{"report_id":"a762211a-b6b2-44fb-9908-af9fb4573e5b","version":6,"status":"done","tags":[],"date":"2026-05-28T06:39:45Z","url":{"schema":"http","addr":"www.duffie.ca/","fqdn":"www.duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"title":"Chris Duffie – Energy, enthusiasm and follow-through are the principles upon which Duffie bases his life, family, and career as a small business owner. Born and raised in Oromocto, Duffie is running for MLA of Carleton-York.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.duffie.ca/","fqdn":"www.duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T06:39:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-28","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"0.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":67278,"first_seen":"2012-05-21T07:08:47Z","last_seen":"2026-05-22T00:39:52.276042Z","alert_count":0,"request_count":2,"received_data":30350,"sent_data":1021,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.duffie.ca","ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2005-12-06","domain_rank":0,"first_seen":"2026-05-28T06:39:46.775031Z","last_seen":"2026-05-28T06:39:46.775031Z","alert_count":0,"request_count":1,"received_data":131052,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"r-login.wordpress.com","ip":{"addr":"192.0.78.18","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":230904,"first_seen":"2012-05-21T07:12:00Z","last_seen":"2026-05-22T00:39:52.408999Z","alert_count":0,"request_count":1,"received_data":562,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"s0.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":56327,"first_seen":"2017-01-30T05:08:18Z","last_seen":"2026-05-25T18:27:54.018206Z","alert_count":0,"request_count":1,"received_data":349941,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"duffie.ca","ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":20,"received_data":1218377,"sent_data":10001,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2026-05-25T07:33:14.380536Z","alert_count":0,"request_count":1,"received_data":13283,"sent_data":402,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2026-05-25T07:33:14.551834Z","alert_count":0,"request_count":3,"received_data":753,"sent_data":1734,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":171612,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2026-05-21T07:23:56.867252Z","alert_count":0,"request_count":3,"received_data":171690,"sent_data":1639,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"chriswduffie.wordpress.com","ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":0,"first_seen":"2026-05-28T06:39:46.777751Z","last_seen":"2026-05-28T06:39:46.777751Z","alert_count":0,"request_count":1,"received_data":27962,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"duffie.ca/jetpack-mu-wpcom-settings-js-before","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"676832242a5d4496cb57a56e701bb72b","sha1":"b5ba3a2b3564a4c83acb9a933b85aab8af70465c","sha256":"72798d8e76070a66f049201c7d8b9d1283e1d9236c7786ad7b8d360cb7129361","sha512":"8c07670e21cbf7ebb85fc158a412e1dd4f025674b12059077216e75b582f1e657c7169f41317e15e02e195c8a3af3e5f15fff03d450b5aa5eda2eb6a8dc84a60","ssdeep":"","tlshash":"e4f0a757c1dc4959655507b44c9426f2804fe32cc885f2c5fcfb943910a154536bd540","size":494,"data":"","first_seen":"2025-12-09T04:34:50.35541Z","last_seen":"2026-07-23T00:09:33.09432Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/js/rlt-proxy.js?m=1720530689i","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"146180a330ce9e46e1f9adee12415931","sha1":"6424ee3ad0e04217ad924f8232c66780fb206917","sha256":"4e1ddbb805779444ab8a88a9527fec667fc9686d1247f88727ad3a04b9ec0573","sha512":"8cd22742bab345037fab961b9bc72bf5ad764dbcfadbe6a9fddb60b982deeb07c64b4bcb2259eedbce6d39794ebd4eb15decd05335434967aa2a14bb586f8751","ssdeep":"","tlshash":"8c51ce8fb515213917f29a2abb27360274770091590a9140c16999f13fbab8fc227fce","size":2481,"data":"","first_seen":"2024-07-09T18:34:31Z","last_seen":"2026-07-27T12:48:27.210311Z","times_seen":15577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","size":655,"data":"","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-07-27T12:48:27.163416Z","times_seen":19543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/jetpack-carousel-js-extra","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e15b388437f5a6292b28f17fb7d61ea1","sha1":"7a253c8ae0f90136e9b7fbb817576639210e7fd4","sha256":"dbbfcf530c75d73bc41ce4951cf05791767f73ec1592dc8b365d95050d049264","sha512":"b1de1372d02edbce1991f27e0638006e706725f7fea7b0b0c5e31d5c7b0f0c5f8f6378df6cfd5e7572979eb5edba9379417db29cfc3e850113d6497446262be5","ssdeep":"","tlshash":"7851642dd0cc866235b37df19d8826b478bd2356c9409f1d9dbc843cc2c1f19a818b0d","size":2442,"data":"","first_seen":"2026-05-28T06:39:53.896415Z","last_seen":"2026-05-28T06:39:53.896415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"60768e4653343e70ee3a1d5e92efe0c2","sha1":"e62143d2c81e988368c34f86e17d8e745afaae6f","sha256":"fd93f71f07d7ca69c6909e434ae79c1324ad18836d21e1b289c86562dcb51bc2","sha512":"f964a196edebe1875b62bb6cb104e8359c25a6fdace297259609f96315131ca562b0af4af14ae4caa828d6f02d83868c46bf1a9c63c3aa7198f2735ce0e6fe07","ssdeep":"96:NKy173a7ymf1DnXyM2G9cHXHe8k8KOHgJsmH85bctMzK6kxIpu0fieAFcg:NfBWf1DnXyM2G9ZzOHzt5xwepvieA2g","tlshash":"46b1448b6b9c0e18887610227d50b395387dd63cb90acf35acbe45286dd9efbc151e4c","size":5558,"data":"","first_seen":"2026-05-28T06:39:53.897398Z","last_seen":"2026-05-28T06:39:53.897398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-includes/js/wp-emoji-loader.min.js","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c570c0b9a7344c621239b35743c0e82b","sha1":"1e8630a178ed2493a03b8961a173a90cb73596c1","sha256":"b1f119d82d5cba4e4b94c4fbd4e95bd7f63804c58c5e0393b43544a09fcb278e","sha512":"9e1bd40c9037d9495713daa304342b0cd5d163fa2636579444f1e9e0efab399db6916b6326cb9305847d05e66c3660b5a90bf8790843301a3e1374c86c949e1a","ssdeep":"","tlshash":"8f71859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea31418b5893c274a46","size":3778,"data":"","first_seen":"2025-12-23T22:11:22.046868Z","last_seen":"2026-07-19T21:02:53.665047Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045d9793bea2147d49e2091523bca32f","sha1":"add12c4d76b79a2ac35faec35f62d29a95aba30f","sha256":"e08353fd145bf9e8bfd944b3d6f4ccfa8ee927eda9209edeb5b1744e3b3a85b7","sha512":"9ca71c48df2dddcf5fb60a035e0a40426e4f46ac7c8acdd14fcf1faf60ebd152d3fad1477b9de2d62e3034d2cea7fb54ed6c70f79c4888228b463b1e5c2b3114","ssdeep":"","tlshash":"a5d05e44db5da880803d3024df6f61cc241d527b945008ea1d06e2b0ad74a2f8115cee","size":261,"data":"","first_seen":"2023-03-07T01:29:43Z","last_seen":"2026-07-05T08:21:38.6835Z","times_seen":17083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c207992b991cdd70ff3b4bec88ec1ca9","sha1":"f77bcfd74d4f0896f82c926bf195f56e23e0c09e","sha256":"7d02c4358311e1e5e35c34909ffdd6720ca623c3b4904b862bf634f7888acefb","sha512":"e7386837aa5b07a0567a9ad4812e9d7fe3e7460560e724215dd3025b912971e31dc8d5e5eac1933f61a0458a18ceadf68c9e81b7f64c65a07e77a828c244acab","ssdeep":"","tlshash":"6501feebb9c61d26a35341d06d29775ed411ec37cc40c501bf9c8c3c03205a56161508","size":679,"data":"","first_seen":"2026-05-28T06:39:53.899903Z","last_seen":"2026-05-28T06:39:53.899903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wpcom-actionbar-placeholder-js-extra","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f158667bd3033d875b506cba6ffb5215","sha1":"4294646e88b08c3a94390054389fd341086e53c0","sha256":"d2b41a8f87f6593c8c9ea40064a7c9b29b05486391f1d196027e209e7eab52be","sha512":"d79d2b376f516121298f599a07d0a57d6fb31e278858cc29bab74e0b06ba0388df34b293b4e36ccc12ea42a7fdd33f70ce99cfea4b83799b02d9a966d1e2cc7f","ssdeep":"","tlshash":"c411feebf9c61d26a35381f06d2d775ed411ec37cc40c501bf9c8c3c03605a56161508","size":946,"data":"","first_seen":"2026-05-28T06:39:53.900846Z","last_seen":"2026-05-28T06:39:53.900846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/comment-like-js-extra","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a3e5d0aad88b492fdcdf96c49e866f9","sha1":"53fe6b384fc27e6899de62ec64b28dabecbfe336","sha256":"3a0b59f395997edb1dd318f1fc49168df77f9d62b1e0fad2bb8937cb93a83ee7","sha512":"8cc23de9967ef1888934d0d9b169191ee3f3c36a6b13a79e980f2307390ae962b89cb4b8d3d6527e523ee3cfc036579f16836a7536fc156ae6c0f0e78d99bea9","ssdeep":"","tlshash":"ce1122dbf1cd4806923a69b8282e2066e8198f83c048c14c62de8c1800f0e70607ab30","size":985,"data":"","first_seen":"2026-02-14T01:00:22.848326Z","last_seen":"2026-05-28T06:39:53.901769Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20f28367474656433454746ff8ef98c6","sha1":"8ac98731563b007a440724309bc803643caaf394","sha256":"dcabf1e5ffab3fd493dab24c5b66f41a4875dca57bae2feffe942ea7fdbf5b61","sha512":"583215d89020360844b0afeef26ee267d60537b0b7297fae381e179a3ddab4287027e6d33c080309827ff782b6116e070f9dcf6ee176711376a2e2e76c152a61","ssdeep":"","tlshash":"2dd0a96781dc4aa965a507b48c9026f2800fe32cc886f2cafcfba43a10a294536bd940","size":223,"data":"","first_seen":"2025-12-03T18:28:02.018232Z","last_seen":"2026-06-07T08:08:43.58771Z","times_seen":4313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202622d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","size":21889,"data":"","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-07-27T12:48:27.211308Z","times_seen":11143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","size":9088,"data":"","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-07-27T10:49:00.864785Z","times_seen":17826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T19:10:39.384572Z","times_seen":309244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54ea2b29fba1624d68bfe357436dcbd9","sha1":"3398d6ddcc12beb44794acf1d83bb372c02588c6","sha256":"b4395288010b99ce8a1bf3dd97af8969a7e8e24d48ce1b28aeec04c83cfa4a42","sha512":"5986590ceab1b2d31dc8cc6374dc3f9021bdfb40c835e9918d5e5acd551064353d5cc6ede84f4fc4d6fa83c7c27a90ad25ba43911fe9eea54ee0c5d2ac4f3917","ssdeep":"","tlshash":"0ab0928f91985869deaa4c6220203b23804b5cb39962c59048aa95bd15b19f125b799f","size":113,"data":"","first_seen":"2025-11-18T17:28:57.936421Z","last_seen":"2026-07-05T08:21:38.702313Z","times_seen":9506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/rlt-proxy-js-after","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9ca22bf1e6ea5df92392a2f1ae4287e","sha1":"7712ce2116bfe59623221f92a77b1abd50355745","sha256":"b2f7ac1376a14c1413a26d393061e932381bbf15b0505b6c445ba08dc9ef4e82","sha512":"6f140124da91c0438a133d9b78776b1033fce819af291f419751612bddff06ca02ab5be64f280d6841ee9b20a67b0f6bacacdb105948e119ce5d7c71ccca44ce","ssdeep":"","tlshash":"43e0228fc0880828ceaa0c3220203b23800b8cb3c822c28008aa80bc00b08f022b388f","size":389,"data":"","first_seen":"2025-12-09T04:34:50.368764Z","last_seen":"2026-07-23T00:09:33.101273Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdd7a4b7f0042aca6fa1d52e933562a2","sha1":"4ad2ddea95ebe3b0a8155e4eeb3d9d0f29541e9c","sha256":"96a846e1d7b789c39ab9afd163f2629edd72b213cc3145c377e591b10343891a","sha512":"19b0f639a9981b7d7a376d9ba3c7c6857cd087c4688122d186278b45e313be7dfd0ebdec479dcec3acb5016a646e50a19fd2c931f9561b3cb298fcafd9b4e7c3","ssdeep":"","tlshash":"56517578337079b5caff4784f224d528b365ddc1440b28017d2926df26aefa181e1f6a","size":3090,"data":"","first_seen":"2026-03-26T15:40:50.79804Z","last_seen":"2026-07-27T10:57:35.320237Z","times_seen":5639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/_static/??-eJx9jUEOgzAMBD9EcBGlnCqeUoGJKofYjkgivt8cgAOqOO5oZxe2YFAlWUnA2QSfvyQRnE1hxGXPwKoCHxKEKZOfAcdVc7T+7B2gZpLaxQr+z6IyF2Q8LbacXMCduO+bLRTlEos38Lvp+655dY/26X7Qh08/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63e29cf6f26dfd792a101d23c6a57c89","sha1":"c045748d07067f709e26b1314e21df6d0c3f40c5","sha256":"a4d1a66dd32e82d55899775638fbdf18d4ba9dfd0f9a255b9433a04e4d8bbcf4","sha512":"ac060f90902c33f6d92bfa1d5dde0b5471fe05d1b8f63aa2681e121e5337e306f2a07834b2d80a6f1120ad14a7bf5e2cf9c495ddfb6ff8c1d0474eed06801d15","ssdeep":"768:c/dAkzu86E2bpXDqvGe/qJrsLdpKVFPRBsQxSLqGldsJfFWdPO59vKwrsCbCqC0g:c/086H/GUJ9WdirsCb41bx","tlshash":"aa231994b38c223645a7119aac5f53c4713c1a72d902c858fcbfec6d26a0e6a5235ffd","size":49685,"data":"","first_seen":"2026-04-03T00:26:11.999028Z","last_seen":"2026-06-03T19:17:31.757661Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bffbf7e55194457b147b6683f8a1ed2b","sha1":"628605011087d8ff4f38a470f966e2927ba4a83a","sha256":"baa797800947c3b91895f89e61f3b9e561cb6ac8624d7adb4580e93359f746c0","sha512":"98a2a5cddf5b1d259d8e9d2b8e0b6326aa905e33c50862027cc0bde18ebc533675ab64ae1971f1493ad5575b809bfa21bc8a2c9334fcf60537405c25e4ecae50","ssdeep":"","tlshash":"bda0222800ac2e0033c00c20803a0033820c8802c08f0e00ba008003a03000382b0000","size":62,"data":"","first_seen":"2025-11-18T19:04:29.042779Z","last_seen":"2026-07-13T05:46:29.258174Z","times_seen":7476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"43d3c2bb73181f4d393133bba8e9a708","sha1":"0e916979dd33f38c086286da23569db54956fd5e","sha256":"efaa5193bbad9c60ffd1d7a4bc428630806d507a8b9a0df401ab0995f7424968","sha512":"84376561bcf41d5462186e409d0ad6750d1721f297c25d799c1b4be131ab4c18132df92acf2bcd9907be09393fbc556a9995a980491fe171b4b06daf5b7db540","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKK2:YYJC0cHWujsIl39KK2","tlshash":"bd031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51fbfbd","size":40144,"data":"","first_seen":"2026-05-22T04:28:27.661154Z","last_seen":"2026-07-27T10:57:35.304418Z","times_seen":3343,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-28","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wpgroho-js-extra","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f1f26c299160ff380a1c09bf0dc5275","sha1":"33064345f96d91ce946f6d5329daf5ba57d9f7d5","sha256":"b182e4f18000c8dd6ab5cafa6efff15951aa8b10717ab23d38d07e9862e6e720","sha512":"50665a18e5bf810fb6a357bf7786ff1b4e48dfc11ea177838ae83502692656164314edf4ea8e3ced737ae03554aae89919dddb35fa4e0d20c8da639e96033755","ssdeep":"","tlshash":"b4f02228c0ac2e00b3c00c30883e0033820c8802c08f0e00ba088003a03000382b0000","size":570,"data":"","first_seen":"2025-12-02T04:51:12.569966Z","last_seen":"2026-06-07T14:22:50.861285Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","size":12829,"data":"","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-07-27T12:25:45.035402Z","times_seen":25900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/js/bilmur.min.js?i=17\u0026m=202622","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","size":13941,"data":"","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-07-19T23:12:16.756811Z","times_seen":22298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"duffie.ca/wp-content/js/rlt-proxy.js?m=1720530689i","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/js/rlt-proxy.js?m=1720530689i HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/5444-1720530698843.6633\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 36.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2481), with no line terminators","md5":"146180a330ce9e46e1f9adee12415931","sha1":"6424ee3ad0e04217ad924f8232c66780fb206917","sha256":"4e1ddbb805779444ab8a88a9527fec667fc9686d1247f88727ad3a04b9ec0573","sha512":"8cd22742bab345037fab961b9bc72bf5ad764dbcfadbe6a9fddb60b982deeb07c64b4bcb2259eedbce6d39794ebd4eb15decd05335434967aa2a14bb586f8751","ssdeep":"","tlshash":"8c51ce8fb515213917f29a2abb27360274770091590a9140c16999f13fbab8fc227fce","first_seen":"2024-07-09T18:34:31Z","last_seen":"2026-07-27T12:48:27.210311Z","times_seen":15577,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T06:39:23.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\nvary: Accept-Encoding, accept, content-type, cookie\r\nlink: \u003chttps://public-api.wordpress.com/wp-json/?rest_route=/sites/chriswduffie.wordpress.com\u003e; rel=\"https://api.w.org/\", \u003chttps://wp.me/Ph4ItO-4\u003e; rel=shortlink\r\ncontent-encoding: br\r\nx-ac: 18.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=366.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]}],"data":{"size":130723,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20744)","md5":"9c565147fd3bcee879a4b519c86f0b3b","sha1":"947bda9ba8b445b58f0dddfcae16003a10435342","sha256":"8e5fce2aeb1a13ceacb3ac066981300c0ffea4f7e177060752e02b21de365903","sha512":"e1173fef815af6983126dbf9fda8f5e59267107a2159dc3d605458e2a14bc0114aad58b3eb19290576c5e67bd5455debe2c6fda4b19d7c680d760bd861e55005","ssdeep":"3072:DBc5RiBmgT0cTrnbO27kgqUKdeyZMpX4wvSAIeTVufF4gxAFJcnfNeHZ:DBc5oTkX+yZMpX4wvSAIeTVufF4gaV","tlshash":"02d3196153b848f5797b4327a905b324621bee32c6447ae4b0f7c1586dc9eb606f3b0e","first_seen":"2026-05-28T06:39:53.872533Z","last_seen":"2026-05-28T06:39:53.872533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1156,"timings":{"blocked":782,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/jetpack-plugin/moon/modules/related-posts/related-posts.css?m=1770909026i\u0026cssminify=yes","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/mu-plugins/jetpack-plugin/moon/modules/related-posts/related-posts.css?m=1770909026i\u0026cssminify=yes HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7486-1770909043769.4663\r\ncontent-encoding: br\r\nexpires: Fri, 12 Feb 2027 15:20:34 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 26.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1878)","md5":"55ae9eb75bc43f79d4547195f1d06539","sha1":"7b793da34866233b43b622f7907dd6585684c621","sha256":"12509dfffe88b10bbdb0b097e55f7d2779ebb7a7bee7aa95836657c2b5ee2f83","sha512":"02c5602560b0bf59e6c0b51e32599430593824e7670225228eed201e7dab9d7e11f5da9eb2bcb12b852b6720d8e3ccde8130ec2287cac6a27efc4e7a5f067dd3","ssdeep":"48:wEQ22R7a27MLADzDZWJo6UY+ojt5Cxp6qvHGQD/VtLsIm/Sffw:pkNWL+ojaOMT7Nw","tlshash":"b3c13377c67599495f17e3f2ddbd89da3d34612a95313cd2af82ea07af8a2c3052c048","first_seen":"2026-02-12T22:34:06.803654Z","last_seen":"2026-07-26T19:49:12.674568Z","times_seen":1402,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css;charset=utf-8\r\ncontent-length: 432\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 19 May 2023 01:52:23 GMT\r\netag: \"6466d657-1b0\"\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3f85c8298bd1f63f17efd3b3967e2917","sha1":"8cbe853ab2335ce410d7d7ae5bc19de242f7fbb2","sha256":"77e6916cc1f597af2401037c2cebb3f392dfcd9993d1d4b716644c14c319363b","sha512":"bb9823f4d08eda8af271e8972745dee61b22fb2df65e0471f234f2a3b0e645d08e726710852c4e8fd78815a3334341008ef70f16d9f720094428a4c66a7754a5","ssdeep":"","tlshash":"1ce06d06b546bd85d4ce76ab2c9ed61c3fbc90c66e1e8b157611db7042388c0283a885","first_seen":"2025-09-08T19:08:06.188532Z","last_seen":"2026-07-27T10:49:00.876914Z","times_seen":9059,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /w.js?68 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/12868-1717166113344.7605\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12829,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12829), with no line terminators","md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-07-27T12:25:45.035402Z","times_seen":25900,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.7152088642974708","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.7152088642974708 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.css?ver=202622d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.css?ver=202622d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Aug 2025 17:47:56 GMT\r\netag: W/\"68af44cc-1d85\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nexpires: Thu, 04 Jun 2026 06:39:24 GMT\r\ncache-control: max-age=604800\r\nalt-svc: clear\r\nx-nc: HIT arn 22\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7457)","md5":"76eb82b1efaf3230452da95b7887182f","sha1":"41dbbcbb61c92fd4f313116da3a14f48c2dce4de","sha256":"a3874c1e7d3b8e79b6bb7af0f74051bb75d0e2021e40538740a555f3c247004a","sha512":"2b4d8b97efac710d622abe97615c8646ed08082e12fa40a6fb41b394951a0d9677327929e274cf575fe5d2ecd29181f5daf79377384b85f82c7921a9f6c9c100","ssdeep":"48:AFRV7SZ5pzQhe4MGcYeSAsLEx5+VVLCtJIeCQYH1g2cH7Ay2qcVgENt+Gg1mcSu7:C1SZDcTMGPeeSP3qqc1n6S2f","tlshash":"2df14312df021225501a98b2d899f3aa9354f561d7f34189ff305d1e8b87aeaf360e3d","first_seen":"2025-08-28T00:14:25.895777Z","last_seen":"2026-07-27T12:48:27.192976Z","times_seen":19571,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/actionbar/actionbar.css?v=20250116","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.css?v=20250116 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/18776-1750255843681.0737\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4069)","md5":"081b8dc6366ecbed4540e2095032527f","sha1":"7876286288d2add1e689c9577bf3702aa4a9999e","sha256":"e0149c0e2f0d8a3a537e61c08556fa18e30d249cc6c56e84c5b80f7adeb0fcdb","sha512":"6453382e84605235938f8cce58a0ff986018d7bc59e6d317f681166beabe5a2701db69d3d91b048a7ddb4246f6b8dc63e4e18f05ab5bf266f7b247ef039f23c3","ssdeep":"384:/eZ+AggqgWYwdqJWJ0KI3h3r3pRuYOHg8X1:/ep7kc3c","tlshash":"4a72cad173a23839f62bce53e7c1bd9a903d6a01a4639dddb8725408afb18c64f1b604","first_seen":"2025-09-11T07:13:10.091435Z","last_seen":"2026-07-27T10:49:00.889671Z","times_seen":17290,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/uploads/2026/02/chris-duffie-text-only-1024x200-1-1.png?w=228\u0026h=45\u0026allow_lossy=1","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/chris-duffie-text-only-1024x200-1-1.png?w=228\u0026h=45\u0026allow_lossy=1 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2464\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 03 Feb 2026 17:00:53 GMT\r\nexpires: Fri, 03 Jul 2026 02:18:13 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 29.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=210.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bfd88c5c68947664ee4493924b5581b","sha1":"18a6e6849cc9a8ace6035b3f9a824c90e697a823","sha256":"2bf777f0f389870e0db53a4570fa2f95c7246af1e39938ffae2a5048422d9155","sha512":"0101ab864d2984815bab5f69b2b3eb926ce06b94319f399d34445b97755c5d575d67b3af0fe7367d2f5388f80fe0e0868e69783c1165304030bfea8f2cd0af54","ssdeep":"","tlshash":"6d513b06748d1976dfd5ec640ce3bd0e99b2067d7be825d37cae0353b520b924910ca1","first_seen":"2026-05-28T06:39:53.877936Z","last_seen":"2026-05-28T06:39:53.877936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202622d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.js?ver=202622d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 Mar 2026 03:40:26 GMT\r\netag: W/\"69ba1eaa-5581\"\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\nexpires: Thu, 04 Jun 2026 06:39:24 GMT\r\ncache-control: max-age=604800\r\nalt-svc: clear\r\nx-nc: HIT arn 22\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21885), with no line terminators","md5":"d542e547b26e6b4675e12f5a2ad65204","sha1":"9f48fb3d774d2d4cea4a7ad83949ab42b3faf8b5","sha256":"d1133547e8a1f2801609f51cef12522abe7f6647d869e9fbc974fe356a37e613","sha512":"0d25b83e1d8978c85d275ee3e1d5681721cffdd63797387f5b500ae0a52c5798ee32e54bd7c9242857dfa1bfb5abeae279d9947e556aa8819ba4c62eadc22bd1","ssdeep":"384:WbjinjEUe96o7iiTqFt7L08jkfwOq/vkSB93aTTBBTNuX:jqP+iTi7L08qwOq/vJ3aTTTTw","tlshash":"7aa29591ef656472010b9bb2c06fe315e24fa905f7a64040ee32f9c9165ecc6f362e2d","first_seen":"2026-03-18T09:15:40.25895Z","last_seen":"2026-07-27T12:48:27.211308Z","times_seen":11143,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":1,"connect":7,"send":0,"wait":8,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/_static/??-eJx9jUEOgzAMBD9EcBGlnCqeUoGJKofYjkgivt8cgAOqOO5oZxe2YFAlWUnA2QSfvyQRnE1hxGXPwKoCHxKEKZOfAcdVc7T+7B2gZpLaxQr+z6IyF2Q8LbacXMCduO+bLRTlEos38Lvp+655dY/26X7Qh08/","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /_static/??-eJx9jUEOgzAMBD9EcBGlnCqeUoGJKofYjkgivt8cgAOqOO5oZxe2YFAlWUnA2QSfvyQRnE1hxGXPwKoCHxKEKZOfAcdVc7T+7B2gZpLaxQr+z6IyF2Q8LbacXMCduO+bLRTlEos38Lvp+655dY/26X7Qh08/ HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 02 Apr 2026 21:24:04 GMT\r\netag: W/\"69cede74-c215\"\r\ncontent-encoding: br\r\nexpires: Fri, 02 Apr 2027 21:31:08 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24576)","md5":"63e29cf6f26dfd792a101d23c6a57c89","sha1":"c045748d07067f709e26b1314e21df6d0c3f40c5","sha256":"a4d1a66dd32e82d55899775638fbdf18d4ba9dfd0f9a255b9433a04e4d8bbcf4","sha512":"ac060f90902c33f6d92bfa1d5dde0b5471fe05d1b8f63aa2681e121e5337e306f2a07834b2d80a6f1120ad14a7bf5e2cf9c495ddfb6ff8c1d0474eed06801d15","ssdeep":"768:c/dAkzu86E2bpXDqvGe/qJrsLdpKVFPRBsQxSLqGldsJfFWdPO59vKwrsCbCqC0g:c/086H/GUJ9WdirsCb41bx","tlshash":"aa231994b38c223645a7119aac5f53c4713c1a72d902c858fcbfec6d26a0e6a5235ffd","first_seen":"2026-04-03T00:26:11.999028Z","last_seen":"2026-06-03T19:17:31.757661Z","times_seen":271,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?blog=252322008\u0026v=wpcom\u0026tz=-3\u0026user_id=0\u0026post=4\u0026subd=chriswduffie\u0026host=duffie.ca\u0026ref=\u0026rand=0.19802381557955417","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /g.gif?blog=252322008\u0026v=wpcom\u0026tz=-3\u0026user_id=0\u0026post=4\u0026subd=chriswduffie\u0026host=duffie.ca\u0026ref=\u0026rand=0.19802381557955417 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65d-c12\"\r\ncontent-encoding: br\r\nexpires: Thu, 27 May 2027 16:58:53 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 18.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"fdd7a4b7f0042aca6fa1d52e933562a2","sha1":"4ad2ddea95ebe3b0a8155e4eeb3d9d0f29541e9c","sha256":"96a846e1d7b789c39ab9afd163f2629edd72b213cc3145c377e591b10343891a","sha512":"19b0f639a9981b7d7a376d9ba3c7c6857cd087c4688122d186278b45e313be7dfd0ebdec479dcec3acb5016a646e50a19fd2c931f9561b3cb298fcafd9b4e7c3","ssdeep":"","tlshash":"56517578337079b5caff4784f224d528b365ddc1440b28017d2926df26aefa181e1f6a","first_seen":"2026-03-26T15:40:50.79804Z","last_seen":"2026-07-27T10:57:35.320237Z","times_seen":5639,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.duffie.ca/","fqdn":"www.duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T06:39:22.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:23 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://duffie.ca/\r\nstrict-transport-security: max-age=31536000\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=104.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130723,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T19:39:25.272407Z","times_seen":17568401,"resource_available":true,"data":null}},"time_used":1427,"timings":{"blocked":657,"dns":377,"connect":7,"send":0,"wait":112,"receive":0,"ssl":270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 317\r\nstrict-transport-security: max-age=31536000\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/471-1684460922208.3726\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":317,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"6134a117c00dc1171f42fd8c35b78e88","sha1":"cac0c7c889ea57043338802e8446e9ec8b78fad3","sha256":"224f43833c9a318a3d885fe2ecb4c5b0794e0617ebfff62ad8d729105929246c","sha512":"11896c7411aad29af74ba3fea6417b527271fcdc29e274006c76a7090e2d2114c9afae024d179e967472d7ed6c614db4975d7e256f5405e9199056e8aa1193e7","ssdeep":"","tlshash":"ebe078534791551c000ff5715cac056522543115f647f1e852b2d6319d4bfcc411770c","first_seen":"2025-02-19T23:14:00.002605Z","last_seen":"2026-07-27T10:49:00.904531Z","times_seen":12182,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/uploads/2026/02/background-tm-1024x403-1-1.jpg?allow_lossy=1","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/background-tm-1024x403-1-1.jpg?allow_lossy=1 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 36746\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 14:40:10 GMT\r\nexpires: Sun, 28 Jun 2026 05:03:35 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=400.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x403, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd1c58090d6158c9fb5e6bbbce28551b","sha1":"61a3ed68dec06a8f034bf08ffd0d1def02bedfc4","sha256":"461a897abd2c13348f24ebc2664ad4b0eea855129eeb989baa14fe44132c92a4","sha512":"062213b59ad6c1e4247eaa3a6e5ec5e2e6524a0de44e9c6a65da54a16baa95739f4cd42b0256dacc039c9dcfd1988b5b4f86b914e982a29eae5834c4ee49ad3f","ssdeep":"768:cjHgYVgDEDRCT7gPd5lKW4PgRSxihxydk1eojg6fDy6tFKV5Q6u21TH22J:cjLgwDY7Mz4PkUdhufxFK76GDv","tlshash":"adf2f12348cc92b694b793a8ddfd3323f4d6e9e1a6bad121da58447f0692e3150e01d6","first_seen":"2026-05-28T06:39:53.882029Z","last_seen":"2026-05-28T06:39:53.882029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/1125-1684465005221.1526\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 17.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (655), with no line terminators","md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-07-27T12:48:27.163416Z","times_seen":19543,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/familjengrotesk/v8/Qw3LZR9ZHiDnImG6-NEMQ41wby8WRnYsfkunR_eGfMGJaSzoc1jcEYq2.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/familjengrotesk/v8/Qw3LZR9ZHiDnImG6-NEMQ41wby8WRnYsfkunR_eGfMGJaSzoc1jcEYq2.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duffie.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21548\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Mar 2023 21:38:24 GMT\r\nage: 84124\r\naccept-ranges: bytes\r\nalt-svc: clear\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21548, version 1.0","md5":"2f939da3cdcd5bb1ae5e094a636dd801","sha1":"57bce860d07bae03d0eb847a3dbc3c239f51a93a","sha256":"bd06951a48ae1f018f4a401e1066214f95820e0e3aec223176b4a3be010e772b","sha512":"d6bf688fb713303e71689c2e7aaded431d18fd2798cae0a485346618c8e19c6c1f685870293050f1e7ae9776002bbf054d8b6483ad1995c7ecd7896d5c24a382","ssdeep":"384:eK4gDf2K+oM7MaDHKfmfuLFL/03baQu42/6v4xDCL3MYz2eOhiBvEIW1z:5rMRI2HKfRFL/6j9q6v4xqFzwiBvoz","tlshash":"19a2d02052177af8e648cde9961533db627b41d7c2d482e498fc30578b35d3f0379466","first_seen":"2025-09-21T07:57:39.353741Z","last_seen":"2026-07-24T22:34:16.24904Z","times_seen":47,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/block-library/navigation/view.min.js?m=1779418693i\u0026ver=96a846e1d7b789c39ab9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 22 May 2026 02:58:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fc65c-9cd0\"\r\ncontent-encoding: br\r\nexpires: Thu, 27 May 2027 16:58:52 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"43d3c2bb73181f4d393133bba8e9a708","sha1":"0e916979dd33f38c086286da23569db54956fd5e","sha256":"efaa5193bbad9c60ffd1d7a4bc428630806d507a8b9a0df401ab0995f7424968","sha512":"84376561bcf41d5462186e409d0ad6750d1721f297c25d799c1b4be131ab4c18132df92acf2bcd9907be09393fbc556a9995a980491fe171b4b06daf5b7db540","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKK2:YYJC0cHWujsIl39KK2","tlshash":"bd031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51fbfbd","first_seen":"2026-05-22T04:28:27.661154Z","last_seen":"2026-07-27T10:57:35.304418Z","times_seen":3343,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-28","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"duffie.ca/wp-content/plugins/gutenberg-core/v23.2.2/build/modules/interactivity/index.min.js?m=1779418693i\u0026ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/_static/??-eJyNjMEKgzAQBX9IfdUKOZV+iuh2KdFkN7gJ+X0pVM8eZxgGNbWkklkyYmlTKF8vhpVzmmn7M6KqYPJCWILSZrDqE+8dmTW4f4j6KYENNO9ajMMVneI3fMdX75wb+8dzGNcDKPY7Zw==\u0026cssminify=yes","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /_static/??-eJyNjMEKgzAQBX9IfdUKOZV+iuh2KdFkN7gJ+X0pVM8eZxgGNbWkklkyYmlTKF8vhpVzmmn7M6KqYPJCWILSZrDqE+8dmTW4f4j6KYENNO9ajMMVneI3fMdX75wb+8dzGNcDKPY7Zw==\u0026cssminify=yes HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css;charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 28 Apr 2026 21:05:35 GMT\r\netag: W/\"69f1211f-7e3a\"\r\ncontent-encoding: br\r\nexpires: Wed, 28 Apr 2027 21:11:52 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32314,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12222)","md5":"83fc921a96ec19b8645ffd94459f443e","sha1":"73ee779c14ca8e7fe54f8f1d9fd3516d0e6a3152","sha256":"5496bef5d971d970cc5c417f7ed720a2a83d93064f3329e02875b5d08553b332","sha512":"105387ff597d048dad5b1967bb478ec4c9fdd2dc26c8de10759a4c453852a85d806e580c2f81ffbae2afd85c6cb96ba6036c22292376504267434708d48f1e28","ssdeep":"384:RJFpXr4pETJDlXCnRvT4gAJrCQPOkTVnTVyTVVf3ITf:RJFpE8JDlynRUgAJrCQPOkTFTgT3ITf","tlshash":"0de27201f7418537ca274b286a56dbb8766c1d804e474e9ab0e77e5cc7957f8022ef8c","first_seen":"2026-04-28T21:58:49.939669Z","last_seen":"2026-07-21T19:50:09.670416Z","times_seen":1899,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/_static/??-eJx9jVEKAjEMRC9kDQvK1g/xLO0SazRtSpuyeHurgq4K/s28ZGZgzmaSpJgUYjOZW6BUYZIYOzJMF+yufpF1JysgSKLU0/UlnodFp54w9obcPLhaMXrGAlWvjD+vi/mCniV0GR7bb/svFFAMy+SUJH0Yc2RH5R49xP0wjtZud8PGnm9BuF3o\u0026cssminify=yes","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /_static/??-eJx9jVEKAjEMRC9kDQvK1g/xLO0SazRtSpuyeHurgq4K/s28ZGZgzmaSpJgUYjOZW6BUYZIYOzJMF+yufpF1JysgSKLU0/UlnodFp54w9obcPLhaMXrGAlWvjD+vi/mCniV0GR7bb/svFFAMy+SUJH0Yc2RH5R49xP0wjtZud8PGnm9BuF3o\u0026cssminify=yes HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: text/css;charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 15 May 2026 15:32:31 GMT\r\netag: W/\"6a073c8f-c9be\"\r\ncontent-encoding: br\r\nexpires: Sat, 15 May 2027 15:42:54 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51646,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (25312)","md5":"4bbddddec5ae8c4cc666d27898ff4a59","sha1":"3b61eac96015621127f49405d53384c8f6783d72","sha256":"5382577dd239ba7fd36e971c77a7398152bb4834e0623a4a447e405c26159084","sha512":"ab175a04a4385d6f4f2c118b980a2639d148c6f0bcc02e2f16fe7c75237e60eb2fe3bb5e7400723f7a01ad445d912c7a6eaadfcf75a72d5fb5b9a042dc738e19","ssdeep":"768:IjL/R9Y+yXJAfC4wqDwQ8WeK+wQBzPgcDJxe9iRCBg:IH/R9EZz4wgwQ8kQF6zg","tlshash":"fd333b7aa19805d08325d88c2be7b750278ef42bcf4d2cb9e1437a5ce7d5a1885933ed","first_seen":"2026-04-01T16:19:28.909783Z","last_seen":"2026-07-26T19:49:12.71785Z","times_seen":239,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/arimo/v29/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxsAhDAVQI4aA.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/arimo/v29/P5sfzZCDf9_T_3cV7NCUECyoxNk37cxsAhDAVQI4aA.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duffie.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 126804\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Sep 2023 01:14:49 GMT\r\nage: 89093\r\naccept-ranges: bytes\r\nalt-svc: clear\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126804, version 1.0","md5":"90f7bad983d701f83454c55817578164","sha1":"0205b947aca948aa010248b16104df14abb35c38","sha256":"bee08a517a00d8181a85dc8113b9df572fbb18ecb528d13b356911034a3cc480","sha512":"ce59e54aa1e9227e04c0d5e12e4b18e43c71563785f9c89f4f3bb003d23fa4ccb69ae3f1ccc46e5022fde7d082fae544fd06e08f5cb4b2c0a78a5b2705d7d075","ssdeep":"3072:FfUYCZ09aiFdW8dFljdBcwbkRmAFZpk6asUiNn7eG:FfUYCi9aiHW8djPgRd1QsUK7eG","tlshash":"77c312e3e252958ccee0a45d3ed7e8dd81224cfe8071bb4452a17a9f070f69a1f4c795","first_seen":"2025-09-21T07:57:39.338089Z","last_seen":"2026-07-24T22:34:16.260351Z","times_seen":47,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/familjengrotesk/v8/Qw3LZR9ZHiDnImG6-NEMQ41wby8WRnYsfkunR_eGfMFubizoc1jcEYq2.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/familjengrotesk/v8/Qw3LZR9ZHiDnImG6-NEMQ41wby8WRnYsfkunR_eGfMFubizoc1jcEYq2.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://duffie.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21944\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Mar 2023 21:38:36 GMT\r\nage: 140919\r\naccept-ranges: bytes\r\nalt-svc: clear\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21944,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21944, version 1.0","md5":"782cbf49350727a8662c3024e9643287","sha1":"c0db6c8cbead88492b13273f879dcb660cca4a1d","sha256":"4331c8638ed7e0f37ca50779f7c72b4831c2782c33ec52f90bf6777387262188","sha512":"ee89cc3604b084b5906a21c0f52bd3d6d22a8555a3d79d1bfd3b8b9bb162de218986ab46a3b9dae7efec1b6106f4d3fb25ca399e02685e0173f146dcd670240f","ssdeep":"384:btC1BuazowFrlHZ0CBCvJ0gL1hgmwRzSuOBC4RteFAqSK7hws5bIQeWOAh:btC1B1lH3C0khbagBZe6ghpbIQOAh","tlshash":"4fa2f1b12210f25f1aba1136aa87f8c017c9cfb575bb6b07db0636e68f0d51c4194b74","first_seen":"2025-09-27T20:16:18.499125Z","last_seen":"2026-05-28T06:39:53.887159Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?crypt=UE5tW3cvZGRWeXosZ0V4dk5hejB0d25DRnx2OFhsPXhjZXlCL3FyPUJXeUguSlt1TT9fMENFVlY5XSxCZzFvUUdKc295Uj9jW10teC1LP1VTU04rcWNNUFlETkZzVmFCcV94cUFOd054NHFYQkQ%2FfDddRlBaYW03aWo%2FY3FyMk5EZ2JCRzAwTTIzZzJuaDUxPytBUj9Td0NtaUtZSm0mK0pxYmwrMVlzUDJTZnNpJg%3D%3D\u0026v=wpcom-no-pv\u0026rand=0.8232636199404887","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /g.gif?crypt=UE5tW3cvZGRWeXosZ0V4dk5hejB0d25DRnx2OFhsPXhjZXlCL3FyPUJXeUguSlt1TT9fMENFVlY5XSxCZzFvUUdKc295Uj9jW10teC1LP1VTU04rcWNNUFlETkZzVmFCcV94cUFOd054NHFYQkQ%2FfDddRlBaYW03aWo%2FY3FyMk5EZ2JCRzAwTTIzZzJuaDUxPytBUj9Td0NtaUtZSm0mK0pxYmwrMVlzUDJTZnNpJg%3D%3D\u0026v=wpcom-no-pv\u0026rand=0.8232636199404887 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-27T17:31:42.786246Z","times_seen":115169,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r-login.wordpress.com/remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly9kdWZmaWUuY2E%3D\u0026wpcomid=252322008\u0026time=1779950364","fqdn":"r-login.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.18","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 19:45:31 GMT","end":"Wed, 05 Aug 2026 19:45:30 GMT"},"fingerprint":{"sha1":"BD:CC:FF:05:E0:54:EB:C7:78:0A:8D:41:DA:3B:55:4D:3B:A4:EB:0D","sha256":"A9:A7:0F:DC:B9:16:7D:3E:A3:D8:D8:A9:BD:DC:0D:93:98:23:34:3A:19:8C:BD:CF:4E:F3:32:D3:65:56:62:78"}}},"request":{"raw":"GET /remote-login.php?wpcom_remote_login=key\u0026origin=aHR0cHM6Ly9kdWZmaWUuY2E%3D\u0026wpcomid=252322008\u0026time=1779950364 HTTP/1.1\r\nHost: r-login.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding, Cookie\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nx-ac: 17.arn _dfw MISS\r\nalt-svc: clear\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=414.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"43ea8521b0fc31c97cd8c2e3c08b8005","sha1":"41869394fa62aeab662edaf02e68f4a1da9aff86","sha256":"5de8ac6eeceb3855396b851ff1e117964cb744d46aecb86750854426c1cda252","sha512":"b251f94202975afa21f89a2e5dab0a82aa61bb0b1a98ccf692c24ebfa70d427dbe2b8ada891b45b448c92bbded73dd5628805b1605c71828930750632175c4ef","ssdeep":"","tlshash":"b6b092df6c29adfb226204a5b131bf1db19ac08ce841ab20a1aa22401a8a7d68800344","first_seen":"2026-05-28T06:39:53.888222Z","last_seen":"2026-05-28T06:39:53.888222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":25,"dns":1,"connect":7,"send":0,"wait":422,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.js?v=20250204 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/17401-1738713594313.599\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9088), with no line terminators","md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-07-27T10:49:00.864785Z","times_seen":17826,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/uploads/2026/02/cropped-cd-logo.jpg?w=192","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:25.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-cd-logo.jpg?w=192 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1454\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 15:39:59 GMT\r\nexpires: Thu, 02 Jul 2026 06:09:22 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=183.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6be96196fe2393e95c397ce95a795077","sha1":"56aad99c1e4b060f784ed0bcea4ad3a2dbdeb3e5","sha256":"9d6474ed583d339c63354e355c9a303518d7b4e60daf4da5cfc80dc602a4901e","sha512":"06a511eb399bcf4d2afb1b8815684b87432f7bbc697f1a57100a165438838d70524231e8276615f7c41eab769210b85e8f9d1cd0cdb7706f29ed9f346833b561","ssdeep":"","tlshash":"1831e95fc9118fe1bab4d1517c2379f405a8f328004272045b96c6f161f3400233919f","first_seen":"2026-05-28T06:39:53.88973Z","last_seen":"2026-05-28T06:39:53.88973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/assembler/assets/fonts/inter/InterVariable.woff2","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /wp-content/themes/pub/assembler/assets/fonts/inter/InterVariable.woff2 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://duffie.ca/\r\nOrigin: https://duffie.ca\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 349360\r\nlast-modified: Fri, 16 May 2025 13:35:26 GMT\r\netag: \"68273f1e-554b0\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Oct 2026 05:39:15 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 26.arn _dca MISS\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=280.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349360,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 349360, version 1.0","md5":"9df41c6e6e62bf4fbc8d41e3a18b50f2","sha1":"281348e8cc6bd547d9230880b68e00f140eeb87f","sha256":"f400d1c19888bd3d9e10ff991d6234744efae6958a9b911f6c3813ec66d54e70","sha512":"f621fa3580dee72a2989b89dd30b397b753a7ae5ae87b48a2413f3c45faa80bafdaadcd9a008b44915446bdfafff6a15ab75e85fe73c0a8c846c1cff1c8d7be3","ssdeep":"6144:zsP0djRfruB/qEPbV+srgkf3s+JK3K7YhE4axvXSNQrtTTrHcEJgSTT5hRNw:zsPefUJPbVqk70WvX2uj8WTpC","tlshash":"b47423efa5de0098d85f7ee6e83865dc7b7e8184921d0ebc80f146435b378ea0b4d548","first_seen":"2025-07-01T15:44:59.531685Z","last_seen":"2026-07-27T13:19:14.157541Z","times_seen":1160,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":16,"dns":1,"connect":7,"send":0,"wait":8,"receive":48,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/uploads/2026/02/chrisamandaduffie.jpg?w=759\u0026allow_lossy=1","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/chrisamandaduffie.jpg?w=759\u0026allow_lossy=1 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 788998\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 03 Feb 2026 17:49:49 GMT\r\nexpires: Thu, 25 Jun 2026 17:19:06 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 10.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=799.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":788998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc6b1c35bbe196b1fe159048fab89dc1","sha1":"dfcd4598738437fb15c3b08b98ea46da08a0cb6e","sha256":"645577b72d1d48d7ca576d933aa14412700b5282795e484237f3e6a3b6ceb042","sha512":"8a657fc54844c3d39d796d27d4ac4543027ad2c31cddab2adccddb6a21aec6342f78073ffacfc113038cbce44566623f4cba38d9303eca5b07f22b12e1afdee4","ssdeep":"24576:rJ8bDmYt/co9cS/E3UoPfSF0sAZD/pavuaUfJZO5u4:rJ8HmRo9cS/ELo0fZI2FfJZO5u4","tlshash":"17f4339a8533666c9d4df935dae942e8fa3794f032b03e460c19ef6f8e8a5143d71408","first_seen":"2026-05-28T06:39:53.891243Z","last_seen":"2026-05-28T06:39:53.891243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1083,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chriswduffie.wordpress.com/wp-content/uploads/2026/02/chrisduffiedec2016-197.jpg?allow_lossy=1","fqdn":"chriswduffie.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 19:45:31 GMT","end":"Wed, 05 Aug 2026 19:45:30 GMT"},"fingerprint":{"sha1":"BD:CC:FF:05:E0:54:EB:C7:78:0A:8D:41:DA:3B:55:4D:3B:A4:EB:0D","sha256":"A9:A7:0F:DC:B9:16:7D:3E:A3:D8:D8:A9:BD:DC:0D:93:98:23:34:3A:19:8C:BD:CF:4E:F3:32:D3:65:56:62:78"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/chrisduffiedec2016-197.jpg?allow_lossy=1 HTTP/1.1\r\nHost: chriswduffie.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27526\r\nlast-modified: Tue, 03 Feb 2026 17:11:19 GMT\r\nexpires: Wed, 01 Jul 2026 08:53:56 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 15.arn _dca MISS\r\nalt-svc: clear\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=279.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 750x910, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf82caf05e6ad51d3fce28a42b4c4dce","sha1":"0b49368c33c1dc0e18248a331dd20e8312d9dcb4","sha256":"509dba9685315a6c99b386cf703c0d77d3fa8437d984887dab01ae85aee35d4f","sha512":"f09d4ec9bfac73e905cbc74f273b93e2d1facc5e51a17a4d0598045329c8e47b79523c29a19c99c662739ba97d3af4a782f145c0e970afa22cd77d1bb4a34eb5","ssdeep":"768:zDUyxK2XktQ5Yrh7NhJYArbkjZDUCLC2gFU0Jg9JoyJPE:zDU3ra5YV7dLrbqj0ae","tlshash":"6dc2f1a1c566a705b2cdc0a306a077c4907d9e993e7cea09d5d49dd2ecf6bc607e430c","first_seen":"2026-05-28T06:39:53.892201Z","last_seen":"2026-05-28T06:39:53.892201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":27,"dns":16,"connect":9,"send":0,"wait":288,"receive":8,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/js/bilmur.min.js?i=17\u0026m=202622","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/js/bilmur.min.js?i=17\u0026m=202622 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 31 Oct 2025 10:41:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6904925f-3675\"\r\ncontent-encoding: br\r\nexpires: Tue, 25 May 2027 00:00:01 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 29.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13940)","md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-07-19T23:12:16.756811Z","times_seen":22298,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-content/uploads/2026/02/cropped-cd-logo.jpg?w=32","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:25.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/cropped-cd-logo.jpg?w=32 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:25 GMT\r\ncontent-type: image/webp\r\ncontent-length: 438\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 15:39:59 GMT\r\nexpires: Mon, 22 Jun 2026 19:54:09 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=163.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13d37c3f0749362a2a37c46c442ad6a8","sha1":"bef4a822f4c5732aa9a07b0e0e81c2522a4b92c5","sha256":"2e4a447e63d96e5c1aa9bc944c5bfc539005f12f8a4535057b49c15ad35146e4","sha512":"d9d7424cbe8fb897dfa8e222a934e8960273ce82fbeaf6806ee61727f1c1142a3a6204584e210c439923cb531b59c587b60c1ce10a7bb91b2ce38e3dbc29271d","ssdeep":"","tlshash":"4df0a3c55b745f40e485be042b1b0b1db774254bd911496186e45461544cb095ddef1b","first_seen":"2026-05-28T06:39:53.894216Z","last_seen":"2026-05-28T06:39:53.894216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duffie.ca/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382","fqdn":"duffie.ca","domain":"duffie.ca","tld":"ca"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://duffie.ca/","date":"2026-05-28T06:39:24.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 18:53:09 GMT","end":"Sat, 11 Jul 2026 18:53:08 GMT"},"fingerprint":{"sha1":"76:DD:15:20:B2:3B:B2:AD:45:63:2A:1D:54:50:7A:45:17:A0:A3:57","sha256":"C9:56:2C:03:62:CC:C2:28:3B:CF:3A:0B:50:55:0A:CC:6A:E0:F3:48:72:3D:01:17:0D:D0:BD:8D:7C:C5:84:3B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=7.0-RC4-62382 HTTP/1.1\r\nHost: duffie.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://duffie.ca/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 06:39:24 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 25 Nov 2025 13:52:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6925b48b-58ea\"\r\ncontent-encoding: br\r\nexpires: Thu, 20 May 2027 15:57:36 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca HIT\r\nalt-svc: clear\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-27T19:10:39.384572Z","times_seen":309244,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}