"2026-03-22T02:18:34.982096Z","last_seen":"2026-03-22T02:18:34.982096Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c750f4e02d12b6c9c6e7a87daf4d338d","sha1":"5310643fb2f79ae95169b4cca2611f83d2102485","sha256":"3d335a4e8c1e2c7de87c0cb0212801bab9c22d95e05e17e5d28349e915f0610d","sha512":"51852a2044af504c210b71d14684c5227ac8b8f42df962b9f511d66017f09bab81825401dd6ddb8a75f98e514e0ed72801e4494eae57158b902ce85675e1344c","ssdeep":"","tlshash":"34f02720389959388165ab1655b6f5c0e0f95059a408ac00818d9c5cde90ee018a7d44","size":441,"data":"","first_seen":"2025-10-13T16:06:16.430295Z","last_seen":"2026-05-27T15:12:13.939645Z","times_seen":3425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/rlt-proxy-js-after","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e08a3b8639491d0a273476f27882d5ac","sha1":"8844a1143d26af3652fa2c47a68f474fad2b72dc","sha256":"6453f4e5c19a23fb94a61780cb09f4ada028b7cb1cb3e8f5e9e31e0d5c7c67e7","sha512":"a7d130ec46d1e83f4bd73d2abc3c6985a25ab6d0131e24bc63959cd7882a1791da2a8e8e75f008224ca540dee68028a5faa1cc7d3a9379367ccca05057918ee9","ssdeep":"","tlshash":"98e08c8fc0841c9599a64c3221603a1380875ca3c8218540089a81ad2ab28b0a4f6a8e","size":392,"data":"","first_seen":"2025-11-20T03:50:48.774793Z","last_seen":"2026-03-23T09:52:18.953878Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0796ccb7c5c44ed7b55b54c6dc685cc9","sha1":"715efc61204d1fd090e62ce34f625f317c4e5dc8","sha256":"265b27e3eb4002a6d5873293c7a2e7d2bdd389a8f640eef7764ec860d2b6364d","sha512":"a6c17dc54b394ca21be87999c250b5fd1cb97b8af2e42ac60249e253afa859f9d42ccfa34652124a3979ea353e022ba7b72712e6530aff7dcf86644d775a8f81","ssdeep":"384:d1nr8in05M/RlRfvEE2Emx3C68XRlRcRAG3+V6IQQ3G4uDji2cOVcIQQ3GmE9F:d1r8bgf7mx3C68XfdV6YuDjiCVcB9F","tlshash":"70d2d8f4a040706d96d79748c33ba407f2514fc4eac64863b915b9f8aadb19d183f7a3","size":31058,"data":"","first_seen":"2025-10-17T19:11:38.949884Z","last_seen":"2026-05-27T17:21:46.426012Z","times_seen":3488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts-api.wp.com/css?family=PT+Sans%3A400%2C400i%2C700%2C700i\u0026subset=latin%2Clatin-ext\u0026display=swap","fqdn":"fonts-api.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /css?family=PT+Sans%3A400%2C400i%2C700%2C700i\u0026subset=latin%2Clatin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts-api.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: BYPASS arn 28\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=22.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5734,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c198da068a53f882c708089e60c9cee0","sha1":"175244dbfd6e4ca374a4df649e13b25734d07898","sha256":"daff8b3e36fbc2ccd936c5c219fd682d7a83dc07fcf779d07f752e79c51e72e6","sha512":"1b612409d372debbba9b38eb2e92d9367edb3b1c8c1366f7cfe9de9465b582fa35cb1906905d2db5550ab566101f68336391f6987ed36d0b83d5d0d31059c04a","ssdeep":"96:RYgEa1hYgEaYFZOYgEa4Jc+ucYgEafNMYgpa+hYgpauFZOYgpaFJc+ucYgpad3NA:WO1GOSO8wOXr+Grgrtwr3qu2roAMLnJs","tlshash":"f7c1ee82442ba540db431cc537cfbe26de1e95853049d9696bff0ca8ecaad2d9370b1d","first_seen":"2025-09-05T11:33:37.511292Z","last_seen":"2026-05-27T11:44:49.201234Z","times_seen":553,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":11,"dns":0,"connect":7,"send":0,"wait":31,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defaultstartermobile.files.wordpress.com/2020/10/qi-bin-w4hbafegiac-unsplash.jpg","fqdn":"defaultstartermobile.files.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.72.17","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"files.wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 19:44:33 GMT","end":"Sun, 10 May 2026 19:44:32 GMT"},"fingerprint":{"sha1":"F5:DD:1A:0F:38:DB:CD:FF:95:FE:BA:39:28:E8:00:3D:0C:9A:8E:7D","sha256":"15:EC:1E:3D:40:F8:D2:F1:5F:9B:74:43:D2:76:34:97:D8:E5:A6:BC:A9:F8:56:53:78:89:69:B8:42:01:D5:6C"}}},"request":{"raw":"GET /2020/10/qi-bin-w4hbafegiac-unsplash.jpg HTTP/1.1\r\nHost: defaultstartermobile.files.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://defaultstartermobile.wordpress.com/wp-content/uploads/2020/10/qi-bin-w4hbafegiac-unsplash.jpg\r\nx-nc: arn 28\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=120.0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50995,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":61,"dns":49,"connect":7,"send":0,"wait":128,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /w.js?68 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/12868-1717166113344.7605\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12829,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12829), with no line terminators","md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-05-27T18:08:34.209789Z","times_seen":20719,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":11,"dns":0,"connect":8,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/uploads/2023/06/wp-1687152563045.png?w=32","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/wp-1687152563045.png?w=32 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=; ccpa_applies=false\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1278\r\nlast-modified: Mon, 19 Jun 2023 05:29:24 GMT\r\nexpires: Sun, 12 Apr 2026 22:41:13 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 35.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=152.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da2abe5dca4dbba1fecb69b42ddcb0fa","sha1":"4f00a500689a594c478bda60688efd2d5157bc65","sha256":"26558b3830eec1105cacfc84ab0e874f1a77a0e3da71a62cf54446b9426d7ff3","sha512":"7c2a886998dac05032fd7a3f9cc1e98311550461fcbfd788df848ce8724ec6e7ce33d880fe75261388e15612379df532315873df7cd8252c2bc595e48ea0e2e7","ssdeep":"","tlshash":"95211a9223f49c0c0106bf4770283ec259353285c33bb6bd0d875a2d8784d987b950a7","first_seen":"2026-03-22T02:18:34.939023Z","last_seen":"2026-03-22T02:18:34.939023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 317\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/471-1684460922208.3726\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"6134a117c00dc1171f42fd8c35b78e88","sha1":"cac0c7c889ea57043338802e8446e9ec8b78fad3","sha256":"224f43833c9a318a3d885fe2ecb4c5b0794e0617ebfff62ad8d729105929246c","sha512":"11896c7411aad29af74ba3fea6417b527271fcdc29e274006c76a7090e2d2114c9afae024d179e967472d7ed6c614db4975d7e256f5405e9199056e8aa1193e7","ssdeep":"","tlshash":"ebe078534791551c000ff5715cac056522543115f647f1e852b2d6319d4bfcc411770c","first_seen":"2025-02-19T23:14:00.002605Z","last_seen":"2026-05-27T17:56:14.453047Z","times_seen":9068,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202612d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 19:44:12 GMT","end":"Sun, 10 May 2026 19:44:11 GMT"},"fingerprint":{"sha1":"53:E6:67:FE:F3:2D:4B:20:29:65:08:14:EF:1C:5A:C7:E9:D3:E7:65","sha256":"2F:59:A3:5A:A1:8E:34:C4:42:31:2C:80:90:08:4C:1A:EE:BD:36:C9:DA:79:CC:33:02:4D:3C:4E:DC:18:68:67"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.js?ver=202612d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Mar 2026 03:40:26 GMT\r\netag: W/\"69ba1eaa-5581\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\ncontent-encoding: br\r\nexpires: Sun, 29 Mar 2026 02:18:06 GMT\r\ncache-control: max-age=604800\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21885), with no line terminators","md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-05-27T17:21:46.446812Z","times_seen":6578,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":22,"dns":14,"connect":7,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.19.7-pc0d25/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 04:52:47 GMT","end":"Fri, 01 May 2026 05:52:40 GMT"},"fingerprint":{"sha1":"E1:F7:73:A7:A2:16:68:6A:86:09:0E:05:DD:A3:27:44:7A:DB:F7:08","sha256":"FE:4A:13:DA:C5:9E:EC:5D:68:C4:F3:67:31:E6:59:52:C5:9A:B9:CF:DF:D9:95:C5:64:17:0B:9B:DA:0A:D8:F5"}}},"request":{"raw":"GET /prod/1.19.7-pc0d25/raven.js HTTP/1.1\r\nHost: raven-static.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: AWonIc98k1cPriXlaC/JerajEbH8pEluP71AbYy7rd+1xg7xELVrclGL48oshx3WmkroswS9pHGTLBFduVd2Pa+oFdkmpm3T\r\nx-amz-request-id: H5CKM680GCD1QY0M\r\nlast-modified: Fri, 20 Mar 2026 13:48:02 GMT\r\nx-amz-server-side-encryption: AES256\r\nserver: cloudflare\r\nage: 2535\r\ncache-control: max-age=604800\r\ncf-cache-status: HIT\r\netag: W/\"9c8576961fa4589228f660a437868e9e\"\r\ncontent-encoding: br\r\ncf-ray: 9e01b4314c46a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65423)","md5":"9c8576961fa4589228f660a437868e9e","sha1":"d5d39614541e3e0119d1d4bec73e6c338506c3d0","sha256":"88ae4d42211bf291e799eaf04b0912a3e296e2e69508c25d12d8ab42910207f1","sha512":"4edea96dec14d237cda69f980c6147ca94f3d592b5404d94ad9171d80282f333e88b104478a64de1e54664ac36f3d0bf498e44b1c28d7f6d26662373eb06e98b","ssdeep":"3072:t4659Qr8cJsktyDt+KI+UkjbhqupGXdc0RrK0EYzAVn0jE0c2ZKJp4BY5afvH9tF:W49XcK8dc0RrK0fzAVnz0HZ+4B1CkGG","tlshash":"f9b418957035a81fc35a80adb623380aaf7b558df408a2b5f73ccdfa34d428191a7779","first_seen":"2026-03-20T13:52:11.557478Z","last_seen":"2026-03-24T13:43:25.583485Z","times_seen":57,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T02:18:05.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\nvary: Accept-Encoding, accept, content-type, cookie\r\nlink: \u003chttps://public-api.wordpress.com/wp-json/?rest_route=/sites/blueprintsfinance.wordpress.com\u003e; rel=\"https://api.w.org/\", \u003chttps://wp.me/PeTKkf-3\u003e; rel=shortlink\r\ncontent-encoding: br\r\nx-ac: 11.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=326.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":108703,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (21059)","md5":"4dd32a05801d7579fc6c7d96068ecc63","sha1":"f5e651cf2164f76f9e7066a77555c9d59d29ca4f","sha256":"6550154527543ff24ad28f24e46daf87675ef355437c17ce3d751e1c8a18502a","sha512":"c9a5b70fb4b8fcb6ad3d4360d1d5b61614ae153d1dc415fec946ae36d0b38ab08234d6dc92348099bbcde35ba5b894a63e5b9c92a6aef8128714f106ba9c7bbc","ssdeep":"3072:gueJjWdMYcSwlEYRiar3XR0utFs8T5xAK:gTlEqUK","tlshash":"5bb30a6162ec4cfc3aea5b65691df708741e9d31c1449bfaf4b6d0282ac8da944f3b0d","first_seen":"2026-03-22T02:18:34.941511Z","last_seen":"2026-03-22T02:18:34.941511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":52,"dns":27,"connect":7,"send":0,"wait":333,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??-eJx9i0EKwjAQAD9kXIqHxIP4ljSs6ZYkG7Kblv7eihdF6W0GZmCtJnBRLAo6YUaB2keYcMEGolvCcxA5wf9s8Y08UAnv1Kw1cP4Zcjc19UhFoOGYOO4YYa8+9GiKyCZx8EpcvsQ8kqf2Wu/5NtiLG5y1Vzc/AZuuTtU=\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /_static/??-eJx9i0EKwjAQAD9kXIqHxIP4ljSs6ZYkG7Kblv7eihdF6W0GZmCtJnBRLAo6YUaB2keYcMEGolvCcxA5wf9s8Y08UAnv1Kw1cP4Zcjc19UhFoOGYOO4YYa8+9GiKyCZx8EpcvsQ8kqf2Wu/5NtiLG5y1Vzc/AZuuTtU=\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Jan 2025 21:58:37 GMT\r\netag: W/\"679aa48d-1b5ed\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:40:06 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112109,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (728)","md5":"726f747939d926440e11cb27a764c9c3","sha1":"67e410406473725a0497786839b437b1441b25f7","sha256":"dc155e15903e357c6b045113a7be905defe7435b911c935f1c6483fd8bed9ccb","sha512":"2564fc7aa3b02870d49c53a64f0a8da873b1a01ab051fc77796d4c5bdff0384ab4c8ed61c470cad111b908dc8d14b47c491fce53b8f4050007bfe18d183d4467","ssdeep":"1536:ET3bB70tEAnsg1HY2CSaZq1iskbJp95UgqwT3u0+0sZqg6LPMvumU0u0CeQ8FfV8:EzbwEAnJV12j","tlshash":"93b374d066f15ee629bf13296d9a925033c85412c28fdfd5b8e1e018afcc7a50af274d","first_seen":"2025-06-24T23:17:38.93349Z","last_seen":"2026-05-24T06:42:32.308606Z","times_seen":502,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/js/bilmur.min.js?i=17\u0026m=202612","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/js/bilmur.min.js?i=17\u0026m=202612 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 10:41:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69049260-3675\"\r\ncontent-encoding: br\r\nexpires: Tue, 16 Mar 2027 00:00:01 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 29.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13940)","md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-05-27T17:21:46.452638Z","times_seen":18542,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/ptsans/v18/jizfRExUiTo99u79B_mh0O6tLQ.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /s/ptsans/v18/jizfRExUiTo99u79B_mh0O6tLQ.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts-api.wp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 47180\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nage: 451396\r\nlast-modified: Thu, 04 Sep 2025 17:32:02 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47180, version 1.0","md5":"35e5705c45cfacbd25e0efb6bede499d","sha1":"e8c04e18e1097ca2d37daa861b23c9bf7bd53c37","sha256":"05ea99a48ece3c624fd9df15f5cf4e1d94703bde9ed2b384495900f55e28befe","sha512":"80bcd88bcaef4a2c3d046777e53196c758af06d712d3440fbabce79105f0727f0c80ed4738bf7bd05b6c6c5faf709e9bbfbf628098ce5691ecd7cf60c6cb52ad","ssdeep":"768:RP3oqS8sBPq8fxBG1g93bMqO6YYst7gVEqsG6wQx6barHC1c/WcImH61P/3YK3:h46sl5x0GMq3mGyOaDCkW6auE","tlshash":"8e23f26788cfb7dac7b27045a43d8f4ce8a187c4ea12d67dbbd403c6cabe9668451434","first_seen":"2025-09-05T01:58:17.17017Z","last_seen":"2026-05-27T14:43:44.643585Z","times_seen":12033,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":26,"dns":1,"connect":7,"send":0,"wait":8,"receive":14,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.36486723810126576","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.36486723810126576 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-27T16:55:29.548504Z","times_seen":101071,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r-login.wordpress.com/remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly9ibHVlcHJpbnRzLmZpbmFuY2UuYmxvZw%3D%3D\u0026wpcomid=220154823\u0026time=1774145886","fqdn":"r-login.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.19","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 19:45:18 GMT","end":"Sat, 06 Jun 2026 19:45:17 GMT"},"fingerprint":{"sha1":"95:D7:B9:C6:8F:E0:F4:86:9C:07:81:EA:FA:E3:C9:18:EF:BE:53:58","sha256":"98:C2:69:27:04:10:8E:8B:EB:29:16:9E:12:13:58:75:32:0D:D7:BD:21:C9:00:99:97:72:08:1E:71:5C:6E:2C"}}},"request":{"raw":"GET /remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly9ibHVlcHJpbnRzLmZpbmFuY2UuYmxvZw%3D%3D\u0026wpcomid=220154823\u0026time=1774145886 HTTP/1.1\r\nHost: r-login.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nx-ac: 17.arn _dfw MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=147.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3c6d5af5862257829184ed373b11faca","sha1":"d5d1ca93f37e8512a7ad3341e522a59a0303aad3","sha256":"963af888bf5a1e3d707f3784a6202607eec4897b363cfaa4db3412ba52ad88e3","sha512":"de89238892cabe421ac873c7837727695d971e836ed135755e4257de3043b5ac5e6625a3fce1a727d9f897d276bc5bc50a0edf4455773e406f92b8755f4586b2","ssdeep":"","tlshash":"7fc09bef5d2e99e711710495b471bf1e749bc54cfc51f724d1e5134016d66d7c840744","first_seen":"2026-03-22T02:18:34.944867Z","last_seen":"2026-03-22T02:18:34.944867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":49,"dns":26,"connect":9,"send":0,"wait":156,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cw-static.aditude.io/tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z","fqdn":"cw-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 04:52:47 GMT","end":"Fri, 01 May 2026 05:52:40 GMT"},"fingerprint":{"sha1":"E1:F7:73:A7:A2:16:68:6A:86:09:0E:05:DD:A3:27:44:7A:DB:F7:08","sha256":"FE:4A:13:DA:C5:9E:EC:5D:68:C4:F3:67:31:E6:59:52:C5:9A:B9:CF:DF:D9:95:C5:64:17:0B:9B:DA:0A:D8:F5"}}},"request":{"raw":"GET /tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z HTTP/1.1\r\nHost: cw-static.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:07 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: LyUQxqpBgCkOpOpus0vYF5lHxXwVmmraMmamLwGknr7CZyorA9wclD2dEGT9xxlbsN+I0WyaWSQ=\r\nx-amz-request-id: H5CYPEQSY88FPEP2\r\nlast-modified: Fri, 14 Mar 2025 18:04:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nserver: cloudflare\r\nage: 2639\r\ncache-control: max-age=60\r\ncf-cache-status: HIT\r\netag: W/\"508f305951cba4b4f8ee602768d4d136\"\r\ncontent-encoding: br\r\ncf-ray: 9e01b433b9c0a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16090)","md5":"508f305951cba4b4f8ee602768d4d136","sha1":"d25f1791489f11911bcedc2b27116620130b8c87","sha256":"a9672abf801be8d6ba8b9a1063ee861854d1acd78631523328be56f8e437adb5","sha512":"c59e19db1ce1bdf1dc6d3b51a1581f7f00da7063c98d4e7d2c7d23dc93ebb9b839f5793597de87262a24498fc51010b2fe9a17749db8a7e569a218de51450090","ssdeep":"384:Lce0VB3XzlEdEPyTCtYf0LF4fP3/xkCXdzW969cTX/buFUEiXZmlDte4:Lce+3XzloEPyTCyf0LFGP3OCXdzWDTXW","tlshash":"1972098b36e6b03542b144f581f75211a124372938099094fe9d9cab3735eafa632f7e","first_seen":"2025-03-14T22:45:29.616912Z","last_seen":"2026-05-27T17:21:46.41352Z","times_seen":5135,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 17:35:54 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: P3VjjSIBr1NzNUia5SRE1yWDw764ujQR\r\nserver: AmazonS3\r\ndate: Sun, 22 Mar 2026 01:29:32 GMT\r\ncache-control: max-age=3600\r\netag: W/\"30712ebe86eac5a7acfe2f0b60234cd4\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: YvvA7NpwQooGWWTUmnV8cEgwvS6fySKh0pyiDJ3K-0k4XOBFTTLK8g==\r\nage: 2918\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":376605,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65337)","md5":"30712ebe86eac5a7acfe2f0b60234cd4","sha1":"5ab9ad4113eba10e25e55b9a3fb91309a1819631","sha256":"8c4ee09bec913f38f8e10e47a16ec13b8351ed851e16742372dcaab42d250a45","sha512":"c4ebdd758bb5564a7767a647ed86db45696f868c8bb758fcc8bab436fbfb3ac9a64352f1798fe3be5caa8679cd0f23c1a3a0e3604d24f8af9cf802b4bd1acd1f","ssdeep":"6144:08Ws5SAoXm617xswex+1T4zdYIofNkLB9BhyiG:ZToXm6EdYnfKR05","tlshash":"29845c9677a0f42903e290ec883f3602f2692956740dd058fb9eccd76b5c95d12b2fb6","first_seen":"2026-03-20T19:17:59.58328Z","last_seen":"2026-03-23T16:33:50.728879Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-ingestor.judy.pnap.aditude.cloud/v1/","fqdn":"event-ingestor.judy.pnap.aditude.cloud","domain":"aditude.cloud","tld":"cloud"},"ip":{"addr":"131.153.232.246","port":443,"asn":19437,"as":"SS-ASH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:11.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-ingestor.judy.pnap.aditude.cloud","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 11:43:53 GMT","end":"Fri, 15 May 2026 11:43:52 GMT"},"fingerprint":{"sha1":"76:47:2A:76:E1:78:B9:D2:FC:55:41:6F:C0:49:3E:8E:A0:56:D9:DB","sha256":"81:16:4C:7C:29:D2:3E:5A:9F:60:5F:76:B7:F4:41:9E:F3:7A:96:1B:8B:AA:7D:52:D7:35:87:74:1E:DE:7D:2D"}}},"request":{"raw":"POST /v1/ HTTP/1.1\r\nHost: event-ingestor.judy.pnap.aditude.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blueprints.finance.blog/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 5076\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5076,"data":"{\"batch\":[{\"userId\":\"Ykb9giQNPNJ4\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"thirdPartyCookies\":true,\"screenResolution\":\"1280x1024\",\"osVersion\":\"\",\"os\":\"Windows\",\"geo\":{\"time-zone\":\"Europe/Oslo\",\"postal-code\":\"no consent\",\"country-region\":\"03\",\"country\":\"NO\",\"city\":\"no consent\",\"asn\":\"50304\",\"address\":\"91.90.42.0\"},\"doNotTrack\":true,\"deviceType\":\"desktop\",\"cpuArch\":\"amd64\",\"cookieDeprecationLabel\":null,\"browserVersion\":\"134\",\"browserTzOffset\":0,\"browserMajor\":\"134\",\"browser\":\"Firefox\",\"sessionIdInt\":\"16353099940502700720\",\"sessionId\":\"q5SLvivxTEBq\",\"rciv\":null,\"rcik\":null,\"utmTerm\":\"\",\"utmSource\":\"\",\"utmMedium\":\"\",\"utmContent\":\"\",\"utmCampaign\":\"\",\"searchParams\":{},\"search\":\"\",\"sampleRate\":1,\"protocol\":\"https:\",\"port\":\"\",\"pathname\":\"/\",\"origin\":\"https://blueprints.finance.blog\",\"href\":\"https://blueprints.finance.blog/\",\"hostname\":\"blueprints.finance.blog\",\"host\":\"blueprints.finance.blog\",\"hash\":\"\",\"wrapperId\":null,\"wrapper\":null,\"version\":\"1.19.7-pc0d25\",\"tudeTag\":null,\"tudePayload\":null,\"tudeMeta\":\"{}\",\"ravenId\":\"f49e7b4b-365c-4775-8c01-f63f2c5417c3\",\"publisherId\":\"m1uq9a6VF8Za\",\"publisher\":\"automattic\",\"product\":\"cw\",\"identityProviders\":null,\"dataSource\":null,\"custom\":{\"param13\":\"20251215_liveramp-test_test_test_5\",\"param8\":\"20260108_wordpress-global-floors_test_test_90\",\"param10\":\"20260109_no-fill-delay-exponential-backoff_control_control_90\",\"param15\":\"03/20/2026 13:14 ET\",\"param1\":\"220154823\",\"param2\":\"false\",\"param3\":\"0\",\"param4\":\"pub/hever\"},\"browserDateBatched\":1774145889430,\"adServer\":\"tudeserve\",\"eventType\":\"newUser\",\"pageviewId\":\"f94caa35-220b-4eae-a46e-c3d55c70d590\",\"pageviewIdInt\":\"5637276098904143267\"},{\"userId\":\"Ykb9giQNPNJ4\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"thirdPartyCookies\":true,\"screenResolution\":\"1280x1024\",\"osVersion\":\"\",\"os\":\"Windows\",\"geo\":{\"time-zone\":\"Europe/Oslo\",\"postal-code\":\"no consent\",\"country-region\":\"03\",\"country\":\"NO\",\"city\":\"no consent\",\"asn\":\"50304\",\"address\":\"91.90.42.0\"},\"doNotTrack\":true,\"deviceType\":\"desktop\",\"cpuArch\":\"amd64\",\"cookieDeprecationLabel\":null,\"browserVersion\":\"134\",\"browserTzOffset\":0,\"browserMajor\":\"134\",\"browser\":\"Firefox\",\"sessionIdInt\":\"16353099940502700720\",\"sessionId\":\"q5SLvivxTEBq\",\"rciv\":null,\"rcik\":null,\"utmTerm\":\"\",\"utmSource\":\"\",\"utmMedium\":\"\",\"utmContent\":\"\",\"utmCampaign\":\"\",\"searchParams\":{},\"search\":\"\",\"sampleRate\":1,\"protocol\":\"https:\",\"port\":\"\",\"pathname\":\"/\",\"origin\":\"https://blueprints.finance.blog\",\"href\":\"https://blueprints.finance.blog/\",\"hostname\":\"blueprints.finance.blog\",\"host\":\"blueprints.finance.blog\",\"hash\":\"\",\"wrapperId\":null,\"wrapper\":null,\"version\":\"1.19.7-pc0d25\",\"tudeTag\":null,\"tudePayload\":null,\"tudeMeta\":\"{}\",\"ravenId\":\"5019f792-e625-4aba-89c7-7f5210ba63f7\",\"publisherId\":\"m1uq9a6VF8Za\",\"publisher\":\"automattic\",\"product\":\"cw\",\"identityProviders\":null,\"dataSource\":null,\"custom\":{\"param13\":\"20251215_liveramp-test_test_test_5\",\"param8\":\"20260108_wordpress-global-floors_test_test_90\",\"param10\":\"20260109_no-fill-delay-exponential-backoff_control_control_90\",\"param15\":\"03/20/2026 13:14 ET\",\"param1\":\"220154823\",\"param2\":\"false\",\"param3\":\"0\",\"param4\":\"pub/hever\"},\"browserDateBatched\":1774145889431,\"adServer\":\"tudeserve\",\"eventType\":\"newSession\",\"pageviewId\":\"f94caa35-220b-4eae-a46e-c3d55c70d590\",\"pageviewIdInt\":\"5637276098904143267\"},{\"pageviewId\":\"f94caa35-220b-4eae-a46e-c3d55c70d590\",\"userId\":\"Ykb9giQNPNJ4\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"thirdPartyCookies\":true,\"screenResolution\":\"1280x1024\",\"osVersion\":\"\",\"os\":\"Windows\",\"geo\":{\"time-zone\":\"Europe/Oslo\",\"postal-code\":\"no consent\",\"country-region\":\"03\",\"country\":\"NO\",\"city\":\"no consent\",\"asn\":\"50304\",\"address\":\"91.90.42.0\"},\"doNotTrack\":true,\"deviceType\":\"desktop\",\"cpuArch\":\"amd64\",\"cookieDeprecationLabel\":null,\"browserVersion\":\"134\",\"browserTzOffset\":0,\"browserMajor\":\"134\",\"browser\":\"Firefox\",\"sessionIdInt\":\"16353099940502700720\",\"sessionId\":\"q5SLvivxTEBq\",\"rciv\":null,\"rcik\":null,\"utmTerm\":\"\",\"utmSource\":\"\",\"utmMedium\":\"\",\"utmContent\":\"\",\"utmCampaign\":\"\",\"searchParams\":{},\"search\":\"\",\"sampleRate\":1,\"protocol\":\"https:\",\"port\":\"\",\"pathname\":\"/\",\"origin\":\"https://blueprints.finance.blog\",\"href\":\"https://blueprints.finance.blog/\",\"hostname\":\"blueprints.finance.blog\",\"host\":\"blueprints.finance.blog\",\"hash\":\"\",\"wrapperId\":null,\"wrapper\":null,\"version\":\"1.19.7-pc0d25\",\"tudeTag\":null,\"tudePayload\":null,\"tudeMeta\":\"{}\",\"ravenId\":\"0d754b4c-cd06-42e1-90be-4de9bd98d739\",\"publisherId\":\"m1uq9a6VF8Za\",\"publisher\":\"automattic\",\"product\":\"cw\",\"identityProviders\":null,\"dataSource\":null,\"custom\":{\"param13\":\"20251215_liveramp-test_test_test_5\",\"param8\":\"20260108_wordpress-global-floors_test_test_90\",\"param10\":\"20260109_no-fill-delay-exponential-backoff_control_control_90\",\"param15\":\"03/20/2026 13:14 ET\",\"param1\":\"220154823\",\"param2\":\"false\",\"param3\":\"0\",\"param4\":\"pub/hever\"},\"browserDateBatched\":1774145889431,\"adServer\":\"tudeserve\",\"eventType\":\"pageView\",\"pageviewIdInt\":\"5637276098904143267\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:12 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 10\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"9208157812849f5e9ae3e1bb4d0275da","sha1":"f8c18a05dd4864412ee68db4df3f95ae00c5768a","sha256":"5e9bfe40e3a6cea5d8b8d0c8b13559e295fb0310e3fff9a0e56bfa8e039c1f08","sha512":"e56d998e5be3ac157f288da6ed07d5aca8ac410006bf708110de6333ea05a782d643604a5cdd3ad4dd40ad6bfc625bf2644a4291edb92b4f244be0aeae7a853d","ssdeep":"","tlshash":"91500003000000c0000030000000000030c0000000000000c00c000ccf0000030c3000","first_seen":"2025-07-23T22:51:42.076933Z","last_seen":"2026-05-27T17:21:46.40745Z","times_seen":6764,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":260,"dns":34,"connect":107,"send":0,"wait":363,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 09 Jul 2024 13:11:39 GMT\r\netag: W/\"668d370b-188e\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (839)","md5":"208c95c8810b39d05748063e8de68d67","sha1":"1b4fbb7eed0a5f5e54470f199b8b62f228ab0edf","sha256":"517629f5b38a0cdbd7dfe1e8dc598572cfd0cc658d9fff4bb57a50d0aba421cd","sha512":"037eb84f6130f511b5ec340892a005bb10d598d4ba1904cd53003a6014e78a71b163b05a1de46c42e914d3de30f396de18e9912fbbfb026fdeb6686ad7345cfb","ssdeep":"96:J74+fhu95v3urgXlL92ZUipq9Df6jjLbKuOFgKXZnUikEfmbxzUaK0/CUb/p3TE:tmb+ILuQ5f6vLbnGfmbdtK0/CU7xE","tlshash":"39d185cef78c153a41b03659afab3699353fa071380980b5a58485e43699a5fc336f8d","first_seen":"2024-11-15T12:13:12.060624Z","last_seen":"2026-05-27T17:21:46.410664Z","times_seen":3344,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geo-location.prebid.cloud/v1/geo","fqdn":"geo-location.prebid.cloud","domain":"prebid.cloud","tld":"cloud"},"ip":{"addr":"52.84.50.53","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geo-location.prebid.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C1:4E:4F:A9:ED:22:86:71:8A:71:C7:D1:88:A7:A9:B4:5E:5A:69:7A","sha256":"8A:80:C3:25:04:BF:57:AF:C8:E0:71:BB:1A:F3:D5:01:1A:61:26:CC:64:B4:1A:A1:38:1C:C7:DB:26:9C:4E:71"}}},"request":{"raw":"GET /v1/geo HTTP/1.1\r\nHost: geo-location.prebid.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blueprints.finance.blog/\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 84\r\ndate: Sat, 21 Mar 2026 03:06:03 GMT\r\nx-amz-apigw-id: ajasbEv9IAMEFRw=\r\nx-amzn-requestid: 9bf7c051-fd23-4ab9-a44e-815f4c264d6c\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: geI71AtB2F8_VAHKoYrF1_HqdCyYXoZH2V8faE3qTGnoUcwip0rXgw==\r\nage: 83524\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"15476546160ba4ea8d59e42ba715fb3c","sha1":"f4f3aa4b4bcf68ae6d72941e3d5d26fa23cef489","sha256":"325542ca9daef7050e3e4e2d198f3920081fb4641658fbb0668542d96a2769f1","sha512":"6d39dd78d273a857e6e56316e341e075a094ddb5f23e08e96e36eeb6c15cb9d3a7d741c5b064b4f7e3681e14b540f3872e2ab07ed9709f45f4bf06d45629cc0a","ssdeep":"","tlshash":"6aa01128b0280eb08ce0230c2a2bc00288ab2f0a2380300203830f282bac83320f200c","first_seen":"2026-03-20T08:08:12.923899Z","last_seen":"2026-03-25T15:46:48.143518Z","times_seen":61,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":69,"dns":55,"connect":1,"send":0,"wait":1,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/1125-1684465005221.1526\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 17.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (655), with no line terminators","md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-05-27T17:21:46.411577Z","times_seen":15305,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/blog-plugins/marketing-bar/images/wpcom-mark.svg","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/blog-plugins/marketing-bar/images/wpcom-mark.svg HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/wp-content/blog-plugins/marketing-bar/css/marketing-bar.css?m=1761640963i\u0026cssminify=yes\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=is_current_user_blog_owner%3Dfalse%26_en%3Dwpcom_marketing_bar_impression%26_ui%3Dbv2yxmGE6pqjIVl5myTI9Njj%26_ut%3Danon%26_ts%3D1774145886423%26_tz%3D0%26_lg%3Den-US%26_pf%3DWin32%26_ht%3D1024%26_wd%3D1280%26_sx%3D0%26_sy%3D0%26_dl%3Dhttps%253A%252F%252Fblueprints.finance.blog%252F%26_dr%3D%26blog_id%3D220154823%26blog_tz%3D5%26user_lang%3Den-gb%26blog_lang%3Den-gb%26user_id%3D0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 19 May 2023 02:56:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6466e564-4d5\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nexpires: Mon, 22 Mar 2027 02:18:06 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 11.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=109.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b80ce17a35bc980edbca32704ff6d4b","sha1":"a0844cb982a1091be97a175f6a353ffddf92a597","sha256":"83431fa4d894678730f7ea8d0fa1cde613ec26bd059031bff95530c5d70a1f10","sha512":"9494e260b4c0c0ec3982621e9888ed74ed5fa778181f9ff7a15e69a7da66e5747f4cd7a803f2eb0dde8e48ea77ff4632ba3200b2385a43996d91144952fd8c39","ssdeep":"","tlshash":"3c214073925d7fa1922343585870a84228f830a630ab81fcdb4bf16998002f28470d7e","first_seen":"2023-06-09T08:56:08Z","last_seen":"2026-05-27T17:21:46.438111Z","times_seen":2506,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: miss\r\netag: W/31075-1760700879912.784\r\ncontent-encoding: br\r\nexpires: Sat, 17 Oct 2026 11:34:50 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=120.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31058), with no line terminators","md5":"0796ccb7c5c44ed7b55b54c6dc685cc9","sha1":"715efc61204d1fd090e62ce34f625f317c4e5dc8","sha256":"265b27e3eb4002a6d5873293c7a2e7d2bdd389a8f640eef7764ec860d2b6364d","sha512":"a6c17dc54b394ca21be87999c250b5fd1cb97b8af2e42ac60249e253afa859f9d42ccfa34652124a3979ea353e022ba7b72712e6530aff7dcf86644d775a8f81","ssdeep":"384:d1nr8in05M/RlRfvEE2Emx3C68XRlRcRAG3+V6IQQ3G4uDji2cOVcIQQ3GmE9F:d1r8bgf7mx3C68XfdV6YuDjiCVcB9F","tlshash":"70d2d8f4a040706d96d79748c33ba407f2514fc4eac64863b915b9f8aadb19d183f7a3","first_seen":"2025-10-17T19:11:38.949884Z","last_seen":"2026-05-27T17:21:46.426012Z","times_seen":3488,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=da12a5b570b01325a073317062c56733\u0026modules=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%3D%3D","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 04:52:47 GMT","end":"Fri, 01 May 2026 05:52:40 GMT"},"fingerprint":{"sha1":"E1:F7:73:A7:A2:16:68:6A:86:09:0E:05:DD:A3:27:44:7A:DB:F7:08","sha256":"FE:4A:13:DA:C5:9E:EC:5D:68:C4:F3:67:31:E6:59:52:C5:9A:B9:CF:DF:D9:95:C5:64:17:0B:9B:DA:0A:D8:F5"}}},"request":{"raw":"GET /prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=da12a5b570b01325a073317062c56733\u0026modules=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%3D%3D HTTP/1.1\r\nHost: edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nage: 121470\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: W/\"7404e-fMQlTnz0xkPw18l0dgXBAX9ut8g\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, accept-encoding\r\nx-matched-path: /prebid/[version]\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cle1::hhr52-1774024416661-f0be69a38774\r\ncf-cache-status: HIT\r\ncf-ray: 9e01b4307a50a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":475214,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58571)","md5":"46d526ca3f732c138551b90bd0779826","sha1":"7cc4254e7cf4c643f0d7c9747605c1017f6eb7c8","sha256":"b8686dc8b3ebea2b485dd6056e4316f95d4f38420d600e82458d5f5082e01b23","sha512":"7b56d1ac2aa9a7170337734d66041528a5bd41720ec236020480746aac3271331b2a8a01219a92643bc8467d02bed79e1ebd6600cb48bfd7005734347c6af5a6","ssdeep":"6144:eBOk7yDHicCxqh3u8oC77NPUSEyzQ20hplpp8JrM2yJy:o+DCcCxqRu9O7NsSEn20hpl8hM5y","tlshash":"09a42b8b33c6f0bb53d714d4d57b0215f2698904740ed060f629ada72826daf62a3f7e","first_seen":"2026-03-18T02:31:45.488925Z","last_seen":"2026-03-26T13:03:03.560953Z","times_seen":39,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/t.gif?is_current_user_blog_owner=false\u0026_en=wpcom_marketing_bar_impression\u0026_ui=bv2yxmGE6pqjIVl5myTI9Njj\u0026_ut=anon\u0026_ts=1774145886423\u0026_tz=0\u0026_lg=en-US\u0026_pf=Win32\u0026_ht=1024\u0026_wd=1280\u0026_sx=0\u0026_sy=0\u0026_dl=https%3A%2F%2Fblueprints.finance.blog%2F\u0026_dr=\u0026blog_id=220154823\u0026blog_tz=5\u0026user_lang=en-gb\u0026blog_lang=en-gb\u0026user_id=0\u0026_rt=1774145886425\u0026_=_","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /t.gif?is_current_user_blog_owner=false\u0026_en=wpcom_marketing_bar_impression\u0026_ui=bv2yxmGE6pqjIVl5myTI9Njj\u0026_ut=anon\u0026_ts=1774145886423\u0026_tz=0\u0026_lg=en-US\u0026_pf=Win32\u0026_ht=1024\u0026_wd=1280\u0026_sx=0\u0026_sy=0\u0026_dl=https%3A%2F%2Fblueprints.finance.blog%2F\u0026_dr=\u0026blog_id=220154823\u0026blog_tz=5\u0026user_lang=en-gb\u0026blog_lang=en-gb\u0026user_id=0\u0026_rt=1774145886425\u0026_=_ HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-27T18:09:56.262365Z","times_seen":360787,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-api.wordpress.com/geo/","fqdn":"public-api.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.23","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 19:45:18 GMT","end":"Sat, 06 Jun 2026 19:45:17 GMT"},"fingerprint":{"sha1":"95:D7:B9:C6:8F:E0:F4:86:9C:07:81:EA:FA:E3:C9:18:EF:BE:53:58","sha256":"98:C2:69:27:04:10:8E:8B:EB:29:16:9E:12:13:58:75:32:0D:D7:BD:21:C9:00:99:97:72:08:1E:71:5C:6E:2C"}}},"request":{"raw":"GET /geo/ HTTP/1.1\r\nHost: public-api.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\nlink: \u003chttps://public-api.wordpress.com/wp-json/?rest_route=/sites/public-api.wordpress.com\u003e; rel=\"https://api.w.org/\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-ac: 20.arn _dca BYPASS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=115.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d403469d8dba61e844f5797962536b72","sha1":"5814d07711f3b8b17bed2618308006dbef68010f","sha256":"65bc435a0fb8b19fba3a882305f7e69959ae437d66586a46d5b90c3c56fe081a","sha512":"896e14f325c2aa73e4af812ee5a01ab9e66a4f32431aad089f6a43cf8776bfae6beff693e44149cdb9440d7fa88bba608e0d2148a99a1fddfe64adc7f1ce3573","ssdeep":"","tlshash":"e8b0922e1498ee6aac6c93d9176ee1235a2810688299b7c793d6aa05d1cca9402c4b04","first_seen":"2023-05-26T18:09:00Z","last_seen":"2026-05-27T17:21:46.425136Z","times_seen":6161,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":59,"dns":27,"connect":10,"send":0,"wait":123,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-beta2-61800","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-beta2-61800 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Nov 2025 13:52:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6925b48a-58ea\"\r\ncontent-encoding: br\r\nexpires: Sat, 20 Mar 2027 14:58:57 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-05-27T18:18:45.094224Z","times_seen":245805,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/blog-plugins/marketing-bar/css/marketing-bar.css?m=1761640963i\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/blog-plugins/marketing-bar/css/marketing-bar.css?m=1761640963i\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/9858-1761640975313.4023\r\ncontent-encoding: br\r\nexpires: Wed, 28 Oct 2026 08:43:34 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 20.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=4.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8050,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2372)","md5":"2c593435285499a6906d41284064d74f","sha1":"d2af6ca6d049403fd1d48e2f45e59f6649ca6dd5","sha256":"54add0e1dbaa3dac2138d40b1f8f99e64c170e3bc35025d557d4d799168ae773","sha512":"14fdbccb8b8b19d25139c750142f2745ea41ecd8a75601605e50e0b9bb20f72be8783be751718f7381b77613d9c31ec39e73ef276a68991fd0727908c1ad7d74","ssdeep":"192:MFh7MmkX2pxSWPuE3Zz2sDJxaQp2pguZb:/X2TVuEJz2sDJxaQpmguZb","tlshash":"75f1cd51cdf0532ca62302ce4bffbf3c9154ea3076eb20926da672568b8239e1d15ec4","first_seen":"2025-10-28T12:32:14.346568Z","last_seen":"2026-05-27T17:21:46.456501Z","times_seen":744,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??-eJx9zEEOwkAIBdALiaTWaDfGs7QjUXSYIYVJr18aExfGuCHw4YGLQqrFqThKA83tzsUw1ZkiFx0d40LoxiNlkjjbJ7Md/maLhoFp0pnMIKpwE/BHQPvnQm2vIfOLYrKv5E0ZS3UObZ9mW1zl0h3703noD0P3XAFDZ01X\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /_static/??-eJx9zEEOwkAIBdALiaTWaDfGs7QjUXSYIYVJr18aExfGuCHw4YGLQqrFqThKA83tzsUw1ZkiFx0d40LoxiNlkjjbJ7Md/maLhoFp0pnMIKpwE/BHQPvnQm2vIfOLYrKv5E0ZS3UObZ9mW1zl0h3703noD0P3XAFDZ01X\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 19 May 2023 01:47:52 GMT\r\netag: W/\"6466d548-9be3\"\r\ncontent-encoding: br\r\nexpires: Tue, 01 Dec 2026 16:28:40 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39907,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (25312)","md5":"72e17a086504b10467344f9acbc8db88","sha1":"0c1411044d6e077584f50de88e0b8b8ebab876f8","sha256":"cd5a73d9519d2f7f834c9c85b4767b729c75371fe4ff61a4aaa195c28f84a694","sha512":"a57b56cd98832508eae4c2b1ec71339e3eb621600f0340af827e825be3354ffc77b798519fed7734776c729d2ea283f8049cb5562dc6e4909b517fe7f4fcbbcc","ssdeep":"768:ojL/R9Y+yXJAfC4wqDwQ8WeK+wQBzPgcDJxe9iRZ:oH/R9EZz4wgwQ8kQF62","tlshash":"5103eabed18d02d04361e88c67e76764179eb52ede896c78d1033a9de3e5e1881923fc","first_seen":"2025-12-02T18:21:40.779051Z","last_seen":"2026-03-23T10:37:33.17714Z","times_seen":104,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/wordpress-main-Uv94n/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 04:52:47 GMT","end":"Fri, 01 May 2026 05:52:40 GMT"},"fingerprint":{"sha1":"E1:F7:73:A7:A2:16:68:6A:86:09:0E:05:DD:A3:27:44:7A:DB:F7:08","sha256":"FE:4A:13:DA:C5:9E:EC:5D:68:C4:F3:67:31:E6:59:52:C5:9A:B9:CF:DF:D9:95:C5:64:17:0B:9B:DA:0A:D8:F5"}}},"request":{"raw":"GET /raven/wordpress-main-Uv94n/library.js HTTP/1.1\r\nHost: raven-edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 1780\r\ncache-control: public, max-age=300, stale-while-revalidate=600, stale-if-error=86400\r\ncdn-cache-control: public, max-age=86400, stale-while-revalidate=600\r\ncontent-encoding: br\r\netag: \"127e-k4fVZSi7HIFpxos6a/aoRf67214\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, accept-encoding\r\nx-dns-prefetch-control: on\r\nx-matched-path: /raven/[propertyId]/library.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fra1::wcdmf-1774024417571-56b82fddff62\r\ncf-cache-status: HIT\r\ncf-ray: 9e01b4307a4ca0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4319)","md5":"1add60c3b3b3c3bfd0180d4d587704e4","sha1":"9387d56528bb1c8169c68b3a6bf6a845febbdb5e","sha256":"197b9521e7fe8bb715f131d56ea1b207aeb0a4847c1040ea65c67035db8bd1c1","sha512":"fb493b42196724a076fbbaea16e233ac08195dd12395528c31114aac590d3a7492a0b7b69c0e1719c141d34c2e8834c522a4f78b90d56df4503880e4bc04e8c7","ssdeep":"96:5ma/XNk7S1k2PWt+RzO9FsFJNo38uGy/HcL2Jl4XfamGGCM/kkNRGMzyExokqdVy:Aa/XNVTqnumM9yPiUmfCDXEWu","tlshash":"a2a1955df790a4f206c481da8a3b6362f23045223505c0ec750d7acb2e57e9766908bb","first_seen":"2026-03-20T19:17:59.546587Z","last_seen":"2026-03-24T13:43:25.600686Z","times_seen":16,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":35,"dns":20,"connect":1,"send":0,"wait":6,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defaultstartermobile.wordpress.com/wp-content/uploads/2020/10/qi-bin-w4hbafegiac-unsplash.jpg","fqdn":"defaultstartermobile.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 19:45:18 GMT","end":"Sat, 06 Jun 2026 19:45:17 GMT"},"fingerprint":{"sha1":"95:D7:B9:C6:8F:E0:F4:86:9C:07:81:EA:FA:E3:C9:18:EF:BE:53:58","sha256":"98:C2:69:27:04:10:8E:8B:EB:29:16:9E:12:13:58:75:32:0D:D7:BD:21:C9:00:99:97:72:08:1E:71:5C:6E:2C"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/qi-bin-w4hbafegiac-unsplash.jpg HTTP/1.1\r\nHost: defaultstartermobile.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blueprints.finance.blog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50995\r\nlast-modified: Tue, 27 Oct 2020 06:59:02 GMT\r\nexpires: Sat, 22 Nov 2025 09:12:07 GMT\r\nx-orig-src: 01_mogdir\r\nx-ac: 22.arn _dca HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1600x1066, components 3","md5":"78ab463ac089b66a44e429ddb923cc00","sha1":"293433c4723316183ad3bcae1e702b96d3db3403","sha256":"801f204cb2441c6832d73c684a9deaaaf22f1f4483359a9d2013598aa258d0e1","sha512":"f1c68ebed67419d4725b7214e5b2b004b8313d024cdc07f050b9642392fec7415c2b3af068b54fef6cd8ea7ae4001867d768a6ef3043888165da7a9405f63249","ssdeep":"1536:vqDJ3wuU4reWeXUcj0Fh/AX1Bbz7VX4tLt1:cy2reWk0FyX1B/pX4xt1","tlshash":"de33f1a16b44a5fbe72cd3b6248f27f63f562d54d1282c1298e00c3278a32dd755d537","first_seen":"2024-09-19T20:21:02.885557Z","last_seen":"2026-05-20T14:42:34.852538Z","times_seen":265,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":67,"dns":44,"connect":7,"send":0,"wait":9,"receive":15,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 18:51:34 GMT","end":"Wed, 29 Apr 2026 19:45:07 GMT"},"fingerprint":{"sha1":"54:A2:3E:DC:FF:11:B4:6E:A9:09:06:34:05:2E:4E:56:83:3E:C1:98","sha256":"D0:42:E5:1E:5C:B4:64:F1:D4:A4:D5:E7:07:9E:59:27:31:82:FB:AC:B3:20:F6:D9:B8:D7:0E:10:7F:B4:69:7F"}}},"request":{"raw":"POST /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 610\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":610,"data":"{\"action_name\":\"Events\",\"f\":\"pageview\",\"jstimestamp\":1774145887113,\"elapsed_time\":32,\"action_group_id\":\"f37b79e3-abc1-d645-dab0-994d00849a32\",\"version\":\"4.29.25-aq-8c8d5c4c_d8f1_4863_abd4_cd331d4170a7_p_55\",\"topLocation\":\"https://blueprints.finance.blog/\",\"referrer\":\"https://blueprints.finance.blog/\",\"jstzoffset\":0,\"custom_fields\":[{\"apiVersionSuffix\":\"8c8d5c4c_d8f1_4863_abd4_cd331d4170a7_p_55\"}],\"s\":\"https://cadmus.script.ac/dy5zgrznaumwk/script.js\",\"bk\":6,\"ia\":0,\"nl\":\"en-US en\",\"ls\":{\"rb\":-1,\"fs\":1161,\"fd\":84,\"vm\":4},\"cid\":\"f37b79e3-abc1-d645-dab0-994d00849a32:TP\",\"tml\":24560,\"details\":\"init | \u003cEF\u003e2\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Sun, 22 Mar 2026 02:18:07 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.js?v=20250204 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=is_current_user_blog_owner%3Dfalse%26_en%3Dwpcom_marketing_bar_impression%26_ui%3Dbv2yxmGE6pqjIVl5myTI9Njj%26_ut%3Danon%26_ts%3D1774145886423%26_tz%3D0%26_lg%3Den-US%26_pf%3DWin32%26_ht%3D1024%26_wd%3D1280%26_sx%3D0%26_sy%3D0%26_dl%3Dhttps%253A%252F%252Fblueprints.finance.blog%252F%26_dr%3D%26blog_id%3D220154823%26blog_tz%3D5%26user_lang%3Den-gb%26blog_lang%3Den-gb%26user_id%3D0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/17401-1738713594313.599\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9088), with no line terminators","md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-05-27T17:56:14.395095Z","times_seen":13818,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_wordads_smart=inline_no_marker\u0026v=wpcom-no-pv\u0026rand=0.15487810580156058","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?x_wordads_smart=inline_no_marker\u0026v=wpcom-no-pv\u0026rand=0.15487810580156058 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-27T16:55:29.548504Z","times_seen":101071,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/api/v1/ravenconfig?ppid=wordpress-main-Uv94n\u0026geo=NO","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 04:52:47 GMT","end":"Fri, 01 May 2026 05:52:40 GMT"},"fingerprint":{"sha1":"E1:F7:73:A7:A2:16:68:6A:86:09:0E:05:DD:A3:27:44:7A:DB:F7:08","sha256":"FE:4A:13:DA:C5:9E:EC:5D:68:C4:F3:67:31:E6:59:52:C5:9A:B9:CF:DF:D9:95:C5:64:17:0B:9B:DA:0A:D8:F5"}}},"request":{"raw":"GET /api/v1/ravenconfig?ppid=wordpress-main-Uv94n\u0026geo=NO HTTP/1.1\r\nHost: raven-edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blueprints.finance.blog/\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\nage: 562\r\ncache-control: public, max-age=120, stale-while-revalidate=240, stale-if-error=3600\r\ncdn-cache-control: public, max-age=300, stale-while-revalidate=240\r\ncontent-encoding: br\r\netag: W/\"3d4-3UipZ0DI/3M0ex4OdiOMzJFJm1E\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, accept-encoding\r\nx-matched-path: /api/v1/ravenconfig\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fra1::jcv2x-1774145887412-7405e23d808d\r\ncf-cache-status: MISS\r\ncf-ray: 9e01b4344b0aa0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":980,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"59eea88a3d323161c9ec112c20d84b31","sha1":"dd48a96740c8ff73347b1e0e76238ccc91499b51","sha256":"99b45196b77b4fa0d2706328d866179929517e6b7437dbc0ae32845389a12ec8","sha512":"65828489663f5ca975c1bd9a3923fef4e6d74bf90c724e15a1d57322e291cb0e950932da16cef4ec5ba0da90178dfaf1da9563cfe747148a3c88bbb87c36136d","ssdeep":"","tlshash":"8c11106ad16c81acc38cc5ec995d2f0466be043ef8e95a08f79e0e0466e54e83874b07","first_seen":"2026-03-06T03:04:32.298716Z","last_seen":"2026-05-27T17:21:46.41493Z","times_seen":1798,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/plugins/gutenberg-core/v22.7.0/build/styles/block-library/style.min.css?m=1773253927i\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.7.0/build/styles/block-library/style.min.css?m=1773253927i\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Mar 2026 18:32:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b1b539-20e2c\"\r\ncontent-encoding: br\r\nexpires: Fri, 12 Mar 2027 20:14:15 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 30.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a53bf012f9a4040026e1817131f3f3c","sha1":"60c35d64e9f676a9350a89dfd90abc8db8453323","sha256":"a55449930a41024e82b6f081d0dc715c9e4c52b104335f533a795156c3fd3ad8","sha512":"5cc83632bbd08c87ddffd587a7df38f9983a45832f498468b550cb4d26ec086d12fbe72ce652a23c124b703e4abad726c084a1e283fb0f1441e9a71f3823ee84","ssdeep":"3072:JoeJKCbMQg5Mmjx+qehFP0xTc4iBmgT0cTrnbO27kMjpT1hpPKc:I0MQg5Mmjx+qehFP0xTczTkMvhR","tlshash":"46d3720417b4dcf935ffa73a5e4ee358a207aa41c68967e6e066d190618ca490df3f0f","first_seen":"2026-03-13T04:20:37.656819Z","last_seen":"2026-05-19T13:38:12.46687Z","times_seen":111,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??-eJyFkFsKwjAQRTdkOlgprR/iUmSahjptJgl5tLh7U6yiFfRruId74DIwOyGticpEaLXthdOpJxNgtr7DLgipMQQVYMgIoxZTWQxhB28ap5ckLXNGQtP4UD7AVoxXxbnmUgsTesJFcJ4Y/U0YnKjHSNZsrX8rJTuYyuUUbTKdVj/2Dio6lOOaga01cCEjoU2kO5DobQpKv3pPUDB97Xp/w1oTs8sP2MTsnfm0r+vDsWoOTTXcAW1/kGk=","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /_static/??-eJyFkFsKwjAQRTdkOlgprR/iUmSahjptJgl5tLh7U6yiFfRruId74DIwOyGticpEaLXthdOpJxNgtr7DLgipMQQVYMgIoxZTWQxhB28ap5ckLXNGQtP4UD7AVoxXxbnmUgsTesJFcJ4Y/U0YnKjHSNZsrX8rJTuYyuUUbTKdVj/2Dio6lOOaga01cCEjoU2kO5DobQpKv3pPUDB97Xp/w1oTs8sP2MTsnfm0r+vDsWoOTTXcAW1/kGk= HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 19 Mar 2026 22:13:14 GMT\r\netag: W/\"69bc74fa-23bdd\"\r\ncontent-encoding: br\r\nexpires: Sat, 20 Mar 2027 00:38:59 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146397,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49753)","md5":"c034906145798e283dbf27d8d59cc4c1","sha1":"1e0a28deb6203ff5dec1e74f871c73030f6c10d1","sha256":"ed739a1c0c6f80961c10dab82a8040eeb6fc9ed19614c4fcd5ecb74e44895d70","sha512":"4e1ceb0bb03163f5ed5a6b7d00cd28c779e29969555ab7b337f80af2f02baf5727c78d1c5374a2e0da55278ed5e24b0ae0d8dda40532f28bcacbaccdcc0bcd08","ssdeep":"1536:1es8PN0VBHmD5TNhJAcBj4Hvr8l12i0PcxMtjj7vB5kH7gsrsCb41bYNNFuSGioe:0f3eNVF5cN8em/wxvGiWdM","tlshash":"78e33a95738c343106e751aa947f1246b33c29366445c4a8bd7eece92964e8e6073ffc","first_seen":"2026-03-21T12:59:23.189812Z","last_seen":"2026-03-22T02:18:34.956065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?crypt=UE5XaGUuOTlwaD85flAmcm1mcmZsaDhkV11YdWFnNncxc1tjZG9XVXhRY3VQY2YtbFl6U21XP2pNSVViazRKTFZwcVY9YUIsblhdb051Ry1LRFMzR3lHbWcrVVtrRUx6RGViZlRoUjZISlhkZ2MrNlR1amlpVFhjLXJDbGdGTk5vaGtbTS8vK0R6WXJLeDB0eHpTYkdnLGNnL1B1VHpxUSxSQ2tDZUtiK1JrandhLzRVWEN%2BekZbNGNKRzVxbFVdN2tGW3B4bXZNMVBWNmEvLlpSUk5qbkNXbEdCTTJvTSt0cFc0TUpkeDRERG5SZHh0K1ZrNzdBdiZkLHBETjFTajcmaFZELEwtejltZTk5WXlHdkUtaGctamFsJnF3THxvNV9USHFKT2drOQ%3D%3D\u0026v=wpcom-no-pv\u0026rand=0.69138204044378","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?crypt=UE5XaGUuOTlwaD85flAmcm1mcmZsaDhkV11YdWFnNncxc1tjZG9XVXhRY3VQY2YtbFl6U21XP2pNSVViazRKTFZwcVY9YUIsblhdb051Ry1LRFMzR3lHbWcrVVtrRUx6RGViZlRoUjZISlhkZ2MrNlR1amlpVFhjLXJDbGdGTk5vaGtbTS8vK0R6WXJLeDB0eHpTYkdnLGNnL1B1VHpxUSxSQ2tDZUtiK1JrandhLzRVWEN%2BekZbNGNKRzVxbFVdN2tGW3B4bXZNMVBWNmEvLlpSUk5qbkNXbEdCTTJvTSt0cFc0TUpkeDRERG5SZHh0K1ZrNzdBdiZkLHBETjFTajcmaFZELEwtejltZTk5WXlHdkUtaGctamFsJnF3THxvNV9USHFKT2drOQ%3D%3D\u0026v=wpcom-no-pv\u0026rand=0.69138204044378 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-27T16:55:29.548504Z","times_seen":101071,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/uploads/2023/06/wp-1687152563045.png?w=192","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/wp-1687152563045.png?w=192 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6514\r\nlast-modified: Mon, 19 Jun 2023 05:29:24 GMT\r\nexpires: Tue, 14 Apr 2026 13:56:26 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 35.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=165.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cfc5c4c8afa92a6cd9810db75667921","sha1":"e337d4a35aebeab1ca9d1b2b13e187fa73408ff5","sha256":"d7ea9a97566918f0d16c740834ae4da771ab345be0d355c513972bcda2b2cae7","sha512":"77111f17d12b3b7d0b00c8b2d5752eca8353c1707f95356ea480b5b99522f78c253fbcceaa28025d2f1453b2f4a5105abc1b9e32198674905f09d0309633b985","ssdeep":"96:RAvhZpzYDmBsA1WQOaH4vuKfHWVDA3xKz7m1BMCdWfGxppsMl2/hkImXR6aKjFD1:JDST2kE2VDABS7spWuBHImXuF+U","tlshash":"96d17da0d7686362d239e47193e208c4755117228017923be6ac11ec779a6deeaf84ff","first_seen":"2026-03-22T02:18:34.957102Z","last_seen":"2026-03-22T02:18:34.957102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geo.aditude.io/raven","fqdn":"geo.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 06:08:50 GMT","end":"Thu, 04 Jun 2026 07:08:41 GMT"},"fingerprint":{"sha1":"59:89:58:44:42:35:17:D6:B8:3F:14:04:78:61:CA:53:B1:7A:3D:3C","sha256":"6B:EE:4A:4A:3B:BD:5A:9B:E3:1D:39:6D:65:ED:1D:9B:26:E7:2E:1F:ED:B2:8A:D5:23:19:87:10:1E:59:01:B4"}}},"request":{"raw":"GET /raven HTTP/1.1\r\nHost: geo.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://blueprints.finance.blog/\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:07 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, private\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e01b4327d2c0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e34bd9ddd44e114ed8b0a1812a80f5e","sha1":"4365617d0f333c4526117b1304cfb38fbe49201a","sha256":"42fb1da33c4ef23ec00e4add927f95054630e968af8a856748d7d765d56e1c37","sha512":"e9b0c2250704d93053c9035394126eb4b85e7dae988e5913ca1ca791a42eb620d2a079c7bbff9201fef12e4ab9833826cd5f20b0d5800df4d237d0db08144a58","ssdeep":"","tlshash":"99d0c22dd004efaca87843589215fb420e9c205a42cdad03d9c99f1192682fd2040002","first_seen":"2025-06-04T20:13:08.842004Z","last_seen":"2026-05-27T17:21:46.419715Z","times_seen":8062,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":9,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts-api.wp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 45532\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:27:33 GMT\r\nage: 496073\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45532, version 1.0","md5":"3f66ddcf744f9d3144a164781c1c8d12","sha1":"a922c0987319ee73a9645918566d35cb90196b3d","sha256":"2dea6190c113af617923c6b71f7f10ffbdf72074556f79963610254fe40e49be","sha512":"ab44f6e75fdef3596d5aad958e14b1b2bedd4132aebe0b136b8f4ae466d2594a68baa1c4dd047e70ac03116dda521934e13445e85ef0f2d56bd341c46d116d86","ssdeep":"768:fYn3iesPbiNr4ew9DQrVPgxlpWLCbyByd2YVi15T85aavJWo0xB6tkKCEg9sJ29:AnSbbzsfuYXYU38MYJWo0xB6yKCEg2Ju","tlshash":"b613f174e6421cb77b86260a76dcfa805c77486536fc2a27baffc02b52ca02045995bd","first_seen":"2025-09-05T01:58:17.133494Z","last_seen":"2026-05-27T15:23:52.520755Z","times_seen":16450,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":27,"dns":1,"connect":7,"send":0,"wait":17,"receive":7,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 20 Mar 2026 17:35:54 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: aSodML_qA1Q2DcXmlw4E_9z9mQf7KUF5\r\nserver: AmazonS3\r\ndate: Sun, 22 Mar 2026 01:46:21 GMT\r\ncache-control: max-age=3600\r\netag: W/\"c24cdee1177a34c49e33bf25d3cdd5ea\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: GTiaBcTYzW0ztfbMBv91iiCggILSAbe1FUGlx3kafiXvOmP1sJqmTQ==\r\nage: 1905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33821)","md5":"c24cdee1177a34c49e33bf25d3cdd5ea","sha1":"d4b64c175f191c7f178f21f349d35a667f158960","sha256":"3f7c0a0efd320ac614d98a470df3fbba2d21d764c45901addbb318a03ffaad46","sha512":"3b6102fd702a17d927163feac4f4c1520448bf4ed0c8ee3be9714dd392f68286d105e95a60d69e59d675dc555b7b299a75207e10ecbaadb7450e4378477e16d6","ssdeep":"768:iZkcQfcXacYCp73BExH+/JNHkRfawlBWr/fKm/:iZk9fjcYCp9cH+/JNER/g7CG","tlshash":"91e2f9973765b02203eb90fee03f1106f371d669581d842cf288aceb356e64592a7f76","first_seen":"2026-03-20T19:17:59.576677Z","last_seen":"2026-03-23T16:33:50.725391Z","times_seen":15,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":23,"dns":23,"connect":1,"send":0,"wait":1,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 18:51:34 GMT","end":"Wed, 29 Apr 2026 19:45:07 GMT"},"fingerprint":{"sha1":"54:A2:3E:DC:FF:11:B4:6E:A9:09:06:34:05:2E:4E:56:83:3E:C1:98","sha256":"D0:42:E5:1E:5C:B4:64:F1:D4:A4:D5:E7:07:9E:59:27:31:82:FB:AC:B3:20:F6:D9:B8:D7:0E:10:7F:B4:69:7F"}}},"request":{"raw":"OPTIONS /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://blueprints.finance.blog/\r\nOrigin: https://blueprints.finance.blog\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.29.0\r\ndate: Sun, 22 Mar 2026 02:18:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":98,"dns":13,"connect":12,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/_static/??-eJyNjMEKgzAQBX+o9hGQBg/FTxFdF0lMdoOb4O9Loe3Z4wzD4CwdqVSWity6ktoWxBC5lpn2LyOrCqYghCUp7QY7Q+HjSWYP3D9kXVtiA82HNuP0j37iMxzz23nvXs4PvYsXKQ87bw==\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /_static/??-eJyNjMEKgzAQBX+o9hGQBg/FTxFdF0lMdoOb4O9Loe3Z4wzD4CwdqVSWity6ktoWxBC5lpn2LyOrCqYghCUp7QY7Q+HjSWYP3D9kXVtiA82HNuP0j37iMxzz23nvXs4PvYsXKQ87bw==\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 20 Feb 2026 20:05:51 GMT\r\netag: W/\"6998be9f-81f7\"\r\ncontent-encoding: br\r\nexpires: Sat, 20 Feb 2027 20:10:54 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33271,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12222)","md5":"4893745fe3712bc2d447a89c77d7432d","sha1":"d0da4c3e0276ee2f1d7386c9d7e0cb49f4983406","sha256":"5bc3fd33be91a150a66042f78eb6fe6073a2ce715ea6dcdce52157e4ef2bea73","sha512":"4c958a3a9ab9dab8e40457b78ee12b6cf28cc627a1e5c375b087f8c4d254ae7c8f74db44877ace49d84167782d54ddc3e4479eb3796f26a069fde9a25376305f","ssdeep":"384:RJFpXr4pETJDlXCnRvT4gAJrCQPOkTVnTVyTVVf3GBTf:RJFpE8JDlynRUgAJrCQPOkTFTgT3WTf","tlshash":"04e27201f7818527ca274b286a55dbb8766c1d804e4b4e9af0e77e5cc7956f8022ef8c","first_seen":"2026-02-20T19:03:02.374564Z","last_seen":"2026-05-01T14:00:34.62333Z","times_seen":951,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?blog=220154823\u0026v=wpcom\u0026tz=5\u0026user_id=0\u0026post=3\u0026subd=blueprintsfinance\u0026host=blueprints.finance.blog\u0026ref=\u0026rand=0.7632931952232885","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?blog=220154823\u0026v=wpcom\u0026tz=5\u0026user_id=0\u0026post=3\u0026subd=blueprintsfinance\u0026host=blueprints.finance.blog\u0026ref=\u0026rand=0.7632931952232885 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-27T16:55:29.548504Z","times_seen":101071,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/components/activity-refresh-component.059097ebda70e7a1783a.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:07.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /components/activity-refresh-component.059097ebda70e7a1783a.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 72334\r\ndate: Sat, 21 Mar 2026 06:12:34 GMT\r\nlast-modified: Fri, 20 Mar 2026 17:35:54 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=86400\r\nx-amz-version-id: mSG8jc8pDSkTTYZblxQB44qZv8pOWg4w\r\nserver: AmazonS3\r\netag: W/\"65092d726781d8adf50f0edff0ba4819\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: guLWZ1IFi2vHBTtATZmDeUlha-dFAnO8wRe5X0DJjaekpDVrV29KZw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3325,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1954)","md5":"65092d726781d8adf50f0edff0ba4819","sha1":"7e3a9cf674485f2854411dd72b9af3ceafb6d053","sha256":"40a8af4b41e9b658bb6dd46d66203b3ae93238a637e9705c1d9ba64d13cbbef0","sha512":"25e5ad332f3da91ce1faf72bc0d661e8df44e0198e4570caabc4ea9ca8db6ddc7adadca5f11ea5540bff07e8ad8b62020cfa9b74cb6694e25d4ec03eb56d58e2","ssdeep":"","tlshash":"be6113c6e37d763016eea1d8986fb443a01f30958524025e7a2d85e0edcd8ab31d7b7b","first_seen":"2026-03-21T12:55:04.601419Z","last_seen":"2026-03-24T00:30:51.47632Z","times_seen":51,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.css?ver=202612d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 19:44:12 GMT","end":"Sun, 10 May 2026 19:44:11 GMT"},"fingerprint":{"sha1":"53:E6:67:FE:F3:2D:4B:20:29:65:08:14:EF:1C:5A:C7:E9:D3:E7:65","sha256":"2F:59:A3:5A:A1:8E:34:C4:42:31:2C:80:90:08:4C:1A:EE:BD:36:C9:DA:79:CC:33:02:4D:3C:4E:DC:18:68:67"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.css?ver=202612d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Aug 2025 17:47:56 GMT\r\netag: W/\"68af44cc-1d85\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\ncontent-encoding: br\r\nexpires: Sun, 29 Mar 2026 02:18:06 GMT\r\ncache-control: max-age=604800\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 36\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7457)","md5":"76eb82b1efaf3230452da95b7887182f","sha1":"41dbbcbb61c92fd4f313116da3a14f48c2dce4de","sha256":"a3874c1e7d3b8e79b6bb7af0f74051bb75d0e2021e40538740a555f3c247004a","sha512":"2b4d8b97efac710d622abe97615c8646ed08082e12fa40a6fb41b394951a0d9677327929e274cf575fe5d2ecd29181f5daf79377384b85f82c7921a9f6c9c100","ssdeep":"48:AFRV7SZ5pzQhe4MGcYeSAsLEx5+VVLCtJIeCQYH1g2cH7Ay2qcVgENt+Gg1mcSu7:C1SZDcTMGPeeSP3qqc1n6S2f","tlshash":"2df14312df021225501a98b2d899f3aa9354f561d7f34189ff305d1e8b87aeaf360e3d","first_seen":"2025-08-28T00:14:25.895777Z","last_seen":"2026-05-27T17:21:46.442186Z","times_seen":15091,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cadmus.script.ac/dy5zgrznaumwk/script.js","fqdn":"cadmus.script.ac","domain":"script.ac","tld":"ac"},"ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.ac","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Feb 2026 10:44:40 GMT","end":"Mon, 04 May 2026 10:44:39 GMT"},"fingerprint":{"sha1":"66:B9:05:D0:4F:7D:CB:02:12:2E:EF:E7:48:09:3E:E2:75:21:BF:CA","sha256":"6A:8F:86:85:F5:B1:8E:ED:A5:4A:99:B7:00:6B:A9:5E:FC:2C:7B:F6:4D:7E:E0:2B:53:5C:1B:7E:1A:13:62:BB"}}},"request":{"raw":"GET /dy5zgrznaumwk/script.js HTTP/1.1\r\nHost: cadmus.script.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400\r\netag: W/\"b5eb4668e1419d0dc8628d7d307953ff47c10197\"\r\nlast-modified: Sun, 22 Mar 2026 01:47:25 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9e01b43099dd5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233475,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ca185699e72d180175666a908fe4d7d1","sha1":"0551d2b0a4e42ddb3fb6570868385fea414ae826","sha256":"1e78178faaebd5dd14d24beb4b0ac2658160935cf17e50f3c06968a3acb8ad49","sha512":"9364b02d1b555a76803b5ff58deeb3a239c9e13643e57f6b8d1a8a5223ae658ae054d1b441bac47c44327542192d4c070b53dc5af8c5df3fde252831bcbb8d60","ssdeep":"6144:ApzdQpSndmavI3hhtzXCYZGDdCSP2GUrU:Mzd6uAhh5XwDd21rU","tlshash":"c33419d16dd970dac967d026d23f434aa04fda86e98d49408632ed3c3ef614af47ea31","first_seen":"2026-03-22T02:18:34.961204Z","last_seen":"2026-03-22T02:18:34.961204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":48,"dns":33,"connect":7,"send":0,"wait":9,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/themes/pub/varia/print.css?m=1738187798i\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/themes/pub/varia/print.css?m=1738187798i\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/4050-1738188138514.9675\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:25 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 10.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2870,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (523)","md5":"1a7cd300981b693eddddc7f091e02ecc","sha1":"537eb0355f4aac4763ab661d001a9842605fc592","sha256":"f8b5cae1f9379268017caa341413821975263a4715237ba621aae108026bb89a","sha512":"1db1f99fcd66d9d202488b4049962d032c4bffb99724f386a91046d969170e45bfd5c4ef248eb8a493c6120c7144d5950c409c7c3f388dd91914c271672a785e","ssdeep":"","tlshash":"0b519994e0d0b98a7b37533bb69a75812ce789cdd68fe7c00adec307c2d521392b1264","first_seen":"2025-02-14T23:24:19.546853Z","last_seen":"2026-05-27T11:58:39.76841Z","times_seen":1927,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_wordads_cmp_view=no_cookie\u0026v=wpcom-no-pv\u0026rand=0.5201380448536477","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?x_wordads_cmp_view=no_cookie\u0026v=wpcom-no-pv\u0026rand=0.5201380448536477 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-05-27T16:55:29.548504Z","times_seen":101071,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/20802-1760700880101.402\r\ncontent-encoding: br\r\nexpires: Sat, 17 Oct 2026 11:34:50 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=118.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20664), with no line terminators","md5":"af5f6fc77eeff45d88d6b8968839f71e","sha1":"8227df4241f330157226c57f4460ca1c4024f963","sha256":"8d7878b78344df2c75fcb56b7c4f940e570d1d2743301adabdd2ff9bc4609a8a","sha512":"fa0260a1bf810df0f63e4034e7cb3561314c816065e72cd6ae6f57f7665bdaf17e77e7bfd08a9f83a17a40d1df11b2d995836656ffd5c251f4a2fbd59f7a788d","ssdeep":"384:VOnAnqGGvxMZ/Pgc11FA3fufwD/NnACOLrPFVAAjTnlelo8EVcz:VOnJUAc13yEGBACADA0Bcz","tlshash":"919274c871e2b0b646e3e4f9517f414bf33a3a5564ada460e029e0e43dbd98dc423f99","first_seen":"2025-10-17T19:11:39.0764Z","last_seen":"2026-05-27T17:21:46.46266Z","times_seen":3488,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/mu-plugins/actionbar/actionbar.css?v=20250116","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.css?v=20250116 HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nCookie: tk_ai=bv2yxmGE6pqjIVl5myTI9Njj; tk_qs=is_current_user_blog_owner%3Dfalse%26_en%3Dwpcom_marketing_bar_impression%26_ui%3Dbv2yxmGE6pqjIVl5myTI9Njj%26_ut%3Danon%26_ts%3D1774145886423%26_tz%3D0%26_lg%3Den-US%26_pf%3DWin32%26_ht%3D1024%26_wd%3D1280%26_sx%3D0%26_sy%3D0%26_dl%3Dhttps%253A%252F%252Fblueprints.finance.blog%252F%26_dr%3D%26blog_id%3D220154823%26blog_tz%3D5%26user_lang%3Den-gb%26blog_lang%3Den-gb%26user_id%3D0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/18776-1750255843681.0737\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4069)","md5":"081b8dc6366ecbed4540e2095032527f","sha1":"7876286288d2add1e689c9577bf3702aa4a9999e","sha256":"e0149c0e2f0d8a3a537e61c08556fa18e30d249cc6c56e84c5b80f7adeb0fcdb","sha512":"6453382e84605235938f8cce58a0ff986018d7bc59e6d317f681166beabe5a2701db69d3d91b048a7ddb4246f6b8dc63e4e18f05ab5bf266f7b247ef039f23c3","ssdeep":"384:/eZ+AggqgWYwdqJWJ0KI3h3r3pRuYOHg8X1:/ep7kc3c","tlshash":"4a72cad173a23839f62bce53e7c1bd9a903d6a01a4639dddb8725408afb18c64f1b604","first_seen":"2025-09-11T07:13:10.091435Z","last_seen":"2026-05-27T17:56:14.373249Z","times_seen":13297,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blueprints.finance.blog/wp-content/themes/pub/hever/style.css?m=1738187798i\u0026cssminify=yes","fqdn":"blueprints.finance.blog","domain":"finance.blog","tld":"blog"},"ip":{"addr":"192.0.78.31","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://blueprints.finance.blog/","date":"2026-03-22T02:18:06.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"finance.blog","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 00:38:02 GMT","end":"Fri, 24 Apr 2026 00:38:01 GMT"},"fingerprint":{"sha1":"97:82:BE:45:8A:47:14:DC:30:81:F5:DE:21:58:B6:22:88:97:98:CA","sha256":"1C:D7:A0:51:8F:66:54:21:B1:FD:76:7A:D3:C2:12:E1:4A:1B:DA:E2:BE:57:A8:AA:F9:89:20:D0:3A:21:D5:48"}}},"request":{"raw":"GET /wp-content/themes/pub/hever/style.css?m=1738187798i\u0026cssminify=yes HTTP/1.1\r\nHost: blueprints.finance.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://blueprints.finance.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sun, 22 Mar 2026 02:18:06 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/122685-1738187917804.6719\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:40:06 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 32.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97754,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9899)","md5":"ddb534382fb690ab0d96f386997f72f3","sha1":"a9f884f46962c5ae1c4f20dd0a2ed2f3b2015573","sha256":"6963f13a6abd8d611aca16213732249162f4c403d495c2696c15855c9333f582","sha512":"52d3db3f817d13085222f1e7a0c78173217039c9df30ab2e59249ff90c82a3034213974d3352a86507feaad5a1a404bc87ee4502a0c0b9af5128e79dbfb98435","ssdeep":"1536:Dw95MH782C+0H0IKxEEj4J01053BrQfVCXa:c95MgEjB","tlshash":"d9a3e79062f029fa7aff432d6ddae05021996811c2c3a7d6f8e3d15456cdba60bf270d","first_seen":"2025-09-26T20:51:03.308353Z","last_seen":"2026-05-24T06:42:32.338213Z","times_seen":438,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"blueprints.finance.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}