{"report_id":"db2c7fc4-1798-4020-ac10-bb4cd83d246d","version":6,"status":"done","tags":[],"date":"2025-12-23T22:08:41Z","url":{"schema":"http","addr":"www.cortesexmasletter.com/","fqdn":"www.cortesexmasletter.com","domain":"cortesexmasletter.com","tld":"com"},"ip":{"addr":"192.0.78.25","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"title":"Cortese Xmas Letters – Tony\u0026Sue Holiday Letter","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.cortesexmasletter.com/","fqdn":"www.cortesexmasletter.com","domain":"cortesexmasletter.com","tld":"com"},"ip":{"addr":"192.0.78.25","port":0,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-27T22:08:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-23","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null},"summary":[{"fqdn":"cortesexmasletter.wordpress.com","ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":32,"received_data":3032525,"sent_data":17446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"raven-edge.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":46082,"first_seen":"2024-06-27T19:03:05Z","last_seen":"2025-12-17T13:28:46.123582Z","alert_count":0,"request_count":2,"received_data":6702,"sent_data":985,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dn0qt3r0xannq.cloudfront.net","ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-01-21T11:08:15Z","last_seen":"2025-12-18T00:36:53.864982Z","alert_count":0,"request_count":3,"received_data":390979,"sent_data":1471,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"s0.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":56327,"first_seen":"2017-01-30T05:08:18Z","last_seen":"2025-12-22T03:30:44.983989Z","alert_count":1,"request_count":5,"received_data":311922,"sent_data":2710,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":171612,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2025-12-23T03:17:47.465374Z","alert_count":0,"request_count":2,"received_data":84607,"sent_data":1208,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"event-ingestor.judy.pnap.aditude.cloud","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-12-29","domain_rank":51266,"first_seen":"2024-04-25T06:11:02Z","last_seen":"2025-12-17T06:02:51.940479Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":554,"comment":"","tags":null,"fingerprints":null},{"fqdn":"0.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":67278,"first_seen":"2012-05-21T07:08:47Z","last_seen":"2025-12-22T13:45:13.285226Z","alert_count":0,"request_count":2,"received_data":30307,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cadmus.script.ac","ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-18","domain_rank":18316,"first_seen":"2023-03-09T12:55:25Z","last_seen":"2025-12-19T22:49:33.391283Z","alert_count":0,"request_count":1,"received_data":211968,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2025-12-21T22:51:42.603738Z","alert_count":0,"request_count":1,"received_data":13283,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.cortesexmasletter.com","ip":{"addr":"192.0.78.24","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":215048,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2025-12-21T22:58:07.598969Z","alert_count":0,"request_count":5,"received_data":1255,"sent_data":3015,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.clean.gg","ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2018-04-01","domain_rank":10789,"first_seen":"2018-05-23T22:36:18Z","last_seen":"2025-12-23T15:03:56.175885Z","alert_count":0,"request_count":2,"received_data":1001,"sent_data":1065,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"geo.aditude.io","ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49510,"first_seen":"2024-11-21T16:53:44Z","last_seen":"2025-12-18T09:46:06.769224Z","alert_count":0,"request_count":1,"received_data":542,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"edge.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":64087,"first_seen":"2023-03-14T16:14:38Z","last_seen":"2025-12-16T23:03:21.879588Z","alert_count":0,"request_count":1,"received_data":465000,"sent_data":1404,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cortesexmasletter.com","ip":{"addr":"192.0.78.24","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":215066,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"public-api.wordpress.com","ip":{"addr":"192.0.78.22","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":55730,"first_seen":"2012-07-08T04:15:07Z","last_seen":"2025-12-23T07:12:29.351704Z","alert_count":0,"request_count":1,"received_data":588,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"cw-static.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":176391,"first_seen":"2024-04-22T17:14:51Z","last_seen":"2025-12-17T08:13:24.078901Z","alert_count":0,"request_count":1,"received_data":16635,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"geo-location.prebid.cloud","ip":{"addr":"18.165.122.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-01-27","domain_rank":57585,"first_seen":"2022-09-28T00:11:58Z","last_seen":"2025-12-18T19:03:42.400938Z","alert_count":0,"request_count":2,"received_data":1198,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"raven-static.aditude.io","ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-05","domain_rank":49158,"first_seen":"2024-07-02T04:50:19Z","last_seen":"2025-12-18T00:36:53.369892Z","alert_count":0,"request_count":1,"received_data":120087,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.16.0-sj05vn/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67551faa60cad1cd2f1a4bc55c8623c3","sha1":"76f1050f843ff6b985e77f17ea5c9e11e1997f63","sha256":"b5b48a3da14551137ab07a9ad13f97e86970887764a63271d79cfed1f951323a","sha512":"35b297267fd79fa7072b8df13c5d8a637bac71297c9dc70dff139bbefd00fe5c92573e81023facbb359ffccc3e52c0174ea7aec6da6e2cfe913b7672b02e9d1f","ssdeep":"1536:X/PVdbKt+nbTWCv4q50bKNdFQuvFPLKB0VXfWcFnQik8qWRrEFrwv2MD1Xfrx3TU:NvWrWWcxDzqDs20Tu3HqE6LS","tlshash":"2cc33ac6b2cab57d83d955d0c0345105f33649aa780dc0b4f3a86ce3356ad8b62b6f3a","size":119542,"data":"","first_seen":"2025-12-20T02:52:16.742676Z","last_seen":"2026-01-14T15:29:10.117384Z","times_seen":427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wpcom-actionbar-placeholder-js-extra","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e186b2dec7eb60ea98ab7d1ae5a0c9a3","sha1":"f2e65122314455852ffcc86a374efd2575d5f8a9","sha256":"f0372256f59cdcf38af51e6da6de519c5db000a8711ce71bdce7c24f559987ea","sha512":"b16593975981d719ab0a06803ffe8e1d30f847400bacfc33ed049f40a59587c26438ae0528c733ad1e15cbfa0ab7ac5632a72835309e7717eb6807aaa11cf997","ssdeep":"","tlshash":"e511c0fbf9c21a05979346f17c3d779fd416e87bcc988106beac8c3c03a16e56551918","size":898,"data":"","first_seen":"2025-12-23T22:08:50.611459Z","last_seen":"2025-12-23T22:08:50.611459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"045d9793bea2147d49e2091523bca32f","sha1":"add12c4d76b79a2ac35faec35f62d29a95aba30f","sha256":"e08353fd145bf9e8bfd944b3d6f4ccfa8ee927eda9209edeb5b1744e3b3a85b7","sha512":"9ca71c48df2dddcf5fb60a035e0a40426e4f46ac7c8acdd14fcf1faf60ebd152d3fad1477b9de2d62e3034d2cea7fb54ed6c70f79c4888228b463b1e5c2b3114","ssdeep":"","tlshash":"a5d05e44db5da880803d3024df6f61cc241d527b945008ea1d06e2b0ad74a2f8115cee","size":261,"data":"","first_seen":"2023-03-07T01:29:43Z","last_seen":"2026-04-05T12:00:51.330159Z","times_seen":10940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?m=1764669441i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"291fa442589607e5f12eed1f9d250511","sha1":"a91a40a7ff6730b67274f950ee46b059e1d9af32","sha256":"d857655afd7f378dbe04cdfd64313353b71b932d8d6c7fc3c021c09be779a297","sha512":"ac8eacade68d8ef1f70f47031a6327a467eef738dbf43087ad3a73d866a0222a01700c83f89d8bb06e01e2528757aae5daf75a7ccd9ddf1bb0f07f008bd4dcbe","ssdeep":"384:EwEZwAMfifbeH/uY3dA6ac+VVogo3wI87TnKebmlioAdJTPxXkSYwTo9uX0jcym:Ec/fRsI+3IAf/d984XxB","tlshash":"6be28349b695b4e302e3b4b4409f444ab1b75b45b81acad1f315f6c0bc7d84ea0a7f8d","size":33548,"data":"","first_seen":"2025-10-25T06:58:40.435374Z","last_seen":"2026-04-05T15:14:49.92718Z","times_seen":26875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/js/bilmur.min.js?i=17\u0026m=202552","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","size":13941,"data":"","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-04-05T14:26:23.003278Z","times_seen":9408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:56:24.97281Z","times_seen":60211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0796ccb7c5c44ed7b55b54c6dc685cc9","sha1":"715efc61204d1fd090e62ce34f625f317c4e5dc8","sha256":"265b27e3eb4002a6d5873293c7a2e7d2bdd389a8f640eef7764ec860d2b6364d","sha512":"a6c17dc54b394ca21be87999c250b5fd1cb97b8af2e42ac60249e253afa859f9d42ccfa34652124a3979ea353e022ba7b72712e6530aff7dcf86644d775a8f81","ssdeep":"384:d1nr8in05M/RlRfvEE2Emx3C68XRlRcRAG3+V6IQQ3G4uDji2cOVcIQQ3GmE9F:d1r8bgf7mx3C68XfdV6YuDjiCVcB9F","tlshash":"70d2d8f4a040706d96d79748c33ba407f2514fc4eac64863b915b9f8aadb19d183f7a3","size":31058,"data":"","first_seen":"2025-10-17T19:11:38.949884Z","last_seen":"2026-04-05T13:53:19.252354Z","times_seen":2110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/sandbox%20eval%20code","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"f019f144761e15f741f6ab1e4cf566a5","sha1":"1c73bccb222e44ae4633750eda7c357460a81a03","sha256":"4cacaf0fd3e370c4840c87c79f923f1ffb69ff7ce5d8172390783c8f83861d62","sha512":"614dbb696b7185a4291bf2c43c4b7442e46740b0a76ec537472bb0fdae208c239642f5160175cef935876f72df688409f170513809606f8aefdfe6613f88947f","ssdeep":"","tlshash":"04c08c92aa5018ed2a602ab176206013e2c676012be3d585f00a00ab5080eba18585a0","size":148,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-04-05T15:03:32.842926Z","times_seen":31557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b1422483617587010f1f4c6601fade9","sha1":"e696ef65fbb21ef0e0271ad3b4c7d4f570d52649","sha256":"d1162d443b56286ae367400f767077b97df2b1fe6331cb30224a738aced654f8","sha512":"cf8221da202c743d304a29d3bf99263ea0aa82321353ea0bb16143592a7e8270bcfea4e0451927d4b2f4ff9d3720559b5301d79c2b171a12ba0338a8ffaeeac1","ssdeep":"","tlshash":"1b01c0fbb9c21a05579306d17c3d779fd416e87bcc988106beac8c3c03616e56551918","size":723,"data":"","first_seen":"2025-12-23T22:08:50.615143Z","last_seen":"2025-12-23T22:08:50.615143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e6993c97160ded50196123e9a43208c","sha1":"9898f4eaa4b5d7c556b290f7a63df8ae7668a05f","sha256":"7336b5eacb13d95fd2f9c9d4250bbdc7f602899cd0ac93481abac0beba48b94f","sha512":"1f7ef4e852872102391e716c898c68cf6eb324ac88123c0ad4d7a159ac50fd6b1a1c286bc14efd5dfaab1dc38aad99bb2576204171c3289c798deead35af747e","ssdeep":"","tlshash":"52c08c9600bd40a715d04e800c459af2c08e9395d91bdbdaeaa7c83c30f4a35b6f3f09","size":165,"data":"","first_seen":"2025-11-19T00:33:39.939423Z","last_seen":"2026-04-05T01:17:37.413542Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"12b990e1d20ce05879170ff53c551433","sha1":"72b462fa75f150cdb1ff44681f01d8e70dc88db3","sha256":"d60a952ca31e70ad8c6895efb3e7bc9e0d865ea5595ed723a999f41e9c3551f9","sha512":"b04cab13c2db228fffe3a06ad59b8eab772783e2c22d0fa2adbdb4e52dfabc01289e05c57f65417a576a3fc90021193de543938dc40c4233fabd6fe585d965ac","ssdeep":"","tlshash":"72d0a75341dc4955655507b44c9016f2800fe32cc885b2d5f8f7943910a154136b9540","size":222,"data":"","first_seen":"2025-12-03T22:32:16.328301Z","last_seen":"2026-04-05T05:47:42.355178Z","times_seen":1540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54ea2b29fba1624d68bfe357436dcbd9","sha1":"3398d6ddcc12beb44794acf1d83bb372c02588c6","sha256":"b4395288010b99ce8a1bf3dd97af8969a7e8e24d48ce1b28aeec04c83cfa4a42","sha512":"5986590ceab1b2d31dc8cc6374dc3f9021bdfb40c835e9918d5e5acd551064353d5cc6ede84f4fc4d6fa83c7c27a90ad25ba43911fe9eea54ee0c5d2ac4f3917","ssdeep":"","tlshash":"0ab0928f91985869deaa4c6220203b23804b5cb39962c59048aa95bd15b19f125b799f","size":113,"data":"","first_seen":"2025-11-18T17:28:57.936421Z","last_seen":"2026-04-05T12:00:51.341668Z","times_seen":3364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/jetpack-carousel-js-extra","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d505d031c2a2740c94846dd53c06ebf","sha1":"18102cf4950badfdb8cc73b966bb0205466ba997","sha256":"1229b27ed5483c9044befcc358cbee24c8305874bf5ea9078b32ee09367e43a4","sha512":"cd6f2b39f89521f76b98c69b8336cb6f4b4b5fdb5dc7756184ed93854abc4f7522746648097c64b09bd3740ffcde3b22dd5e93c1cd87a50012b75e5c8c397cb8","ssdeep":"","tlshash":"a3511229d1c8872135736df2ad8823f5b8b91369c9845b2eddbd843c83c1f55a815b0d","size":2953,"data":"","first_seen":"2025-12-23T22:08:50.620491Z","last_seen":"2025-12-23T22:08:50.620491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/jetpack-mu-wpcom-settings-js-before","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4903ebc9b84fdf0c41f0e0e574217f2c","sha1":"04d85cd75e24b7b2eddf269206f3b45612221c5e","sha256":"ca6182ff61f4796dd5f306ce3e50aef871845d1ecca0c89ea9a700a66429567a","sha512":"02c162daec7ce0f1638e78ddf585050c2b63a4679f7578bafbfc1b29f9b91889f911d536aa42693d31005c2890b3f8a7a8313510f3eae1d89bd4f92208322ccb","ssdeep":"","tlshash":"06e0a753c1dc4955655547b44c9416f2804fe32cc885b2d5f8fb943910a154136b9540","size":405,"data":"","first_seen":"2025-12-23T22:08:50.624084Z","last_seen":"2026-01-16T21:38:50.67116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1c78c6677b74951b2ddaa6f255077ab","sha1":"3acc62a051161d12192b796f5a930c4c0bcb3214","sha256":"88abf45b1c0913f1d21219a7a47469f9a80290cc5d01ab3732af563d363a3930","sha512":"160045c39b07bfa448403794cddbc973c4d21311f458759b9454db8345a472c5a4b53b885e2e4e5d42633a6d032bc4a10e696638f83c6cac15c525b0a7b1d38c","ssdeep":"","tlshash":"8af09e589a19742864e0dd1cf46c9f45376455d4c12d3dd8caf480091644e0081a4a0d","size":497,"data":"","first_seen":"2025-12-23T22:08:50.626239Z","last_seen":"2025-12-23T22:08:50.626239Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wpgroho-js-extra","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a4b421666f819c445c66a8f0b3b3320","sha1":"8154bd967fee9bce270c50369efb42da08fd3013","sha256":"3caca03915dac70b217a264036fbb7d710d97b958f869050c4be441901d7b249","sha512":"d5fcd4b04a953c49732fdcc61f05c66dbb403b463a1ccd0aee029f2262afed58e9b8c5b86b3ecf96bc12aff38b07df806ab9cd1bdec0b9f89b0c9361d8d5fe0a","ssdeep":"","tlshash":"a2012228c0ac2e00b3c00c30883e0033820c8802c08f0e00ba088003a03000382b0000","size":752,"data":"","first_seen":"2025-12-18T07:34:35.165781Z","last_seen":"2026-03-30T02:43:09.871632Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/plugins/gutenberg-core/v22.2.0/build/scripts/dom-ready/index.min.js?m=1764855221i\u0026ver=1764773745533","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b0f521ba8e31a7ad1cb1525515ae0d","sha1":"908e7d2136d84d5c5dcda21934ca94d976e055fc","sha256":"a06281ae5cf5500e931779c5698ffbcafc66381d2535cef5641e1882df32bf69","sha512":"9275110e76e606db55cb66d832fa7dc49e7037de57a3aa7fa25331443366e3419a16499cfd23fa70ad864f72a4ee031286404d87596cecfa693a2e5aa9b104ef","ssdeep":"","tlshash":"a30146671de6ee3145dd4686c13d63c0f628247d2165b0d0a79cc4f8c4e440b00b9e7b","size":821,"data":"","first_seen":"2025-10-23T18:22:15.600785Z","last_seen":"2026-04-05T13:53:19.255045Z","times_seen":1583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e89da31feb124bdc878b5edd17a0a549","sha1":"84ff9fdf1a71bf4cc884020dd3ae22990b99518d","sha256":"245873a633902456efdbac235052f2f826be7cc8f02996badf4136dd7085684e","sha512":"85397733e280e4134134955878a526de3f1496065fd6ce71c5998fac201e19bb86a46ee449c935cdcac280383f9f09107d4e1fead6829f54142d60569145ac01","ssdeep":"384:uAwweWMfva1P6lXaCjc/tAp3Mprh8yayDgXf27QHP3BemiAEljRKXB0Phlf/hhEq:u1WeEcXayeSpnJtXtP3BCRKy5lf/h2mR","tlshash":"a7e208973765f06203eb50fda03f1106f371d669581d843cf288aceb256e64a92a7f36","size":33772,"data":"","first_seen":"2025-12-19T23:38:39.894089Z","last_seen":"2026-01-05T21:15:16.724612Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/wordpress-main-Uv94n/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ac5892314d6f368872ba8f579fd3771","sha1":"f32ceda3847993ef12a7c3e303fac6d62e937787","sha256":"50ce6b68179cfd41c3a56c8f3681656adb7cf5d9eeb999de01de38b985d4ce8b","sha512":"28984c287fe809bbb8147ece05cdf8d3804a0315437d2b2d93966caf94b6e6a14806308a8680aaf517aab2584d55938e6fcff7059bdbb24d337289241c6b5b61","ssdeep":"96:5mtpS8Nkr52CWtP+zl9FsFJio3CY4ytEL2Jl4XfamGC1QIxExokqd+O:AtpFN0q4urmyoUmb1QGEW7","tlshash":"e191841db7a1a4f14bc841db893a6372f33446213248c0ec704eab8b3d57da792a4d7a","size":4271,"data":"","first_seen":"2025-12-20T02:52:16.751147Z","last_seen":"2026-01-09T12:10:07.138613Z","times_seen":354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/sandbox%20eval%20code","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-04-05T14:49:45.588413Z","times_seen":135389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4d1da2d4c387f5247975ea36a29e5454","sha1":"76918da9607a16c1ce97e44b61ec6655ad175050","sha256":"3fdd6b0834c6e74e1310a68d72e3336505d70d531530850b8a84ff1c8677db2c","sha512":"ee87713d051993bee37e06c14c97eeadb4e1b8dc709d520e207cef332bf2122fc4719da19a156d199406e0583f70c23bc3e17d0d543758231688c91aa6ef2924","ssdeep":"","tlshash":"b3300000000000000c00000000000c003000030000000000000000000000000000c000","size":4,"data":"","first_seen":"2023-03-07T01:17:50Z","last_seen":"2026-04-05T13:53:19.330758Z","times_seen":12458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a02d4c6b6c5543773d57e5afa292067","sha1":"fd3d6473a32f87d10ac8ac0b27bed7809fe3b610","sha256":"81af223837ecf5610240c4c6c2b489ac5b2afcf21288add3e5492b9da9b3ddf5","sha512":"78d6feeb7547b517a9553648c5caccf99f91a6451efe6b199e194c4a9c52c041572000f1eca6663a9044fdcf890d60867c7452d3f234c492744b4c0d4f5a1894","ssdeep":"6144:bhpPzxI1dHx8wexY1TvzdYIoQtvjcQHi5:d41RdYnQJ9HQ","tlshash":"5a745ca67790f82a07e290ec883f3602f1692955740d8058fb5fccd76b6c95d12b2fb6","size":352036,"data":"","first_seen":"2025-12-19T23:38:39.912524Z","last_seen":"2026-01-05T21:15:16.754144Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.amazon-adsystem.com/aax2/apstag.js","fqdn":"c.amazon-adsystem.com","domain":"amazon-adsystem.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7099d0c144c906961206e41b26b23c05","sha1":"59a67da2d27d4e5fc0e183bb2baeebe39404f553","sha256":"3f19f9cf504b435adb7e62aac1b420facfc0048d6a4950910fd6f126548cc69e","sha512":"c92d4da99978949c6a2d856ee6afd9f61d296e4e0414e6197f600312dc79e2e639755874c2776e9cc80dfe8341ac5210567afdc4d79193f8f750e759d36b700a","ssdeep":"","tlshash":"de31db6d69f10c650061b42b1baba6757726409b2d88fed1fe4c96708f0e05fa1f0bdc","size":1585,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-04-05T13:53:19.365135Z","times_seen":30867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33202f55788c1353f1793b630c04e6cd","sha1":"a05fb815b7046560d9bc97123c52e8cc353c8943","sha256":"499fbbc525043de9b3fc549052d5760b0755c57ecaa593d808d14e295dfa93ad","sha512":"d90592857e3823d32d91a3491177c4d8714c60e2fdf653fb738896f3fc7bc7c6697d4f6b4acdc22d3927d2770ae2773ff9e12337688782ac1293840ec10fdb35","ssdeep":"","tlshash":"b61155f6b71c265d8f792122a42a34cdfa3d843548189e56ec2e9c5cb2d5bf913a1a0c","size":927,"data":"","first_seen":"2023-03-08T15:34:41Z","last_seen":"2026-04-05T07:43:58.566225Z","times_seen":2355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","size":655,"data":"","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-04-05T12:00:51.305808Z","times_seen":10278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/components/activity-refresh-component.059097ebda70e7a1783a.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7805d4ba7f495a5d17df436eb9c7a457","sha1":"f2caa2244a290937fceaa1891a45fc156ca83679","sha256":"d6a4497ca8c0eb952d87d61c29b302d29b3d4c3ed274042da02bda028f08467e","sha512":"ce88f3f1f744006fbec30614f82928e5979b77b311a81079d65020df5b26b257b5bf434acbaf3d63eee078074da449feb8def5103e21ab66dbfae24cdb34499c","ssdeep":"","tlshash":"266123c6e37d663416eea1d8986fb443a01f20958524024e7a6d85e0eccd8ab31c7b7b","size":3325,"data":"","first_seen":"2025-12-20T06:57:30.494423Z","last_seen":"2026-01-06T05:02:17.750988Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b18b401b63f458f4701ba9c8d8da6c55","sha1":"bc03ae229619c863c4718193312a87a069d2a12c","sha256":"8f8625976ab3e06f25aba14f27e2ad1840ca0ea4f4d69ef09aa4091244dac89e","sha512":"c53caae3304d53c56e0f0058c10031e18d4676175bae2e7ce65d5c2d8ea3c4094f3f31f1f64af2fd4d8370e4d10ecc25bd59b3fb4369b2f588bb5945ff013b72","ssdeep":"","tlshash":"679004d53cc330117173c343d555f755d31333441170c0dcd014351c101504341d71d4","size":48,"data":"","first_seen":"2023-03-07T13:44:32Z","last_seen":"2026-04-05T07:43:58.571817Z","times_seen":3353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f70c4de5cc505985d1d3b1591eba32c","sha1":"88941bbf12305c76db9f9bfc0e6c27ab36b12ac7","sha256":"085f8c12d6db1494c38476c72eb2b8d5ad3e9b53a1a83772aad980274106c6b8","sha512":"585a94b8bf5663f53b097c07decbfd55347c6791d748f11820b7aa313cf6a3b66c5bd4911343a160dfe08156bc9a511e59dd6fe9f99ef9b417282d723a506b68","ssdeep":"96:EvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S7:RN0LE0+1lfYsvS8","tlshash":"1091859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bea31418b5893c274a46","size":4237,"data":"","first_seen":"2025-12-23T22:08:50.636194Z","last_seen":"2026-03-22T19:25:53.927856Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5f6fc77eeff45d88d6b8968839f71e","sha1":"8227df4241f330157226c57f4460ca1c4024f963","sha256":"8d7878b78344df2c75fcb56b7c4f940e570d1d2743301adabdd2ff9bc4609a8a","sha512":"fa0260a1bf810df0f63e4034e7cb3561314c816065e72cd6ae6f57f7665bdaf17e77e7bfd08a9f83a17a40d1df11b2d995836656ffd5c251f4a2fbd59f7a788d","ssdeep":"384:VOnAnqGGvxMZ/Pgc11FA3fufwD/NnACOLrPFVAAjTnlelo8EVcz:VOnJUAc13yEGBACADA0Bcz","tlshash":"919274c871e2b0b646e3e4f9517f414bf33a3a5564ada460e029e0e43dbd98dc423f99","size":20664,"data":"","first_seen":"2025-10-17T19:11:39.0764Z","last_seen":"2026-04-05T13:53:19.209816Z","times_seen":2110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=6.9-RC2-61304","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-05T14:49:33.712639Z","times_seen":133189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cw-static.aditude.io/tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z","fqdn":"cw-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"508f305951cba4b4f8ee602768d4d136","sha1":"d25f1791489f11911bcedc2b27116620130b8c87","sha256":"a9672abf801be8d6ba8b9a1063ee861854d1acd78631523328be56f8e437adb5","sha512":"c59e19db1ce1bdf1dc6d3b51a1581f7f00da7063c98d4e7d2c7d23dc93ebb9b839f5793597de87262a24498fc51010b2fe9a17749db8a7e569a218de51450090","ssdeep":"384:Lce0VB3XzlEdEPyTCtYf0LF4fP3/xkCXdzW969cTX/buFUEiXZmlDte4:Lce+3XzloEPyTCyf0LFGP3OCXdzWDTXW","tlshash":"1972098b36e6b03542b144f581f75211a124372938099094fe9d9cab3735eafa632f7e","size":16091,"data":"","first_seen":"2025-03-14T22:45:29.616912Z","last_seen":"2026-04-05T13:53:19.294181Z","times_seen":3665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/rlt-proxy-js-after","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fd103f6e8986eb187cabcd0db243ad0","sha1":"9e025bc9bf73c1c1d695c6fd71e5b3834b0b23f8","sha256":"d6f4488c5c76179f1b1eb3f5300809c07c698f118ff906a4c4efb0aa21840816","sha512":"767d22f5b09b741156c4df8f63d2a8a4ad3138806d9ab19da2add89fa4341266bc56921a2828d67a2ca838d9218ddf97a56e568cbbdae47fd3afd93ad5da6460","ssdeep":"","tlshash":"93e0228fc0880828ceaa0c3220203b23800b8cb3c822c28008aa80bc00b08f022b388f","size":301,"data":"","first_seen":"2025-11-25T05:56:18.577736Z","last_seen":"2026-04-01T20:14:58.896204Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-block-template-skip-link-js-after","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7ced6f9aa0ad845494c387eaa95c5e0","sha1":"68dab8f5963818866e19d29841c6eaafc4e55a40","sha256":"eea9cdb3be9dd4e64f838b66f527e02db6198efa78de5f9f193ef32fe26e5fb7","sha512":"c1c504e530df0b9ed06450dd5d3a7fa1e661d0bbdcf82886a2da64c9be7f4b2a51ed3be52304199ba87e875e052ec062bbc36bd29c415116b6a4b8d3ee777994","ssdeep":"","tlshash":"9b4195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":2305,"data":"","first_seen":"2025-11-30T17:22:27.180465Z","last_seen":"2026-03-14T20:09:36.009875Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/comment-like-js-extra","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1870918091193bdc77cb945966d47120","sha1":"19119b1926798d7253f0b11494aaf5fa7bc0af15","sha256":"5abdfc07dc3da5af6721b80569fd2c50b1199f4f25e09f856d894b7d083a946d","sha512":"e2daf7025a6eb0f8e8b467d48911f87ca29fc5862bfaeee9caa751ca8082329d832c0b97352e97f520b9433340cdb3b854afe16e5be458952d5c74660a778362","ssdeep":"","tlshash":"e52122dbf1cd4806923a69b8282e2066e8198f83c048c14c62de8c1800f0e70607ab30","size":1401,"data":"","first_seen":"2025-12-23T22:08:50.640496Z","last_seen":"2026-03-14T20:09:36.028572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d25ba51d1dce7a746a5ef46c6d1f28c","sha1":"f466c35e824258add3d91004726c02a789989af2","sha256":"ce2ec942827691260ddb514b5ee91d32b0d20e0e344a200c63e715f714c44f27","sha512":"d96859e749541f4e861817357218e4c89baa35db3eb55d5b180f295a655f91309eb360d1d789a7e2362b8635704edc1a9da95d770517c0a1b4023a323589a651","ssdeep":"","tlshash":"def0c0bba86f5d3c857980056c70e07ebe742c152640d402f55cde2a5521f303893b9c","size":547,"data":"","first_seen":"2023-03-07T13:44:32Z","last_seen":"2026-04-05T07:43:58.576916Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","size":9088,"data":"","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-04-05T12:00:51.299301Z","times_seen":8876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-04-05T14:39:33.389955Z","times_seen":124772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=bb6e6065e7950c3459cbcf0dda7b4c6c\u0026modules=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","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ecf101356558bc9933700e769252d0","sha1":"8286b665b9b3c247fb9a30d83f5b8c24c52280b4","sha256":"b0d061ae5109a91ce59fcad76adc8f568202d31468fee789a418a05c93a37017","sha512":"bbdcd1f7f2091e6f6b14d0e7c577627cd78828f9ce141590f1190f5e1fbdaba5b661bed771671ba5a83452148f5f0666fa6cb7407ebcbedde2ebee0117ec3c7f","ssdeep":"6144:YBOk7yDHicCxqh3uooC77BEyzuP320hplpp8JrM2yJZ:2+DCcCxqRupO7BEBP20hpl8hM5Z","tlshash":"53a42b8b33c6f0bb53d714d4d57b4215f2698904340ed060f6296da72826dafa2a3f7e","size":464419,"data":"","first_seen":"2025-12-11T23:36:07.175954Z","last_seen":"2026-01-07T14:12:36.133581Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/jetpack-blocks-assets-base-url-js-before","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"45622e48f3cfbb5566aca95e16e91b13","sha1":"8cdd36e9c4a184f5e4b8ba8d9fe89dcf992c627c","sha256":"89a0014015243a3496b0a9a9492b801d1be29fdd9106bf437751d76ed901c08a","sha512":"0f8373c077606310bdacadc38650ad6126d50411356d825ed9b7af7c5c0017bca436e1ec8f79101bb1d0c3ef2b1ff6c2484a81c5532d8ffab54110ba22992d42","ssdeep":"","tlshash":"46e01256c07d405715d04a700c4595f1c08e9255d516dbd9d657c42820f4a35b5f3f05","size":344,"data":"","first_seen":"2025-12-23T22:08:50.642923Z","last_seen":"2025-12-23T22:08:50.642923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/block-library/navigation/view.min.js?m=1764855221i\u0026ver=1764773747319","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7925406b470915a29246d7b36c17553d","sha1":"26889bf2888d1ef343445a47d9ff13a91bffd5e6","sha256":"7437ed5c45ee57daf02ca09c109ad2e7fb284c55f59cc6b1e966c469ce052bb5","sha512":"d055532ccc358f9808a14962d4aa07d6625a46472104bcf1a0acd335687b97cf1d3ff518c48ba20104d36f9372f8496d31f6c365d70d69173709d54ec0be4918","ssdeep":"","tlshash":"9b51323872747ab5caff578cf334d528b351aec1440b1811bd1816df26aee9281e4f6a","size":2839,"data":"","first_seen":"2025-11-08T10:22:44.086253Z","last_seen":"2026-03-27T23:50:41.069009Z","times_seen":1351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202552924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6815534a2ef2b24c3f36bf31174f8f1","sha1":"0eb7fb2069e76105e01a1f911336c2affcaa4ff8","sha256":"924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1","sha512":"58cfd90d5b457b52cdec76d595341a1b139763507a558c5873a470cf4d82086f504849f6b848f8e05d4dae01e97e694e63312ec8833f0d0ba50c9dc2d5380e58","ssdeep":"384:Wbj95jEUe9Yh47iiTqFt7L/yj8lxwOqTvkSB93aTTBBTYuX:aqYa+iTi7L/S6wOqTvJ3aTTTTJ","tlshash":"cca2a591eb656472011b9bb1c16fe315e24fa905f7e28040ee32f9c9165ecc6f322e2d","size":21838,"data":"","first_seen":"2025-08-28T00:14:25.8978Z","last_seen":"2026-03-22T08:16:22.072811Z","times_seen":8575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??-eJx9jt0OgjAMRl/IUTWg3BgfxewvZNB2C93g9Z0JckGMV833paensCZlI2fPGaiohGUILDD6nLSdtgxSGF6BLZgS0IHVcyzicV/7Fg0FbkY5we+rNhLVSmGYfHUciiNoMA47usbZaSfKohbZYEqwXD+jMYUd+n/m7UG1puo8xMo96XG537q+69v2PL4B7eFnAw==","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8a1caa239b5295308596bf60be3c6fa","sha1":"3803a6aeb5960974c38ec6580da29d080a37e418","sha256":"7486b195b589d30be5ffb573cd9fa9b5ab62ae90fb54009dedb2b6b7f2663703","sha512":"c87648e28e9414e564d33e4905da4c69337950036e8acb6b13082c16d10d6534b9afdc54091e2ddeee7b6686f375718ffccca7c4f37f94943874f0277b91c1f2","ssdeep":"1536:c/F86zwGUJJWdGrsCb41bEFuSqiowBvpmTI1iNC:c/FxcGiWdk4e/","tlshash":"26933994b39c347146d72165543f128a723c2d369805c4a4fd7aece92eb0e9e6263fbc","size":95261,"data":"","first_seen":"2025-12-22T03:45:08.854771Z","last_seen":"2026-01-16T21:46:59.175922Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/blog-plugins/wordads-classes/js/watl-v2.js?m=1760446017i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c771c3a3f2c33d683aaa9dbe8ee3840","sha1":"9ef9b12c01860ff41b8933807462d88ef9643034","sha256":"72c2a30b1753b5a28e178c46dec4181e5e5e40f8e96819583f20e9730f89f0f3","sha512":"bdb745df2269d6072386cb2628d1db7f0407e3561ddca2ac18c33a8c4ec97f06e5900cb1a3fad3d1cb4a032e9f3a3e1c19e51940136b105bbb9546250a7d571b","ssdeep":"1536:Xes8PN0VBHmM5gNP8edMr4cqr8o12ifPXxMtj77vB5kUV3w:49bk7HF5fS","tlshash":"d8233e253386683416fac4ef947b2616b32525113246d4987a7dd8fb2528ecf2077ff8","size":49461,"data":"","first_seen":"2025-10-15T04:07:45.157865Z","last_seen":"2026-04-05T13:53:19.304793Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/jetpack-plugin/sun/_inc/blocks/tiled-gallery/view.js?m=1763409382i\u0026minify=false\u0026ver=15.4-a.6","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0a88bf6b51f817254902de7874201c4","sha1":"a0d9f9002d0d31065425de415ff0888241aa7964","sha256":"eca021055c7a495b79ccbf0592acf864f029ef0c8449c304cbad7a6a9a8af005","sha512":"0fea02a9f78d8fa0eeeaa3eeebaed5f92d7494521b351ce6db36168d4863328b835dd6c7790bd0194367e602b1a367b4872280108d7509b6898c2f2bf7eacbb8","ssdeep":"192:iCbGb9WclSRVYTrXDJRua8JMRZ25uH+9id/Shz26iHpzvrYVYZ:iCbGUNRVY3TJRdvRYS+906hyLjyS","tlshash":"9f3296887251b476035751a3c13f524ff23e9869760b80b8b278d8f62c74989167bfbe","size":10922,"data":"","first_seen":"2025-11-18T04:23:49.706641Z","last_seen":"2026-02-16T06:29:32.649231Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"da78d2448c5444113baadf3abb66b37b","sha1":"9458409f5ff3133487bf51e7d6e480831bfb861b","sha256":"771756b5dd00167d16647b93c1aa331204e9027a138ad0e517348a811e4007d4","sha512":"db5757263692a55b42614caae7b7e07272dee5a03adf8135e7655536230af8d0484e5c050f1f9c73752ae916c8b5176b3c89921e99c5e2f3f89d5a1633a5d6af","ssdeep":"768:MLJb0P2SEDRtMtkiuYDCqXlkro5gNfzG2K1Feq:MJbeCDfpi8UlkM5KfK2K1Feq","tlshash":"22032af8b1a8703183ee91b6903f040bb3365868588e8058bb65d4eb28f594a51f7f79","size":39554,"data":"","first_seen":"2025-12-04T20:07:42.869891Z","last_seen":"2026-03-27T23:50:41.04931Z","times_seen":1126,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-23","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cadmus.script.ac/dy5zgrznaumwk/script.js","fqdn":"cadmus.script.ac","domain":"script.ac","tld":"ac"},"ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"443626e0dae954ac715f87ac998b2302","sha1":"a126eabd384722f7f5bd20fdc686c036c0449f4e","sha256":"eb3cabb14cc880cf3ffc3986d37549ef2a5c1c19d44f28f30860a12815bf9068","sha512":"27ffaea68e862da5e6e767f86471f86f15efacb836b7366789f91620d048a5d89097bcfed7ab74ee95782bcc5f21a466261a382b9471d2e602b2b5fd2628dde6","ssdeep":"6144:MpMJcDdsRA7Dju9NSE+8/U59/8uKXwmlQvmj:qMJc5N7vu9NSE+8/W+w7S","tlshash":"7424f7e02e6970964a6b9532d63b538aa05fd582d89d9940e231fd3c3e7210ff47fa31","size":211569,"data":"","first_seen":"2025-12-23T21:16:36.182234Z","last_seen":"2025-12-23T22:59:00.035941Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"208c95c8810b39d05748063e8de68d67","sha1":"1b4fbb7eed0a5f5e54470f199b8b62f228ab0edf","sha256":"517629f5b38a0cdbd7dfe1e8dc598572cfd0cc658d9fff4bb57a50d0aba421cd","sha512":"037eb84f6130f511b5ec340892a005bb10d598d4ba1904cd53003a6014e78a71b163b05a1de46c42e914d3de30f396de18e9912fbbfb026fdeb6686ad7345cfb","ssdeep":"96:J74+fhu95v3urgXlL92ZUipq9Df6jjLbKuOFgKXZnUikEfmbxzUaK0/CUb/p3TE:tmb+ILuQ5f6vLbnGfmbdtK0/CU7xE","tlshash":"39d185cef78c153a41b03659afab3699353fa071380980b5a58485e43699a5fc336f8d","size":6286,"data":"","first_seen":"2024-11-15T12:13:12.060624Z","last_seen":"2026-04-05T07:25:23.079624Z","times_seen":2495,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/sandbox%20eval%20code","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-04-05T14:56:24.96171Z","times_seen":60393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bffbf7e55194457b147b6683f8a1ed2b","sha1":"628605011087d8ff4f38a470f966e2927ba4a83a","sha256":"baa797800947c3b91895f89e61f3b9e561cb6ac8624d7adb4580e93359f746c0","sha512":"98a2a5cddf5b1d259d8e9d2b8e0b6326aa905e33c50862027cc0bde18ebc533675ab64ae1971f1493ad5575b809bfa21bc8a2c9334fcf60537405c25e4ecae50","ssdeep":"","tlshash":"bda0222800ac2e0033c00c20803a0033820c8802c08f0e00ba008003a03000382b0000","size":62,"data":"","first_seen":"2025-11-18T19:04:29.042779Z","last_seen":"2026-04-05T12:00:51.344505Z","times_seen":2488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","size":12829,"data":"","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-04-05T13:23:48.904173Z","times_seen":14428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/jetpack-plugin/sun/_inc/blocks/tiled-gallery/view.js?m=1763409382i\u0026minify=false\u0026ver=15.4-a.6","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/mu-plugins/jetpack-plugin/sun/_inc/blocks/tiled-gallery/view.js?m=1763409382i\u0026minify=false\u0026ver=15.4-a.6 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Nov 2025 19:56:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"691b7df3-2aaa\"\r\ncontent-encoding: br\r\nexpires: Wed, 23 Dec 2026 12:46:59 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 31.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=4.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10922), with no line terminators","md5":"c0a88bf6b51f817254902de7874201c4","sha1":"a0d9f9002d0d31065425de415ff0888241aa7964","sha256":"eca021055c7a495b79ccbf0592acf864f029ef0c8449c304cbad7a6a9a8af005","sha512":"0fea02a9f78d8fa0eeeaa3eeebaed5f92d7494521b351ce6db36168d4863328b835dd6c7790bd0194367e602b1a367b4872280108d7509b6898c2f2bf7eacbb8","ssdeep":"192:iCbGb9WclSRVYTrXDJRua8JMRZ25uH+9id/Shz26iHpzvrYVYZ:iCbGUNRVY3TJRdvRYS+906hyLjyS","tlshash":"9f3296887251b476035751a3c13f524ff23e9869760b80b8b278d8f62c74989167bfbe","first_seen":"2025-11-18T04:23:49.706641Z","last_seen":"2026-02-16T06:29:32.649231Z","times_seen":112,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??-eJx9jt0OgjAMRl/IUTWg3BgfxewvZNB2C93g9Z0JckGMV833paensCZlI2fPGaiohGUILDD6nLSdtgxSGF6BLZgS0IHVcyzicV/7Fg0FbkY5we+rNhLVSmGYfHUciiNoMA47usbZaSfKohbZYEqwXD+jMYUd+n/m7UG1puo8xMo96XG537q+69v2PL4B7eFnAw==","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /_static/??-eJx9jt0OgjAMRl/IUTWg3BgfxewvZNB2C93g9Z0JckGMV833paensCZlI2fPGaiohGUILDD6nLSdtgxSGF6BLZgS0IHVcyzicV/7Fg0FbkY5we+rNhLVSmGYfHUciiNoMA47usbZaSfKohbZYEqwXD+jMYUd+n/m7UG1puo8xMo96XG537q+69v2PL4B7eFnAw== HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 Dec 2025 04:14:11 GMT\r\netag: W/\"6940dc93-1741d\"\r\ncontent-encoding: br\r\nexpires: Wed, 16 Dec 2026 05:55:23 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24735)","md5":"f8a1caa239b5295308596bf60be3c6fa","sha1":"3803a6aeb5960974c38ec6580da29d080a37e418","sha256":"7486b195b589d30be5ffb573cd9fa9b5ab62ae90fb54009dedb2b6b7f2663703","sha512":"c87648e28e9414e564d33e4905da4c69337950036e8acb6b13082c16d10d6534b9afdc54091e2ddeee7b6686f375718ffccca7c4f37f94943874f0277b91c1f2","ssdeep":"1536:c/F86zwGUJJWdGrsCb41bEFuSqiowBvpmTI1iNC:c/FxcGiWdk4e/","tlshash":"26933994b39c347146d72165543f128a723c2d369805c4a4fd7aece92eb0e9e6263fbc","first_seen":"2025-12-22T03:45:08.854771Z","last_seen":"2026-01-16T21:46:59.175922Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?crypt=UE5XaGUuOTlwaD85flAmcm1mcmZsaDhkV11YdWtpP0NsWnVkPS9sL0ViLndld3BmQkJ1cTI0fG13NT1FWEd1Lm9RJjB4cFN4U2cycXhOLmtoQnNPJUNYYUJFVEFQYlRyaEFBdy05aHhmYzNTUHcuaDBmY2EwLHdSa1l0TUxoNG1JRzJ4STlpZENhZEZbdjJDUj18T1lzWm9%2BZmJRSmVoMGQrSkV6aFBzMjBIZ29GfE1mfnZid2FuP1toUUp4fiV1anZiaDdta3lqX2JuK1owa3wyTDJEcUwlQjlFdnhvMCw4OTdvTUsvMGFqYm9pV1hzOHZmQ2Z3Rng0Nz1vdH5WbjNkRmpNQ2JlSjJwfDBXeTY0c11WSjZka0plJmczbn5RenYyOWZURWI0cjlNSEM%3D\u0026v=wpcom-no-pv\u0026rand=0.13132367424067515","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?crypt=UE5XaGUuOTlwaD85flAmcm1mcmZsaDhkV11YdWtpP0NsWnVkPS9sL0ViLndld3BmQkJ1cTI0fG13NT1FWEd1Lm9RJjB4cFN4U2cycXhOLmtoQnNPJUNYYUJFVEFQYlRyaEFBdy05aHhmYzNTUHcuaDBmY2EwLHdSa1l0TUxoNG1JRzJ4STlpZENhZEZbdjJDUj18T1lzWm9%2BZmJRSmVoMGQrSkV6aFBzMjBIZ29GfE1mfnZid2FuP1toUUp4fiV1anZiaDdta3lqX2JuK1owa3wyTDJEcUwlQjlFdnhvMCw4OTdvTUsvMGFqYm9pV1hzOHZmQ2Z3Rng0Nz1vdH5WbjNkRmpNQ2JlSjJwfDBXeTY0c11WSjZka0plJmczbn5RenYyOWZURWI0cjlNSEM%3D\u0026v=wpcom-no-pv\u0026rand=0.13132367424067515 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-05T14:51:38.197324Z","times_seen":78653,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/jetpack-plugin/sun/modules/related-posts/related-posts.css?m=1753279645i\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/mu-plugins/jetpack-plugin/sun/modules/related-posts/related-posts.css?m=1753279645i\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7495-1753279661027.9893\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:40:17 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1884)","md5":"ae84c6e90a1eeb3c6fb6407a9e42e7cd","sha1":"864736b4024a948b9fe6e3d73ca17495e95af380","sha256":"1a17ca650b49d0b8fe77d7ed68db6a2d67cd5a6765400c6ff428c63504ae6ed3","sha512":"d7a492c1eedeba2f813c62daaec163050c9537ce0469e357ec3c9dab4b49be3fa0b162ec16035d35ec413203a99caafdad55086e08a83e0e6065cb2de18b70da","ssdeep":"48:wEQ22R7a27MLADzDqWJo6UY+ojt5Cxp6qvHGQD/VtLsIm/Sffw:pkuWL+ojaOMT7Nw","tlshash":"75c13377c67499485f17e3f2ddbd89da3d30612a95313cd2af82ea07af8a2c3052c048","first_seen":"2025-08-04T04:49:42.700466Z","last_seen":"2026-02-12T13:29:24.389647Z","times_seen":689,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /_static/??/wp-content/js/rlt-proxy.js,/wp-content/blog-plugins/wordads-classes/js/cmp/v2/cmp-stub.js?m=1720530689j HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 09 Jul 2024 13:11:39 GMT\r\netag: W/\"668d370b-188e\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (839)","md5":"208c95c8810b39d05748063e8de68d67","sha1":"1b4fbb7eed0a5f5e54470f199b8b62f228ab0edf","sha256":"517629f5b38a0cdbd7dfe1e8dc598572cfd0cc658d9fff4bb57a50d0aba421cd","sha512":"037eb84f6130f511b5ec340892a005bb10d598d4ba1904cd53003a6014e78a71b163b05a1de46c42e914d3de30f396de18e9912fbbfb026fdeb6686ad7345cfb","ssdeep":"96:J74+fhu95v3urgXlL92ZUipq9Df6jjLbKuOFgKXZnUikEfmbxzUaK0/CUb/p3TE:tmb+ILuQ5f6vLbnGfmbdtK0/CU7xE","tlshash":"39d185cef78c153a41b03659afab3699353fa071380980b5a58485e43699a5fc336f8d","first_seen":"2024-11-15T12:13:12.060624Z","last_seen":"2026-04-05T07:25:23.079624Z","times_seen":2495,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/40e1d358-e18a-461c-85b7-986c221361b5.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/40e1d358-e18a-461c-85b7-986c221361b5.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 126808\r\nlast-modified: Fri, 19 Dec 2025 22:00:03 GMT\r\nexpires: Sat, 17 Jan 2026 12:11:12 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 28.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=565.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126808,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bc9cff7f5ae6e72947409749510ec2e1","sha1":"467fdee552dc290dcf06ed44f5873600d398fc2f","sha256":"c41e57a1afebde43872f60197d05ec75eeca9a33ecbc074b6fc5e0457f6ad3aa","sha512":"39734fe735d862142f12234c6afaca0b7192c3633913d3747ca1b92f2f8dd5a507d8b7707fdd7130b6e4825a071a3019e91556278ddee342a8e10244dca3e58d","ssdeep":"3072:UkM8Qqhe2f+44rCfbBIA9KPlJypnHjjKt6K9hZjb2iy03dW1rE:W8Hhe2R4efbBzKPlJy1WbT3WO","tlshash":"ecc312206e97d08cef1621afb4f4468370901f7ce89665bda23bfe94f106663e5c61c9","first_seen":"2025-12-23T22:08:50.553179Z","last_seen":"2025-12-23T22:08:50.553179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/raven/wordpress-main-Uv94n/library.js","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:10:16 GMT","end":"Tue, 03 Mar 2026 02:10:13 GMT"},"fingerprint":{"sha1":"DE:A2:88:D2:47:F9:34:C2:72:AD:3A:0F:85:BE:E5:09:4D:EE:24:56","sha256":"0C:5B:82:21:39:7D:DB:63:11:A6:47:AC:69:25:EC:CA:A7:3A:91:D1:42:20:1C:21:8A:0F:85:B2:3C:C5:85:E0"}}},"request":{"raw":"GET /raven/wordpress-main-Uv94n/library.js HTTP/1.1\r\nHost: raven-edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 1392\r\ncache-control: public, max-age=300, stale-while-revalidate=600, stale-if-error=86400\r\ncdn-cache-control: public, max-age=86400, stale-while-revalidate=600\r\ncontent-encoding: br\r\netag: \"10af-8yzto4R5k+8Sp8PjA/rG1i6Td4c\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, accept-encoding\r\nx-dns-prefetch-control: on\r\nx-matched-path: /raven/[propertyId]/library.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fra1::chwcl-1766188619791-26dc6e65d2a5\r\ncf-cache-status: HIT\r\ncf-ray: 9b2b2d4a6883b4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4271,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3856)","md5":"7ac5892314d6f368872ba8f579fd3771","sha1":"f32ceda3847993ef12a7c3e303fac6d62e937787","sha256":"50ce6b68179cfd41c3a56c8f3681656adb7cf5d9eeb999de01de38b985d4ce8b","sha512":"28984c287fe809bbb8147ece05cdf8d3804a0315437d2b2d93966caf94b6e6a14806308a8680aaf517aab2584d55938e6fcff7059bdbb24d337289241c6b5b61","ssdeep":"96:5mtpS8Nkr52CWtP+zl9FsFJio3CY4ytEL2Jl4XfamGC1QIxExokqd+O:AtpFN0q4urmyoUmb1QGEW7","tlshash":"e191841db7a1a4f14bc841db893a6372f33446213248c0ec704eab8b3d57da792a4d7a","first_seen":"2025-12-20T02:52:16.751147Z","last_seen":"2026-01-09T12:10:07.138613Z","times_seen":354,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":28,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/components/activity-refresh-component.059097ebda70e7a1783a.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /components/activity-refresh-component.059097ebda70e7a1783a.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 65267\r\nlast-modified: Fri, 19 Dec 2025 19:54:29 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rViocuRSbbDfjQBNHzskmCx9DFhowCmo\r\nserver: AmazonS3\r\ndate: Tue, 23 Dec 2025 04:00:33 GMT\r\ncache-control: max-age=86400\r\netag: W/\"7805d4ba7f495a5d17df436eb9c7a457\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: t-jPqWl3R0YyIie3S-c4jpDWMfbvDs3MO-4c1g9FGuk5P-yTd21ReA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3325,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1954)","md5":"7805d4ba7f495a5d17df436eb9c7a457","sha1":"f2caa2244a290937fceaa1891a45fc156ca83679","sha256":"d6a4497ca8c0eb952d87d61c29b302d29b3d4c3ed274042da02bda028f08467e","sha512":"ce88f3f1f744006fbec30614f82928e5979b77b311a81079d65020df5b26b257b5bf434acbaf3d63eee078074da449feb8def5103e21ab66dbfae24cdb34499c","ssdeep":"","tlshash":"266123c6e37d663416eea1d8986fb443a01f20958524024e7a6d85e0eccd8ab31c7b7b","first_seen":"2025-12-20T06:57:30.494423Z","last_seen":"2026-01-06T05:02:17.750988Z","times_seen":305,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/1c8ac892-dd24-4feb-95b4-95ad0dac32cf_1_105_c.jpeg?strip=info\u0026w=768","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/1c8ac892-dd24-4feb-95b4-95ad0dac32cf_1_105_c.jpeg?strip=info\u0026w=768 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37406\r\nlast-modified: Fri, 19 Dec 2025 21:39:45 GMT\r\nexpires: Wed, 21 Jan 2026 04:49:48 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 23.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=323.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"80e9ff6203aaa2208c5933fd1f598bb8","sha1":"9e85af47791ed6e6532c4e0c48f69587b58a25fc","sha256":"1d90203c1ddc28d068e30817f0b31c38886e430a77f1cc2ec088ee8bb5f1f7f7","sha512":"ab30a7c181ee12ed08c5094ebb0998c5f4eea6a7440717ccb4396539da4124e10c1d7ed221627e8e0e5b3c3ddcea781fee6daf4a3232804f3ace7db5bd261b5a","ssdeep":"768:DIfF8c3y4Q+MWzrrH1+wGIx5Y1XMHM+nEDYQTE2KN/eu3Ivjvg8wH:Da8qhMWz/YwxMV2ZEv2/HqbwH","tlshash":"96f2f18d4c766c0b45e390f8e3b9ad977a51018af1f5d5ad70fa433b2e21001b2909bf","first_seen":"2025-12-23T22:08:50.557775Z","last_seen":"2025-12-23T22:08:50.557775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/5c4b44b7-90bb-45b5-a3e3-c43c75016af6.jpeg?strip=info\u0026w=666","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/5c4b44b7-90bb-45b5-a3e3-c43c75016af6.jpeg?strip=info\u0026w=666 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37406\r\nlast-modified: Fri, 19 Dec 2025 22:00:02 GMT\r\nexpires: Sat, 17 Jan 2026 12:39:10 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 20.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=327.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 666x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c49f5a0ae97c77bbd88c151c749437dc","sha1":"e6a85691b8744792b085cf5cda17296a48242b21","sha256":"736869466b373037b00492d4e2e6cb03f161a38b128e8a5d08777bdc126df6df","sha512":"5ce37e0dbade6908e40da1ddb405c287b1f02ecbed33723c9a5bfbe611ffbd03c850f198a2d4843c8630feff593cb15946c06909c99f453e344f1fc43789b479","ssdeep":"768:Q6MKiV4xsXjOAkpl4ucJJcKA3zXZXITr4NW/DrqCAy/4fQ6K/ZY:Q6MKDxsXjHkpuuzjJITrYW/fHAq44RW","tlshash":"64f2f18e929a6631a4576ff5d1dbd72128c1d6744c2bcbec8aec468f7d3ace00310e85","first_seen":"2025-12-23T22:08:50.559508Z","last_seen":"2025-12-23T22:08:50.559508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/actionbar/actionbar.js?v=20250204","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.js?v=20250204 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/17401-1738713594313.599\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9088), with no line terminators","md5":"677222cc88ba59934eda57fe1fd7150b","sha1":"586391d9b76186e22f6c492fb5d2a3c518a4e46a","sha256":"58d9276a59e1fb86a5d3edfa8614d1e33534701851b668b88cb57c4e2c8021a7","sha512":"6ac695087cd5cba6fbf6f5e4bcc323a304a90cbce1a59795bcdcfa6dbf1b32471feac5cebca3e4b4e769d64553dde1473b27be6bae453edd2c546824dc8e81c3","ssdeep":"192:VQY3910Vg7pLtvMFO90ypCyliXVmXOlvFwXLlN+FxO1jeR4K35vohbndoLfKwhJZ:VN30Vg7pLtvMFO90ypCyliXVmX2twX5y","tlshash":"a91275da31b4597432ef0ea7abe69b82b6f0459bf48084de147c8c091e6bcc31773695","first_seen":"2025-02-05T14:39:46.721215Z","last_seen":"2026-04-05T12:00:51.299301Z","times_seen":8876,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2022/12/cropped-2ff4d44f-e0f0-43f5-af84-6e595591c1d4_1_201_a.jpeg?w=32","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/cropped-2ff4d44f-e0f0-43f5-af84-6e595591c1d4_1_201_a.jpeg?w=32 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nCookie: ccpa_applies=false; usprivacy=1---\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1934\r\nlast-modified: Thu, 22 Dec 2022 21:11:16 GMT\r\nexpires: Mon, 19 Jan 2026 06:17:26 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 20.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=287.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0ec674ec0a9710b6f79b46fe5470cac","sha1":"9e847d213f30020049514af71e30cbd4416b6015","sha256":"cfeb41765b4f257a2624d7b9e9cd93e3af38e414fb7d96200b1378a13313c8da","sha512":"647fc42d6a5e91a45b443fce615e13b099925532d2b500f5cb88b766151147af0301e59711377736897ba8a54406541e4dc7c0c964502377bedceb9e0c9a0dba","ssdeep":"","tlshash":"d8414a0e5dc3c4188a3190aba4c9847c4ca46af30b3fba4814018fcc25d9e8abe61bd1","first_seen":"2025-12-23T22:08:50.562148Z","last_seen":"2025-12-23T22:08:50.562148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2024/12/ad3f421c-7fd8-46d5-bff7-022b4053ea34.jpeg?w=1024","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/ad3f421c-7fd8-46d5-bff7-022b4053ea34.jpeg?w=1024 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 189692\r\nlast-modified: Mon, 09 Dec 2024 20:44:56 GMT\r\nexpires: Sun, 18 Jan 2026 11:20:55 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 17.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=580.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x682, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f8eab0f8fb7ca019eafc110d70268ca","sha1":"bf9a7e040d7baf235a3d6c7329045a320aea36ec","sha256":"703dd822905a8c3e1b71432e7b4b714fc486e7185f586a217ff99942aedce174","sha512":"d0dc1cec5eb38255f495e1d634e1441dc5bb604e71bfafb7743b40418d01789dc0c4dbfcdeda18732c54acba21d070610649ffdc755026e791fbe677818376c4","ssdeep":"3072:fZcTNC7qUGzmK1XehlzZLgMHw36YM7RCCdhK+rUrUSQac4c9s/x7K839EUNX:BcJzmK1XePpgMZ7RxdqrS6c9e7KY+UNX","tlshash":"bf0412fcdd807c81baceef631029b18687128db795575ab59a87f40c71023746bc8bd9","first_seen":"2025-12-23T22:08:50.564116Z","last_seen":"2025-12-23T22:08:50.564116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?m=1764669441i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?m=1764669441i HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Dec 2025 09:57:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692eb80d-830c\"\r\ncontent-encoding: br\r\nexpires: Wed, 02 Dec 2026 09:58:30 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 18.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33542), with no line terminators","md5":"291fa442589607e5f12eed1f9d250511","sha1":"a91a40a7ff6730b67274f950ee46b059e1d9af32","sha256":"d857655afd7f378dbe04cdfd64313353b71b932d8d6c7fc3c021c09be779a297","sha512":"ac8eacade68d8ef1f70f47031a6327a467eef738dbf43087ad3a73d866a0222a01700c83f89d8bb06e01e2528757aae5daf75a7ccd9ddf1bb0f07f008bd4dcbe","ssdeep":"384:EwEZwAMfifbeH/uY3dA6ac+VVogo3wI87TnKebmlioAdJTPxXkSYwTo9uX0jcym:Ec/fRsI+3IAf/d984XxB","tlshash":"6be28349b695b4e302e3b4b4409f444ab1b75b45b81acad1f315f6c0bc7d84ea0a7f8d","first_seen":"2025-10-25T06:58:40.435374Z","last_seen":"2026-04-05T15:14:49.92718Z","times_seen":26875,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/js/bilmur.min.js?i=17\u0026m=202552","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/js/bilmur.min.js?i=17\u0026m=202552 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 10:41:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69049260-3675\"\r\ncontent-encoding: br\r\nexpires: Tue, 22 Dec 2026 00:00:00 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 29.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13940)","md5":"5fe307f96e76dd8ad03e2c77eb822155","sha1":"df96b32fae3d1780bc1ae1ac6304f4ecf85708ea","sha256":"1ff089b0a8f51cda03e18980b38b46e10a8c1e5aac97f20c35a926a958c5f9ae","sha512":"4105e7d94d5abca8acd1c3424305e6eaed570ddfc622a3f6799bb72aa0d515b9f229e2254ae1c014bfb64bf6cb4b74d4fbd616c6a08d4f0cd60ffb7ec282c789","ssdeep":"384:gIUFa8xXeKmROq3y81T6oFOMT2aMs9TTvf9Wkk:kRcKq1hO7atjpk","tlshash":"2752d7edf641307613d3a1f2517f160b723b7b915c8a9088912eebd12c7898e526bf9c","first_seen":"2025-11-03T01:40:22.079034Z","last_seen":"2026-04-05T14:26:23.003278Z","times_seen":9408,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.com/","fqdn":"cortesexmasletter.com","domain":"cortesexmasletter.com","tld":"com"},"ip":{"addr":"192.0.78.24","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T22:08:17.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 05:46:45 GMT","end":"Sun, 08 Feb 2026 05:46:44 GMT"},"fingerprint":{"sha1":"C0:3A:A3:C3:10:7F:6A:E0:49:8B:42:48:6A:42:80:77:0B:8C:10:53","sha256":"4C:9A:6B:37:9D:63:A6:B8:6C:7A:AB:54:A5:EF:9F:B9:35:36:C6:43:EC:89:B0:A4:0B:DF:C1:1F:2A:8D:B6:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cortesexmasletter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://cortesexmasletter.wordpress.com/\r\nstrict-transport-security: max-age=31536000\r\nvary: Cookie\r\nx-ac: 13.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=120.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214693,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css;charset=utf-8\r\ncontent-length: 432\r\nlast-modified: Fri, 19 May 2023 01:52:23 GMT\r\netag: \"6466d657-1b0\"\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=6.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3f85c8298bd1f63f17efd3b3967e2917","sha1":"8cbe853ab2335ce410d7d7ae5bc19de242f7fbb2","sha256":"77e6916cc1f597af2401037c2cebb3f392dfcd9993d1d4b716644c14c319363b","sha512":"bb9823f4d08eda8af271e8972745dee61b22fb2df65e0471f234f2a3b0e645d08e726710852c4e8fd78815a3334341008ef70f16d9f720094428a4c66a7754a5","ssdeep":"","tlshash":"1ce06d06b546bd85d4ce76ab2c9ed61c3fbc90c66e1e8b157611db7042388c0283a885","first_seen":"2025-09-08T19:08:06.188532Z","last_seen":"2026-04-05T12:00:51.316528Z","times_seen":4314,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??-eJx9TUkOwjAM/BDBlB7ggnhLG7nB4MRR4oD4PQYkKCBxsDSLZwYu2XlJikkhNpe5BUoVvMRokmM6obH6pSxNWQBBEiVL1xd4GrNOPWC0htxGYDoXgapXxp+32XTBkSUYDI/dN/0XCiiOxQ9Kkj6Im3igco/u467bdGu7frU93gC9T1w7\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /_static/??-eJx9TUkOwjAM/BDBlB7ggnhLG7nB4MRR4oD4PQYkKCBxsDSLZwYu2XlJikkhNpe5BUoVvMRokmM6obH6pSxNWQBBEiVL1xd4GrNOPWC0htxGYDoXgapXxp+32XTBkSUYDI/dN/0XCiiOxQ9Kkj6Im3igco/u467bdGu7frU93gC9T1w7\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 03 Apr 2024 19:14:50 GMT\r\netag: W/\"660daaaa-b48b\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:39:42 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=5.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46219,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (25312)","md5":"c513e2c4ccd936e40c952b0c032e517d","sha1":"a7b0cb4edae49bf4bbad79d5219a1e54ead4e5bc","sha256":"47850fc8e28b69921e4db7f8f1243dcbf8644f2c9ded52e8cad125926dd87a53","sha512":"216b31bcb1fe03a3204b3833e2ec587383fbd3be64713af317b3e801f7125d4d0c5726f441377c3fc94b4d0c80856b97f133621822e6c04dc61b67b5665ed5d5","ssdeep":"768:IjL/R9Y+yXJAfC4wqDwQ8WeK+wQBzPgcDJxe9iR3wlNp:IH/R9EZz4wgwQ8kQF63p","tlshash":"bf230bbaa18d06d08725e88c2bd76710178eb42ede8d6cf5d143b69ce3d5e1842d23ed","first_seen":"2025-10-02T16:06:41.018379Z","last_seen":"2026-04-01T23:27:12.287221Z","times_seen":17,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/block-library/navigation/view.min.js?m=1764855221i\u0026ver=1764773747319","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.2.0/build/modules/block-library/navigation/view.min.js?m=1764855221i\u0026ver=1764773747319 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 13:34:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69318dca-b17\"\r\ncontent-encoding: br\r\nexpires: Fri, 04 Dec 2026 15:16:20 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 23.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=108.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2839,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2801)","md5":"7925406b470915a29246d7b36c17553d","sha1":"26889bf2888d1ef343445a47d9ff13a91bffd5e6","sha256":"7437ed5c45ee57daf02ca09c109ad2e7fb284c55f59cc6b1e966c469ce052bb5","sha512":"d055532ccc358f9808a14962d4aa07d6625a46472104bcf1a0acd335687b97cf1d3ff518c48ba20104d36f9372f8496d31f6c365d70d69173709d54ec0be4918","ssdeep":"","tlshash":"9b51323872747ab5caff578cf334d528b351aec1440b1811bd1816df26aee9281e4f6a","first_seen":"2025-11-08T10:22:44.086253Z","last_seen":"2026-03-27T23:50:41.069009Z","times_seen":1351,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":9,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/mu-plugins/gravatar-hovercards/wpgroho.js?m=1610363240i HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/1125-1684465005221.1526\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:11 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 17.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (655), with no line terminators","md5":"5048b7bf6f335c259cae5d653d50726e","sha1":"96f45044f726eef7c8e7c7f21f6368bf23a2b3f0","sha256":"b6e4492d3b8358a81b80908b1f84e6bd2f64a7a46d48793af99d27bf29f4c2e8","sha512":"8990f24d3989c392c00a4fc59d78945a401eb3295fc287a2c718323cc83e27b2d403e9e08162b2cef4f5c944b31d3eee98560acbb7bc4dc58b70b72aa83a4311","ssdeep":"","tlshash":"08f02346b24c383581ff3379b0dfd7817026203cb44d84405a40902d7632e0b60dae6a","first_seen":"2023-05-08T13:17:26Z","last_seen":"2026-04-05T12:00:51.305808Z","times_seen":10278,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-edge.aditude.io/api/v1/ravenconfig?ppid=wordpress-main-Uv94n\u0026geo=NO","fqdn":"raven-edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:10:16 GMT","end":"Tue, 03 Mar 2026 02:10:13 GMT"},"fingerprint":{"sha1":"DE:A2:88:D2:47:F9:34:C2:72:AD:3A:0F:85:BE:E5:09:4D:EE:24:56","sha256":"0C:5B:82:21:39:7D:DB:63:11:A6:47:AC:69:25:EC:CA:A7:3A:91:D1:42:20:1C:21:8A:0F:85:B2:3C:C5:85:E0"}}},"request":{"raw":"GET /api/v1/ravenconfig?ppid=wordpress-main-Uv94n\u0026geo=NO HTTP/1.1\r\nHost: raven-edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\nage: 554\r\ncache-control: public, max-age=120, stale-while-revalidate=240, stale-if-error=3600\r\ncdn-cache-control: public, max-age=300, stale-while-revalidate=240\r\ncontent-encoding: br\r\netag: W/\"3c1-IdnNWFpGWAnJCbAiZr2/AQiNT9w\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, accept-encoding\r\nx-matched-path: /api/v1/ravenconfig\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fra1::k9hd9-1766527699919-d13c9f1f65d7\r\ncf-cache-status: MISS\r\ncf-ray: 9b2b2d4c6ad5b4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":961,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b00681ab5f0cebe630890c79e1694385","sha1":"21d9cd585a465809c909b02266bdbf01088d4fdc","sha256":"0e80b05750af902672cce3cbb4e87bd24e47b01030b7b92ba967ee8c0e8d2861","sha512":"7659520e0aa09fb7801a945b54c45726a1b64b6e2cb1a3a2c3257f364ec2ab90b2ae9ac0e8165471efd3ad70868799999d229d00cb6d68736ae99c36e5435bc6","ssdeep":"","tlshash":"5211d029d59c456cc39cc6ecaa1d6f046b7e153ab8a95a08e7aa0d0856e14e82870717","first_seen":"2025-12-19T23:38:39.895147Z","last_seen":"2026-02-19T07:37:40.31978Z","times_seen":630,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 09:30:18 GMT","end":"Thu, 05 Mar 2026 10:24:52 GMT"},"fingerprint":{"sha1":"45:05:7F:D2:E7:0D:70:81:1B:0E:2D:82:12:17:AF:7D:D1:51:83:61","sha256":"0F:B4:25:84:31:C8:3E:48:C4:5E:20:DF:7F:95:A4:37:69:77:B1:A5:9B:7D:AE:38:F3:1C:9E:AB:9B:05:55:CA"}}},"request":{"raw":"POST /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 626\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":626,"data":"{\"action_name\":\"Events\",\"f\":\"pageview\",\"jstimestamp\":1766527700136,\"elapsed_time\":36,\"action_group_id\":\"10103044-67be-2c0f-78a2-2317d2490dc6\",\"version\":\"4.29.11-aq-8c8d5c4c_d8f1_4863_abd4_cd331d4170a7_p_55\",\"topLocation\":\"https://cortesexmasletter.wordpress.com/\",\"referrer\":\"https://cortesexmasletter.wordpress.com/\",\"jstzoffset\":0,\"custom_fields\":[{\"apiVersionSuffix\":\"8c8d5c4c_d8f1_4863_abd4_cd331d4170a7_p_55\"}],\"s\":\"https://cadmus.script.ac/dy5zgrznaumwk/script.js\",\"bk\":6,\"ia\":0,\"nl\":\"en-US en\",\"ls\":{\"rb\":-1,\"fs\":2071,\"fd\":59,\"vm\":2},\"cid\":\"10103044-67be-2c0f-78a2-2317d2490dc6:TP\",\"tml\":21876,\"details\":\"init | \u003cEF\u003e2\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.0\r\ndate: Tue, 23 Dec 2025 22:08:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-ingestor.judy.pnap.aditude.cloud/v1/","fqdn":"event-ingestor.judy.pnap.aditude.cloud","domain":"aditude.cloud","tld":"cloud"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:23.973Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /v1/ HTTP/1.1\r\nHost: event-ingestor.judy.pnap.aditude.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4869\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":7003,"timings":{"blocked":7003,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/blog-plugins/wordads-classes/js/watl-v2.js?m=1760446017i","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/blog-plugins/wordads-classes/js/watl-v2.js?m=1760446017i HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/49752-1760446025413.992\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:39:32 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 15.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28364)","md5":"6c771c3a3f2c33d683aaa9dbe8ee3840","sha1":"9ef9b12c01860ff41b8933807462d88ef9643034","sha256":"72c2a30b1753b5a28e178c46dec4181e5e5e40f8e96819583f20e9730f89f0f3","sha512":"bdb745df2269d6072386cb2628d1db7f0407e3561ddca2ac18c33a8c4ec97f06e5900cb1a3fad3d1cb4a032e9f3a3e1c19e51940136b105bbb9546250a7d571b","ssdeep":"1536:Xes8PN0VBHmM5gNP8edMr4cqr8o12ifPXxMtj77vB5kUV3w:49bk7HF5fS","tlshash":"d8233e253386683416fac4ef947b2616b32525113246d4987a7dd8fb2528ecf2077ff8","first_seen":"2025-10-15T04:07:45.157865Z","last_seen":"2026-04-05T13:53:19.304793Z","times_seen":351,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /wp-content/blog-plugins/wordads-classes/js/cmp/v2/notice.bundle.js?id=09a90b609879d5cf593b HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: miss\r\netag: W/31075-1760700879912.784\r\ncontent-encoding: br\r\nexpires: Sat, 17 Oct 2026 11:34:50 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 24\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=120.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31058,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31058), with no line terminators","md5":"0796ccb7c5c44ed7b55b54c6dc685cc9","sha1":"715efc61204d1fd090e62ce34f625f317c4e5dc8","sha256":"265b27e3eb4002a6d5873293c7a2e7d2bdd389a8f640eef7764ec860d2b6364d","sha512":"a6c17dc54b394ca21be87999c250b5fd1cb97b8af2e42ac60249e253afa859f9d42ccfa34652124a3979ea353e022ba7b72712e6530aff7dcf86644d775a8f81","ssdeep":"384:d1nr8in05M/RlRfvEE2Emx3C68XRlRcRAG3+V6IQQ3G4uDji2cOVcIQQ3GmE9F:d1r8bgf7mx3C68XfdV6YuDjiCVcB9F","tlshash":"70d2d8f4a040706d96d79748c33ba407f2514fc4eac64863b915b9f8aadb19d183f7a3","first_seen":"2025-10-17T19:11:38.949884Z","last_seen":"2026-04-05T13:53:19.252354Z","times_seen":2110,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=6.9-RC2-61304","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?m=1764078722i\u0026ver=6.9-RC2-61304 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 25 Nov 2025 13:52:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6925b48b-58ea\"\r\ncontent-encoding: br\r\nexpires: Wed, 02 Dec 2026 09:58:25 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 19.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-05T14:49:33.712639Z","times_seen":133189,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/936cf0b4-b973-4cfd-b7a2-f23055dc00c6.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/936cf0b4-b973-4cfd-b7a2-f23055dc00c6.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 320580\r\nlast-modified: Fri, 19 Dec 2025 21:47:17 GMT\r\nexpires: Thu, 22 Jan 2026 07:08:25 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 31.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=562.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":320580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1859, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe990a9638ed69dcbd6db8d2d07e375c","sha1":"c40ac5ed7df1308163c98f617efc4934a0af81a6","sha256":"b74b278388cb94b6e090c0bfdc958ce8991173e80d0362b698c6fe6dd66fc1be","sha512":"a5a043faf6019915f4040cd246029ff6bc771efae5f98740a5cceaff449aa88e94b5999a46a8b788ebb744e941caa34398fe6c711a283d0da93a2d885351277b","ssdeep":"6144:v/FUAbmSMHnUhlQ4sGrC+H20KhlZgxMsdPI8bcV4GnqYV9Vw9byqbbQZ:Xy1HRV/zZgxMAPTbcbV9M2YUZ","tlshash":"10642389016aa1fe3aa1c543b81dbde67668d6b8c500c7a070f5f04ccac7e36f65257d","first_seen":"2025-12-23T22:08:50.576176Z","last_seen":"2025-12-23T22:08:50.576176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/themes/h4/global.css?m=1420737423i\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\ncontent-length: 317\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/471-1684460922208.3726\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=6.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":317,"size_decoded":0,"mime_type":"text/css","magic":"CSV ASCII text","md5":"6134a117c00dc1171f42fd8c35b78e88","sha1":"cac0c7c889ea57043338802e8446e9ec8b78fad3","sha256":"224f43833c9a318a3d885fe2ecb4c5b0794e0617ebfff62ad8d729105929246c","sha512":"11896c7411aad29af74ba3fea6417b527271fcdc29e274006c76a7090e2d2114c9afae024d179e967472d7ed6c614db4975d7e256f5405e9199056e8aa1193e7","ssdeep":"","tlshash":"ebe078534791551c000ff5715cac056522543115f647f1e852b2d6319d4bfcc411770c","first_seen":"2025-02-19T23:14:00.002605Z","last_seen":"2026-04-05T12:00:51.326902Z","times_seen":5551,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.css?ver=202552924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 19:44:01 GMT","end":"Wed, 11 Mar 2026 19:44:00 GMT"},"fingerprint":{"sha1":"CB:34:0E:81:05:DA:71:6A:08:72:91:9D:50:59:C9:0E:4A:64:25:12","sha256":"A7:90:62:A7:12:C2:0D:FF:5E:AD:C2:59:1B:A1:87:D0:CA:F7:0C:75:0E:55:5D:33:B4:95:02:57:C3:90:3B:DD"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.css?ver=202552924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Aug 2025 17:47:56 GMT\r\netag: W/\"68af44cc-1d85\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\ncontent-encoding: br\r\nexpires: Tue, 30 Dec 2025 22:08:18 GMT\r\ncache-control: max-age=604800\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7457)","md5":"76eb82b1efaf3230452da95b7887182f","sha1":"41dbbcbb61c92fd4f313116da3a14f48c2dce4de","sha256":"a3874c1e7d3b8e79b6bb7af0f74051bb75d0e2021e40538740a555f3c247004a","sha512":"2b4d8b97efac710d622abe97615c8646ed08082e12fa40a6fb41b394951a0d9677327929e274cf575fe5d2ecd29181f5daf79377384b85f82c7921a9f6c9c100","ssdeep":"48:AFRV7SZ5pzQhe4MGcYeSAsLEx5+VVLCtJIeCQYH1g2cH7Ay2qcVgENt+Gg1mcSu7:C1SZDcTMGPeeSP3qqc1n6S2f","tlshash":"2df14312df021225501a98b2d899f3aa9354f561d7f34189ff305d1e8b87aeaf360e3d","first_seen":"2025-08-28T00:14:25.895777Z","last_seen":"2026-04-05T12:00:51.304915Z","times_seen":9694,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-api.wordpress.com/geo/","fqdn":"public-api.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.22","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /geo/ HTTP/1.1\r\nHost: public-api.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-ac: 14.arn _dca BYPASS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=119.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d403469d8dba61e844f5797962536b72","sha1":"5814d07711f3b8b17bed2618308006dbef68010f","sha256":"65bc435a0fb8b19fba3a882305f7e69959ae437d66586a46d5b90c3c56fe081a","sha512":"896e14f325c2aa73e4af812ee5a01ab9e66a4f32431aad089f6a43cf8776bfae6beff693e44149cdb9440d7fa88bba608e0d2148a99a1fddfe64adc7f1ce3573","ssdeep":"","tlshash":"e8b0922e1498ee6aac6c93d9176ee1235a2810688299b7c793d6aa05d1cca9402c4b04","first_seen":"2023-05-26T18:09:00Z","last_seen":"2026-04-05T11:18:55.668496Z","times_seen":4457,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":25,"dns":0,"connect":8,"send":0,"wait":127,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_wordads_cmp_view=no_cookie\u0026v=wpcom-no-pv\u0026rand=0.5446942200869199","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?x_wordads_cmp_view=no_cookie\u0026v=wpcom-no-pv\u0026rand=0.5446942200869199 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-05T14:51:38.197324Z","times_seen":78653,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.clean.gg/1a","fqdn":"i.clean.gg","domain":"clean.gg","tld":"gg"},"ip":{"addr":"34.95.69.49","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.clean.gg","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 09:30:18 GMT","end":"Thu, 05 Mar 2026 10:24:52 GMT"},"fingerprint":{"sha1":"45:05:7F:D2:E7:0D:70:81:1B:0E:2D:82:12:17:AF:7D:D1:51:83:61","sha256":"0F:B4:25:84:31:C8:3E:48:C4:5E:20:DF:7F:95:A4:37:69:77:B1:A5:9B:7D:AE:38:F3:1C:9E:AB:9B:05:55:CA"}}},"request":{"raw":"OPTIONS /1a HTTP/1.1\r\nHost: i.clean.gg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.29.0\r\ndate: Tue, 23 Dec 2025 22:08:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key\r\naccess-control-max-age: 1728000\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.29.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":64,"dns":1,"connect":17,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2022/12/cropped-2ff4d44f-e0f0-43f5-af84-6e595591c1d4_1_201_a.jpeg?w=192","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/cropped-2ff4d44f-e0f0-43f5-af84-6e595591c1d4_1_201_a.jpeg?w=192 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nCookie: ccpa_applies=false; usprivacy=1---\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45866\r\nlast-modified: Thu, 22 Dec 2022 21:11:16 GMT\r\nexpires: Thu, 29 Jan 2026 15:25:34 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 20.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=348.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e37fbfbd2cb3e6a392220e1edf737206","sha1":"27bc28e256f90e2d6f63cf2102bb37f51058208d","sha256":"a631a3d6c4efe904f44f9140e12870ca4560528fab57069fb7e50a5ba0270aec","sha512":"00ba78ea795054e5ced06b1e5220df5b6fe191721b876264baad3391a52a736862db832d3904329d22ecf9e494dd610e62b3e88454cbeebefe2b1c1a7628deb8","ssdeep":"768:fJzVClOckPkCYzl28Gu4NEE6B/g+gxxjaqgFWidheSwN5iU9A8F7OE8aDcOBy:lof4kCBhuV/g+OpidhiiyA8YVycOg","tlshash":"f123f1237db8e5e2a33f2444a44240dc01b67a1abe40865a176c0bec7bb65cd75d3b2f","first_seen":"2025-12-23T22:08:50.580712Z","last_seen":"2025-12-23T22:08:50.580712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":357,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2024/12/d9266a2a-f32e-4031-a9e7-785f3778dc1a.jpeg?w=1024","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/d9266a2a-f32e-4031-a9e7-785f3778dc1a.jpeg?w=1024 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16610\r\nlast-modified: Mon, 09 Dec 2024 20:29:32 GMT\r\nexpires: Wed, 21 Jan 2026 19:45:56 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 15.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=353.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x682, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de778ea99621e8bbe77e127c93b0e7e2","sha1":"a3c50464591b7b04d4fd69274b4deb70b3c818a1","sha256":"934eba8e5c6659e9980d1e6e5659210353a1e6a01b10dcee4c7f1c224000edce","sha512":"167cf06c64cd3cb774e987081d2ed7edd74ac55cc1483f31cb1018a088f59efee4bf1d4e10196880e2b8eddea158bd53d3ceae0c0d5ed8707d73fd4ad5194886","ssdeep":"384:pHmjcK1de5jTFvQcgx354emBD0VapMzGjjF8v2mUgOhzvMKL99co2h:tmgMe5Fe35bVqYGfF8vCDbd0","tlshash":"6272d10f1d8652aa1a9aef45fa50174a0df5be43b11800c9fc18ce17d62e96a61d4f3f","first_seen":"2025-12-23T22:08:50.582554Z","last_seen":"2025-12-23T22:08:50.582554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/plugins/gutenberg-core/v22.2.0/build/scripts/dom-ready/index.min.js?m=1764855221i\u0026ver=1764773745533","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.2.0/build/scripts/dom-ready/index.min.js?m=1764855221i\u0026ver=1764773745533 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 13:34:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69318dcf-335\"\r\ncontent-encoding: br\r\nexpires: Fri, 04 Dec 2026 15:16:25 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 27.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (683)","md5":"57b0f521ba8e31a7ad1cb1525515ae0d","sha1":"908e7d2136d84d5c5dcda21934ca94d976e055fc","sha256":"a06281ae5cf5500e931779c5698ffbcafc66381d2535cef5641e1882df32bf69","sha512":"9275110e76e606db55cb66d832fa7dc49e7037de57a3aa7fa25331443366e3419a16499cfd23fa70ad864f72a4ee031286404d87596cecfa693a2e5aa9b104ef","ssdeep":"","tlshash":"a30146671de6ee3145dd4686c13d63c0f628247d2165b0d0a79cc4f8c4e440b00b9e7b","first_seen":"2025-10-23T18:22:15.600785Z","last_seen":"2026-04-05T13:53:19.255045Z","times_seen":1583,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.aditude.io/raven","fqdn":"geo.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"172.66.168.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 05:40:20 GMT","end":"Fri, 06 Feb 2026 06:40:17 GMT"},"fingerprint":{"sha1":"DA:5B:24:4F:C9:38:27:C4:DF:FA:EC:D9:85:4B:88:08:7D:91:31:DC","sha256":"D6:06:8C:A2:A7:88:9C:72:EE:5F:C5:75:EC:DD:C4:05:CF:19:E9:E7:39:01:B9:3D:18:DD:92:6A:ED:F8:3E:BE"}}},"request":{"raw":"GET /raven HTTP/1.1\r\nHost: geo.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, private\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b2b2d4bca185ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3e34bd9ddd44e114ed8b0a1812a80f5e","sha1":"4365617d0f333c4526117b1304cfb38fbe49201a","sha256":"42fb1da33c4ef23ec00e4add927f95054630e968af8a856748d7d765d56e1c37","sha512":"e9b0c2250704d93053c9035394126eb4b85e7dae988e5913ca1ca791a42eb620d2a079c7bbff9201fef12e4ab9833826cd5f20b0d5800df4d237d0db08144a58","ssdeep":"","tlshash":"99d0c22dd004efaca87843589215fb420e9c205a42cdad03d9c99f1192682fd2040002","first_seen":"2025-06-04T20:13:08.842004Z","last_seen":"2026-04-05T13:53:19.252852Z","times_seen":5908,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge.aditude.io/prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=bb6e6065e7950c3459cbcf0dda7b4c6c\u0026modules=WyIzM2Fjcm9zc0JpZEFkYXB0ZXIiLCIzM2Fjcm9zc0lkU3lzdGVtIiwiYWRhZ2lvQmlkQWRhcHRlciIsImFkaXR1ZGUiLCJhZHlvdWxpa2VCaWRBZGFwdGVyIiwiYWxsb3dBY3Rpdml0aWVzIiwiYXBwbmV4dXNCaWRBZGFwdGVyIiwiYXRzQW5hbHl0aWNzQWRhcHRlciIsImNvbnNlbnRNYW5hZ2VtZW50IiwiY29uc2VudE1hbmFnZW1lbnRHcHAiLCJjb25zZW50TWFuYWdlbWVudFVzcCIsImNyaXRlb0lkU3lzdGVtIiwiZW5yaWNobWVudEZwZE1vZHVsZSIsImdkcHJFbmZvcmNlbWVudCIsImdwdFByZUF1Y3Rpb24iLCJncmlkQmlkQWRhcHRlciIsImd1bWd1bUJpZEFkYXB0ZXIiLCJpZDVJZFN5c3RlbSIsImlkZW50aXR5TGlua0lkU3lzdGVtIiwiaXhCaWRBZGFwdGVyIiwibWVkaWFuZXRCaWRBZGFwdGVyIiwibmF0aXZvQmlkQWRhcHRlciIsIm9wZW54QmlkQWRhcHRlciIsInBhaXJJZFN5c3RlbSIsInByZWJpZFNlcnZlckJpZEFkYXB0ZXIiLCJwcmljZUZsb29ycyIsInB1YlByb3ZpZGVkSWRTeXN0ZW0iLCJwdWJtYXRpY0JpZEFkYXB0ZXIiLCJydWJpY29uQmlkQWRhcHRlciIsInNlZWR0YWdCaWRBZGFwdGVyIiwic2hhcmVkSWRTeXN0ZW0iLCJzbWFydGFkc2VydmVyQmlkQWRhcHRlciIsInNvbm9iaUJpZEFkYXB0ZXIiLCJ0cmlwbGVsaWZ0QmlkQWRhcHRlciIsInVuaWZpZWRJZFN5c3RlbSJd","fqdn":"edge.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:10:16 GMT","end":"Tue, 03 Mar 2026 02:10:13 GMT"},"fingerprint":{"sha1":"DE:A2:88:D2:47:F9:34:C2:72:AD:3A:0F:85:BE:E5:09:4D:EE:24:56","sha256":"0C:5B:82:21:39:7D:DB:63:11:A6:47:AC:69:25:EC:CA:A7:3A:91:D1:42:20:1C:21:8A:0F:85:B2:3C:C5:85:E0"}}},"request":{"raw":"GET /prebid/9.19.0.js?var=tudePbjs\u0026fork=1\u0026v=bb6e6065e7950c3459cbcf0dda7b4c6c\u0026modules=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 HTTP/1.1\r\nHost: edge.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nage: 409210\r\ncache-control: public, max-age=2678400\r\ncontent-encoding: br\r\netag: \"71623-goa2Zbmzwkf7mjDYP1uMJMUigLQ\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, accept-encoding\r\nx-matched-path: /prebid/[version]\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cle1::h9djv-1765494312630-977b9cd78022\r\ncf-cache-status: HIT\r\ncf-ray: 9b2b2d4a8897b4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464419,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58587)","md5":"44ecf101356558bc9933700e769252d0","sha1":"8286b665b9b3c247fb9a30d83f5b8c24c52280b4","sha256":"b0d061ae5109a91ce59fcad76adc8f568202d31468fee789a418a05c93a37017","sha512":"bbdcd1f7f2091e6f6b14d0e7c577627cd78828f9ce141590f1190f5e1fbdaba5b661bed771671ba5a83452148f5f0666fa6cb7407ebcbedde2ebee0117ec3c7f","ssdeep":"6144:YBOk7yDHicCxqh3uooC77BEyzuP320hplpp8JrM2yJZ:2+DCcCxqRupO7BEBP20hpl8hM5Z","tlshash":"53a42b8b33c6f0bb53d714d4d57b4215f2698904340ed060f6296da72826dafa2a3f7e","first_seen":"2025-12-11T23:36:07.175954Z","last_seen":"2026-01-07T14:12:36.133581Z","times_seen":317,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":31,"dns":2,"connect":1,"send":0,"wait":6,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/3181ab0a-47b4-4284-a8ba-f9a6fe160c3a.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/3181ab0a-47b4-4284-a8ba-f9a6fe160c3a.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 304964\r\nlast-modified: Fri, 19 Dec 2025 22:00:05 GMT\r\nexpires: Mon, 26 Jan 2026 09:30:38 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 22.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=741.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6355986dad9ae25dbba87cec82b3402","sha1":"bf9ec3933783c3b1c0b6fe30dcc1adbac17f587e","sha256":"554331d1b04563f90ac63a0e8ad7b6b7621b6294eb2905c61bbded4495445828","sha512":"7bb7eb4d8548cd10e8ad436d1b94d5b8e936da47e3aa479fd5b15accbdf106caf13c31bdf53ce3cd82cc609447bd47f0ba55b4219977ae8d417526016aba6458","ssdeep":"6144:vhWg0ScCdRT2qkZ16PMRaMcNd9sYXHFiti+c2G5:QVSZTGZ1s1g8F/B","tlshash":"d0542374f0ca0c9299ff5b70b5d489f9e43a8b4a6de2e67395083f04f4a87821ad9071","first_seen":"2025-12-23T22:08:50.587281Z","last_seen":"2025-12-23T22:08:50.587281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.gravatar.com/js/hovercards/hovercards.min.js?ver=202552924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1","fqdn":"0.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Dec 2025 19:44:01 GMT","end":"Wed, 11 Mar 2026 19:44:00 GMT"},"fingerprint":{"sha1":"CB:34:0E:81:05:DA:71:6A:08:72:91:9D:50:59:C9:0E:4A:64:25:12","sha256":"A7:90:62:A7:12:C2:0D:FF:5E:AD:C2:59:1B:A1:87:D0:CA:F7:0C:75:0E:55:5D:33:B4:95:02:57:C3:90:3B:DD"}}},"request":{"raw":"GET /js/hovercards/hovercards.min.js?ver=202552924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1 HTTP/1.1\r\nHost: 0.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 27 Aug 2025 17:47:56 GMT\r\netag: W/\"68af44cc-554e\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains; preload\r\ncontent-encoding: br\r\nexpires: Tue, 30 Dec 2025 22:08:18 GMT\r\ncache-control: max-age=604800\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 30\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21834), with no line terminators","md5":"e6815534a2ef2b24c3f36bf31174f8f1","sha1":"0eb7fb2069e76105e01a1f911336c2affcaa4ff8","sha256":"924dcd77a86c6f1d3698ec27fc5da92b28585ddad3ee636c0397cf312193b2a1","sha512":"58cfd90d5b457b52cdec76d595341a1b139763507a558c5873a470cf4d82086f504849f6b848f8e05d4dae01e97e694e63312ec8833f0d0ba50c9dc2d5380e58","ssdeep":"384:Wbj95jEUe9Yh47iiTqFt7L/yj8lxwOqTvkSB93aTTBBTYuX:aqYa+iTi7L/S6wOqTvJ3aTTTTJ","tlshash":"cca2a591eb656472011b9bb1c16fe315e24fa905f7e28040ee32f9c9165ecc6f322e2d","first_seen":"2025-08-28T00:14:25.8978Z","last_seen":"2026-03-22T08:16:22.072811Z","times_seen":8575,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/w.js?68","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /w.js?68 HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/12868-1717166113344.7605\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12829,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12829), with no line terminators","md5":"b4969813ea61ddfc4dd217169337d570","sha1":"8158b7de1166fce531fb3d09acd367cbf1b4b91a","sha256":"bbcc769c4704058d89afc024f24dde11deed8ec61b99f1d52ba935fad8614523","sha512":"a62dd8bf95ec546f4383f2cdff2835ee6c318a4a8b5a063f33581a36fb80125069eaa135a15bd2405dc7a4dff97eb156aa80f539c4dd371bffc6ec9486c6ebb3","ssdeep":"192:LXRPSjDWRYtEAU98twdANhSUxiNlTOD2UNFxlGXCpbJX+fCFbAvywybJKbfOas51:SkKn7wd/CFJX+qkbOKrVa","tlshash":"3442a3a9b1a1f07406fb60a9133f630af1768a25785b94d0d369d8e07d7898f4123fbd","first_seen":"2024-06-01T12:24:25Z","last_seen":"2026-04-05T13:23:48.904173Z","times_seen":14428,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":7,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s0.wp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 04 Dec 2025 13:33:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69318dc5-9a82\"\r\ncontent-encoding: br\r\nexpires: Fri, 04 Dec 2026 15:16:20 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 17.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=109.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39515)","md5":"da78d2448c5444113baadf3abb66b37b","sha1":"9458409f5ff3133487bf51e7d6e480831bfb861b","sha256":"771756b5dd00167d16647b93c1aa331204e9027a138ad0e517348a811e4007d4","sha512":"db5757263692a55b42614caae7b7e07272dee5a03adf8135e7655536230af8d0484e5c050f1f9c73752ae916c8b5176b3c89921e99c5e2f3f89d5a1633a5d6af","ssdeep":"768:MLJb0P2SEDRtMtkiuYDCqXlkro5gNfzG2K1Feq:MJbeCDfpi8UlkM5KfK2K1Feq","tlshash":"22032af8b1a8703183ee91b6903f040bb3365868588e8058bb65d4eb28f594a51f7f79","first_seen":"2025-12-04T20:07:42.869891Z","last_seen":"2026-03-27T23:50:41.04931Z","times_seen":1126,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-12-23","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"s0.wp.com/wp-content/plugins/gutenberg-core/v22.2.0/build/modules/interactivity/index.min.js?m=1764855221i\u0026ver=1764773745501","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.910096786591812","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?x_stats-initial-visibility=visible\u0026v=wpcom-no-pv\u0026rand=0.910096786591812 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-05T14:51:38.197324Z","times_seen":78653,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?blog=213607215\u0026v=wpcom\u0026tz=-5\u0026user_id=0\u0026post=2\u0026subd=cortesexmasletter\u0026host=cortesexmasletter.wordpress.com\u0026ref=\u0026rand=0.22181474414111935","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?blog=213607215\u0026v=wpcom\u0026tz=-5\u0026user_id=0\u0026post=2\u0026subd=cortesexmasletter\u0026host=cortesexmasletter.wordpress.com\u0026ref=\u0026rand=0.22181474414111935 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-05T14:51:38.197324Z","times_seen":78653,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cortesexmasletter.com/","fqdn":"www.cortesexmasletter.com","domain":"cortesexmasletter.com","tld":"com"},"ip":{"addr":"192.0.78.24","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T22:08:17.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tls.automattic.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 05:46:45 GMT","end":"Sun, 08 Feb 2026 05:46:44 GMT"},"fingerprint":{"sha1":"C0:3A:A3:C3:10:7F:6A:E0:49:8B:42:48:6A:42:80:77:0B:8C:10:53","sha256":"4C:9A:6B:37:9D:63:A6:B8:6C:7A:AB:54:A5:EF:9F:B9:35:36:C6:43:EC:89:B0:A4:0B:DF:C1:1F:2A:8D:B6:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cortesexmasletter.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:17 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://cortesexmasletter.com/\r\nstrict-transport-security: max-age=31536000\r\nx-ac: 20.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=115.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214693,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":78,"dns":51,"connect":7,"send":0,"wait":122,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/_static/??-eJyNjM0KgzAQBl9I/ag/lR6KjyK6LhJNNsHN4uuXQuvZ4wzD4EwlRcksGcHK5G11otg4p4n2H0NNMDohzD7SrtDTJT4qUi1wexDiYp4VNB3RlP3V/MX3N4T3o++aun892277AK5vOq4=\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /_static/??-eJyNjM0KgzAQBl9I/ag/lR6KjyK6LhJNNsHN4uuXQuvZ4wzD4EwlRcksGcHK5G11otg4p4n2H0NNMDohzD7SrtDTJT4qUi1wexDiYp4VNB3RlP3V/MX3N4T3o++aun892277AK5vOq4=\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 23 Jul 2025 14:07:40 GMT\r\netag: W/\"6880ecac-909f\"\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:10 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 28.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=4.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37023,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15974)","md5":"cacf4246319b2edf1ebce0ac3dc395c6","sha1":"18c7fb37ed0f35d20b0681f5b75ee7f6f32d3a48","sha256":"ab03a4bde8245867684353cbf757d29e825234fe478fbaff983dbb24c2dd200c","sha512":"2ddfefe28a55dc9dd3fe3a8413ffb47238ef66b44cd8060d6f85480067274d7a80b411a9a588945dd32cf43ef9b7bf59a6ddfc0e497e7091626cb246a834fa7b","ssdeep":"768:PbAJTLDEJD8Ke28egAJrCQPOkTFTgT3WTf:TDJD8KWAJuwOk582f","tlshash":"39f28301f3818467da270f281e65dbb8ba6c1d814e474e5ab1e37d5cc7a56f8022ef9c","first_seen":"2025-08-03T17:05:51.867568Z","last_seen":"2026-02-20T21:56:21.732308Z","times_seen":2125,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cw-static.aditude.io/tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z","fqdn":"cw-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:10:16 GMT","end":"Tue, 03 Mar 2026 02:10:13 GMT"},"fingerprint":{"sha1":"DE:A2:88:D2:47:F9:34:C2:72:AD:3A:0F:85:BE:E5:09:4D:EE:24:56","sha256":"0C:5B:82:21:39:7D:DB:63:11:A6:47:AC:69:25:EC:CA:A7:3A:91:D1:42:20:1C:21:8A:0F:85:B2:3C:C5:85:E0"}}},"request":{"raw":"GET /tudeserve/latest.js?b=0.0.72-2024-06-09T22:55:13.730Z HTTP/1.1\r\nHost: cw-static.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:20 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: UFGB6S4Re39R7ICmTFXwT6d1NLWrcHpElac1G8E/Omvfr7TPy553zG6d03p7c67H7aOOV6j/Rhs=\r\nx-amz-request-id: NK83NF1TCNCJ4VP2\r\nlast-modified: Fri, 14 Mar 2025 18:04:44 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 716\r\ncache-control: max-age=60\r\ncf-cache-status: HIT\r\netag: W/\"508f305951cba4b4f8ee602768d4d136\"\r\ncontent-encoding: br\r\ncf-ray: 9b2b2d4f9fdbb4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16091,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16090)","md5":"508f305951cba4b4f8ee602768d4d136","sha1":"d25f1791489f11911bcedc2b27116620130b8c87","sha256":"a9672abf801be8d6ba8b9a1063ee861854d1acd78631523328be56f8e437adb5","sha512":"c59e19db1ce1bdf1dc6d3b51a1581f7f00da7063c98d4e7d2c7d23dc93ebb9b839f5793597de87262a24498fc51010b2fe9a17749db8a7e569a218de51450090","ssdeep":"384:Lce0VB3XzlEdEPyTCtYf0LF4fP3/xkCXdzW969cTX/buFUEiXZmlDte4:Lce+3XzloEPyTCyf0LFGP3OCXdzWDTXW","tlshash":"1972098b36e6b03542b144f581f75211a124372938099094fe9d9cab3735eafa632f7e","first_seen":"2025-03-14T22:45:29.616912Z","last_seen":"2026-04-05T13:53:19.294181Z","times_seen":3665,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/d2e2250e-bcaf-4709-85b9-138928612a41.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/d2e2250e-bcaf-4709-85b9-138928612a41.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 564854\r\nlast-modified: Fri, 19 Dec 2025 22:01:13 GMT\r\nexpires: Sat, 31 Jan 2026 03:45:04 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 29.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=913.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":564854,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93d1290b6ff61481e3c9c8479b25cc4a","sha1":"e649ab70b7968f4574abfedef53592f539f99b76","sha256":"2c4426552b9a24b41dfbe1a22b86a63611212b64e734879aff914b6d286b5937","sha512":"d51521d0b1cd4184e24f69bf3bd15ec622f16a43b161e353bf5500378d5d365c3e469c2ebec99e0ef69ee1655a1dc526a9dd873f2aa2672220307905f012df4f","ssdeep":"12288:DQpzzlJ3k4IzXuKpIV3z4dnA7BTBN2VkpAmjcmxUOp0/E:DWpk4G+2IVj4d4Tf2VgAmvxUOWE","tlshash":"b8c4234c524df6888a8dfbb56d4d6d0da26b147d6d87da412c0cde8aff8781d2c9b0c8","first_seen":"2025-12-23T22:08:50.593847Z","last_seen":"2025-12-23T22:08:50.593847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/themes/pub/livro/assets/fonts/Newsreader.woff2","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /wp-content/themes/pub/livro/assets/fonts/Newsreader.woff2 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 214880\r\nlast-modified: Fri, 19 May 2023 01:54:29 GMT\r\netag: \"6466d6d5-34760\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nexpires: Thu, 15 Oct 2026 05:39:42 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 11.arn _dca MISS\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 32\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=143.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214880,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 214880, version 1.0","md5":"1df447bd829d479e68880a3ded11e8dc","sha1":"6cb0d5589acccb014e2ec2ca3ce1ecf10912954e","sha256":"1faa3380ac0e87e057b180e03fd94bd708a612afb67d2590677be4508909fae9","sha512":"898a403d603eb673d1e1d65ed31f7baabcbc1f4ad5f74ef152ff557e2b924469c8698ea2cb275f5a4851b3b9c7703cbb36816377ee13aa0261916fa02559454c","ssdeep":"6144:clGNBfywb96cPAZSuaDEs2o0TKcd5QIn5:c4XLJPAZPat0Tqu5","tlshash":"bf2423dc630ef1117b051026adef4b7678a52d1827bc7b57a902e497fc3ac257ac688c","first_seen":"2023-04-11T05:34:03Z","last_seen":"2026-04-01T23:27:12.32707Z","times_seen":56,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/newsreader/v20/cY9qfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBCzBDXXD9JVF438wJo_ACexEPjCggA.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /s/newsreader/v20/cY9qfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBCzBDXXD9JVF438wJo_ACexEPjCggA.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42348\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 13 Sep 2023 23:50:08 GMT\r\nage: 324\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 14\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42348, version 1.0","md5":"6142462454a0e45180fd10b9bc352547","sha1":"da8f6d3b354ca5abfc420ac76e5f5742781a6e66","sha256":"4fbef89380b26c75bfa66b14195cd4853dc37eeeb9a6bb084b8de647f877b6aa","sha512":"0fbf21e5ec93c7792f98b15d981b2cb00f09f0f3d9dcfe18b13fbfb320390c20c66e1b7b237946b48de6c7bcb6d3938b1601d6529587b3f5f843c481db9476ff","ssdeep":"768:POvtRb7cZMHN4zYiNYVJOXCwpjYCqL2JkuLOK9AFyr/U4JDyYbB:Pmbfy7aVJOywWTSJhLRAFyrhFxV","tlshash":"9a13f1d0ab21e43ade9e0dfc829810857afa4b7dcb5c9b5413b5f44b75a3c0accd1a16","first_seen":"2025-10-02T16:06:41.072888Z","last_seen":"2026-03-30T02:45:11.531382Z","times_seen":31,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?x_wordads_smart=inline_no_marker\u0026v=wpcom-no-pv\u0026rand=0.8020112993124853","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /g.gif?x_wordads_smart=inline_no_marker\u0026v=wpcom-no-pv\u0026rand=0.8020112993124853 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-04-05T14:51:38.197324Z","times_seen":78653,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/807d2beb-440e-4cd0-bede-cc2976aeb45c.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/807d2beb-440e-4cd0-bede-cc2976aeb45c.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 96592\r\nlast-modified: Fri, 19 Dec 2025 21:47:17 GMT\r\nexpires: Tue, 13 Jan 2026 23:33:15 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 28.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=526.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27a2de4b5ae035449a84ad673abd9570","sha1":"e9c365a62a0248acf0b451385943a3062c941f55","sha256":"7e9e6e73caf70e3720462d9c4d2b34fef2e1d3b818d287da514f3d2099cf00dd","sha512":"6a68def166f5728faed8366aa1e0e19004d6614719941c53ad17cf12e8dc131192c6a66785c34dbc90100b7ddb7b209debf2fcfb5af493dc2b4ccee117539587","ssdeep":"1536:A7u/uJ11/bC/Av0C8Hui6saLcoCJuz9wkBzbQfmnCyQ/Tz37aBFAa9CG8Zx1/Z7:cu2HNbCIvtiJVOtVbPn23o6a9Z8XP","tlshash":"78930261099c6df2ded29db8f3a6a12342d5815029f821dcea41fbf6393747cc9d460d","first_seen":"2025-12-23T22:08:50.597173Z","last_seen":"2025-12-23T22:08:50.597173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/plugins/gutenberg-core/v22.2.0/build/styles/block-library/navigation/style.css?m=1764855221i\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.2.0/build/styles/block-library/navigation/style.css?m=1764855221i\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/16879-1764855237603.421\r\ncontent-encoding: br\r\nexpires: Fri, 04 Dec 2026 15:16:25 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 25.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=3.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16879), with no line terminators","md5":"10072a79072f8339a6b1d9b47d881aed","sha1":"c153febb472107f4b3593992efd38365e681ef97","sha256":"cc057632f816740734baf16f90e5d2a8c02ced54dbf80887d29cb3920471db48","sha512":"b98b55594d8938074feebab8da8f926794c63b1df6d7a5d1b80dcb22861a23f7ef323e2d91e55f3e90793b37c9f7ae56af500d9e372de3d7e5475f3dbe98f228","ssdeep":"384:OsFyo7lc9g7jiUsA5eyH9iXt/UYv/kx6y/:OsFyo7lc9g7jiUsA5eyH9i9/UYv/kxT/","tlshash":"077290d05bb49cf4a9bb933b6e4490184633e902c5097bd5a0f3e694b68cb545be3f0b","first_seen":"2025-10-30T21:41:44.182333Z","last_seen":"2026-03-29T18:43:12.055778Z","times_seen":616,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/newsreader/v20/cY9qfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBCzBDXXD9JVF438weI_ACexEPjCggA.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /s/newsreader/v20/cY9qfjOCX1hbuyalUrK49dLac06G1ZGsZBtoBCzBDXXD9JVF438weI_ACexEPjCggA.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41344\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nage: 494822\r\nlast-modified: Wed, 13 Sep 2023 23:46:51 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 14\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41344, version 1.0","md5":"caed35891a59b2e972e6536acf36c07c","sha1":"4f769a2cde5e7f6a081f749d06ba1a91f481ab76","sha256":"5a818567544f049217314eb6df3e0eaae0eb9778e321c7fe9755b44c1c9cfcb2","sha512":"c2bf46b33b4973ef3e725d17b4c73da1301f2077f124ad55a5778273d01cd55fa79e65ce1e33742ae42025498aea17da6c18a03580ce231aa2b78c6d3e1f9e96","ssdeep":"768:3zbkqxrFxEB6sFfdytDEP+f3WW7WCJFYGIFvg5aE+so5bxdekOHI0J:jAq9FyBPdh+/N7WAnIF8aESxdekOo0J","tlshash":"9703128962965c18ecefaf773c61315d857cf62168b7c8c8ca2610df3c9b4b1d514da1","first_seen":"2024-10-04T10:59:04.457524Z","last_seen":"2026-04-04T19:30:51.963532Z","times_seen":116,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-23T22:08:17.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-hacker: Want root?  Visit join.a8c.com/hacker and mention this header.\r\nhost-header: WordPress.com\r\nvary: Accept-Encoding, accept, content-type, cookie\r\nlink: \u003chttps://wp.me/PesgZF-2\u003e; rel=shortlink\r\ncontent-encoding: br\r\nx-ac: 12.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=310.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress.com","description":"WordPress.com is a platform for self-publishing that is popular for blogging and other works.","website":"https://wordpress.com","common_platform_enumeration":"","icon":"WordPress.svg","categories":["PaaS"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":214693,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (23267)","md5":"10adc579b72b31d5b6a629ad64b399b2","sha1":"0a84cc4476c0d39ca4e958e457e8aabfda9258b0","sha256":"b7dcb5ea62e3955df647fc99398370b115c27ec4f9aeeedfa9c2fc4096612d68","sha512":"830446879c93b49cbacc3e1825438c7f2711ce9d90986a90ed48a18e6cddee4f1726c985346d29fcdd738f0dd40ce7857b2eaefd2b7fedc060496cc3d9fc0a67","ssdeep":"3072:2odU59hYieQjSZPp64wvSAIeTVEUdvecr3XR0AYMqk6fsUvHav:2odlQjSZPp64wvSAIeTVEKZqE","tlshash":"6724e772a2ba4ab51a6e7396f44437d4e047d337878487faf49ac06c06c0df96c27a5c","first_seen":"2025-12-23T22:08:50.600435Z","last_seen":"2025-12-23T22:08:50.600435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":45,"dns":18,"connect":7,"send":0,"wait":317,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s0.wp.com/wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485","fqdn":"s0.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Dec 2025 19:44:46 GMT","end":"Wed, 04 Mar 2026 19:44:45 GMT"},"fingerprint":{"sha1":"27:15:6B:56:D5:57:D8:9D:BB:24:1A:00:42:B9:FF:7B:FB:85:BB:C7","sha256":"30:10:00:03:5C:E3:9D:A7:31:82:FD:6C:3D:2C:DA:83:28:7A:23:1D:63:EE:03:7A:3A:67:6B:B8:94:7D:16:FC"}}},"request":{"raw":"GET /wp-content/blog-plugins/wordads-classes/js/cmp/v2/app.bundle.js?id=46d60d7bb2d22e26f485 HTTP/1.1\r\nHost: s0.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/20802-1760700880101.402\r\ncontent-encoding: br\r\nexpires: Sat, 17 Oct 2026 11:34:50 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca MISS\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 24\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=118.0, a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20664,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20664), with no line terminators","md5":"af5f6fc77eeff45d88d6b8968839f71e","sha1":"8227df4241f330157226c57f4460ca1c4024f963","sha256":"8d7878b78344df2c75fcb56b7c4f940e570d1d2743301adabdd2ff9bc4609a8a","sha512":"fa0260a1bf810df0f63e4034e7cb3561314c816065e72cd6ae6f57f7665bdaf17e77e7bfd08a9f83a17a40d1df11b2d995836656ffd5c251f4a2fbd59f7a788d","ssdeep":"384:VOnAnqGGvxMZ/Pgc11FA3fufwD/NnACOLrPFVAAjTnlelo8EVcz:VOnJUAc13yEGBACADA0Bcz","tlshash":"919274c871e2b0b646e3e4f9517f414bf33a3a5564ada460e029e0e43dbd98dc423f99","first_seen":"2025-10-17T19:11:39.0764Z","last_seen":"2026-04-05T13:53:19.209816Z","times_seen":2110,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/mu-plugins/actionbar/actionbar.css?v=20250116","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/mu-plugins/actionbar/actionbar.css?v=20250116 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/18776-1750255843681.0737\r\ncontent-encoding: br\r\nexpires: Thu, 15 Oct 2026 05:38:12 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16012,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4069)","md5":"081b8dc6366ecbed4540e2095032527f","sha1":"7876286288d2add1e689c9577bf3702aa4a9999e","sha256":"e0149c0e2f0d8a3a537e61c08556fa18e30d249cc6c56e84c5b80f7adeb0fcdb","sha512":"6453382e84605235938f8cce58a0ff986018d7bc59e6d317f681166beabe5a2701db69d3d91b048a7ddb4246f6b8dc63e4e18f05ab5bf266f7b247ef039f23c3","ssdeep":"384:/eZ+AggqgWYwdqJWJ0KI3h3r3pRuYOHg8X1:/ep7kc3c","tlshash":"4a72cad173a23839f62bce53e7c1bd9a903d6a01a4639dddb8725408afb18c64f1b604","first_seen":"2025-09-11T07:13:10.091435Z","last_seen":"2026-04-05T12:00:51.326009Z","times_seen":8363,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /wordpress-2Pvwql52OT/wordpress-longform/prebid-wrapper.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 19:54:29 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: U9PTWWXfQTsysmJhwuFL86fUFx477czB\r\nserver: AmazonS3\r\ndate: Tue, 23 Dec 2025 21:40:45 GMT\r\ncache-control: max-age=3600\r\netag: W/\"6a02d4c6b6c5543773d57e5afa292067\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 66ZjmdtoXVwadwK0avh_B_Qwv7PDNw7dpS4FTm33koUoBvZFD5qW0w==\r\nage: 1655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":352036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65337)","md5":"6a02d4c6b6c5543773d57e5afa292067","sha1":"fd3d6473a32f87d10ac8ac0b27bed7809fe3b610","sha256":"81af223837ecf5610240c4c6c2b489ac5b2afcf21288add3e5492b9da9b3ddf5","sha512":"78d6feeb7547b517a9553648c5caccf99f91a6451efe6b199e194c4a9c52c041572000f1eca6663a9044fdcf890d60867c7452d3f234c492744b4c0d4f5a1894","ssdeep":"6144:bhpPzxI1dHx8wexY1TvzdYIoQtvjcQHi5:d41RdYnQJ9HQ","tlshash":"5a745ca67790f82a07e290ec883f3602f1692955740d8058fb5fccd76b6c95d12b2fb6","first_seen":"2025-12-19T23:38:39.912524Z","last_seen":"2026-01-05T21:15:16.754144Z","times_seen":280,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cadmus.script.ac/dy5zgrznaumwk/script.js","fqdn":"cadmus.script.ac","domain":"script.ac","tld":"ac"},"ip":{"addr":"172.64.146.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.ac","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Dec 2025 11:15:16 GMT","end":"Fri, 06 Mar 2026 11:15:15 GMT"},"fingerprint":{"sha1":"AA:BF:04:38:92:1B:9D:1F:36:4A:35:4D:44:A7:70:0C:1B:B5:9D:C2","sha256":"8B:12:F4:BA:16:86:06:9E:8F:2F:95:37:C2:79:6E:03:D7:46:FD:05:AD:61:70:3B:5F:DC:0B:98:4E:CF:F1:CF"}}},"request":{"raw":"GET /dy5zgrznaumwk/script.js HTTP/1.1\r\nHost: cadmus.script.ac\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: public,max-age=600,stale-while-revalidate=3600,stale-if-error=86400\r\netag: W/\"2126624069ba61a388be31019201249856c22fc4\"\r\nlast-modified: Tue, 23 Dec 2025 20:47:22 GMT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b2b2d4a783e56bf-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"443626e0dae954ac715f87ac998b2302","sha1":"a126eabd384722f7f5bd20fdc686c036c0449f4e","sha256":"eb3cabb14cc880cf3ffc3986d37549ef2a5c1c19d44f28f30860a12815bf9068","sha512":"27ffaea68e862da5e6e767f86471f86f15efacb836b7366789f91620d048a5d89097bcfed7ab74ee95782bcc5f21a466261a382b9471d2e602b2b5fd2628dde6","ssdeep":"6144:MpMJcDdsRA7Dju9NSE+8/U59/8uKXwmlQvmj:qMJc5N7vu9NSE+8/W+w7S","tlshash":"7424f7e02e6970964a6b9532d63b538aa05fd582d89d9940e231fd3c3e7210ff47fa31","first_seen":"2025-12-23T21:16:36.182234Z","last_seen":"2025-12-23T22:59:00.035941Z","times_seen":82,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":14,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-location.prebid.cloud/v1/geo","fqdn":"geo-location.prebid.cloud","domain":"prebid.cloud","tld":"cloud"},"ip":{"addr":"18.165.122.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geo-location.prebid.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C1:4E:4F:A9:ED:22:86:71:8A:71:C7:D1:88:A7:A9:B4:5E:5A:69:7A","sha256":"8A:80:C3:25:04:BF:57:AF:C8:E0:71:BB:1A:F3:D5:01:1A:61:26:CC:64:B4:1A:A1:38:1C:C7:DB:26:9C:4E:71"}}},"request":{"raw":"GET /v1/geo HTTP/1.1\r\nHost: geo-location.prebid.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 84\r\ndate: Tue, 23 Dec 2025 04:08:22 GMT\r\nx-amz-apigw-id: WBhUiFFbIAMEWNQ=\r\nx-amzn-requestid: 021a3dc3-dfea-40ec-9384-e127b87a7c48\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4737976a27f5e96a307bca1f8a140466.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: S3iiS0ufuus0uDUPGXKEsibJdNrGUcpI8OoEugwOAWHPlhptqMUTUQ==\r\nage: 64798\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"30a3d7f6d4e90637dfe0846efb738e06","sha1":"739ddb46b583643440036620000f4e40d467f19c","sha256":"ee1d34d809fce756d0f9ef4448c85644916e1f9694c9998a934078ce90b98c6e","sha512":"e3999aa7b9c9041250f8759b69684b31cba82d176b003c9a439d75865ff6e6452174c0452831de33175690a23087773a78231870e60a780c210d3f2759c4379c","ssdeep":"","tlshash":"0ea01128b0280ea288f0230c222ac00308ab2f0a2382308283830f282b8c83320e200c","first_seen":"2025-12-19T20:54:37.382871Z","last_seen":"2026-01-20T02:20:59.901118Z","times_seen":490,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":34,"dns":1,"connect":13,"send":0,"wait":15,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/plugins/gutenberg-core/v22.2.0/build/styles/block-library/gallery/style.css?m=1764855221i\u0026cssminify=yes","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/plugins/gutenberg-core/v22.2.0/build/styles/block-library/gallery/style.css?m=1764855221i\u0026cssminify=yes HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: miss\r\netag: W/16120-1764855250000.737\r\ncontent-encoding: br\r\nexpires: Fri, 04 Dec 2026 15:16:29 GMT\r\ncache-control: max-age=31536000\r\nx-ac: 22.arn _dca HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16120,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16120), with no line terminators","md5":"8d8d42cc5b54c0bfa75a804a3008b5cd","sha1":"1a67ea48e513374e673da9b95d8e76a6ab25b405","sha256":"a860a9e2a414d13697f344fcbbd6f00a64a9bcb34eac4b8dbe104e00aee2b5b4","sha512":"6d5d124186c4d7e749969e17535c034adf1f1ffc51fc6ab184c71a7883ab8b85465d885c57ab9862eaeb24b4ec173a72868e342dcaee7458fbb926db20c4415a","ssdeep":"96:Ajflk9Kcqmaw85R3HD2IJkk5vAVFjESCpPyydvpO7nurqg/:Ajfj5h1g4SCpPDdBO7tq","tlshash":"6b729f3c5ab9befb1ef6a39cfc8fb07655813941676bc3f6e109c154a08c54608b168e","first_seen":"2025-12-03T04:32:48.583242Z","last_seen":"2026-04-05T01:51:57.918594Z","times_seen":367,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2025/12/900e386f-5a39-47b7-9e71-605876877683.jpg?strip=info\u0026w=1500","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/900e386f-5a39-47b7-9e71-605876877683.jpg?strip=info\u0026w=1500 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 492110\r\nlast-modified: Fri, 19 Dec 2025 22:00:05 GMT\r\nexpires: Tue, 27 Jan 2026 04:03:46 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 29.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=1270.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":492110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x2000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4122aa2ca99a624c70f0f8db54c7c61a","sha1":"8e8dba6d2112b219e8918ee9a303722e27793a80","sha256":"8de508ec07087e0143aba6bcfb4e8a50bbe3568a88d3a579268f9092dc6e8cfc","sha512":"cc2cfba9f03da5b751ad6b30b68bc1a653d68c954cd7d5d3e5400087774326de2979cd2879798b8e407422421e0880493a0d428b0fb65df7c005f7b0f2615573","ssdeep":"12288:fxSjvotx+HFv3ETkJyDWWDsIVz05BJXZcDy:8jvo+lv3LJyDTDV8BJZmy","tlshash":"a8a4237356930edbc4d8390621f9eeba4e8512a14cd945a99fa4acc130253bbdfd04bf","first_seen":"2025-12-23T22:08:50.60681Z","last_seen":"2025-12-23T22:08:50.60681Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1425,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cortesexmasletter.wordpress.com/wp-content/uploads/2024/12/ad117041-f8f4-4a03-b1de-35b5ece2e6b1.jpeg?w=768","fqdn":"cortesexmasletter.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:18.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Nov 2025 19:45:19 GMT","end":"Fri, 06 Feb 2026 19:45:18 GMT"},"fingerprint":{"sha1":"B9:6F:01:5F:99:CD:B6:9B:78:19:26:39:73:B2:4A:94:61:79:DA:B4","sha256":"B5:F9:8D:E6:7B:0A:81:FD:65:EE:C0:66:37:D1:B9:DD:4B:E4:F1:FC:EC:F9:A5:08:2C:B3:0E:50:61:55:C5:9C"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/ad117041-f8f4-4a03-b1de-35b5ece2e6b1.jpeg?w=768 HTTP/1.1\r\nHost: cortesexmasletter.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Tue, 23 Dec 2025 22:08:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 187250\r\nlast-modified: Mon, 09 Dec 2024 20:42:59 GMT\r\nexpires: Wed, 28 Jan 2026 08:52:13 GMT\r\nx-orig-src: 0_imageresize\r\nvary: Accept\r\naccept-ranges: bytes\r\nx-ac: 32.arn _dca MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=391.0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":187250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f351d0d6bc94e869fec380f26e19e9a","sha1":"8ac357bb18879fa15e4b3229e45b90b8d06f5af6","sha256":"e74f1992a1980380c0540b21c7b52e21b2b1b20d64bd8dc5c1d7bf566bb02f21","sha512":"7538602e6ea1d6eb5f2c7d46d2904eca0df6fc77e6c49c24bc755f0f700a1af0aa2ca2010860fd8a44cc4346187831a5065abbe0323e388f849c483ae0deb8aa","ssdeep":"3072:Yr4TYwDXSgUWOLMpGml3AKDVS66s1mPgnVRBrlEdOx4uwG5Mn+nPze:IBgBhppFAUS6M+VlEpkFnbe","tlshash":"580412855dd28950d177bca86f4159381fc7eb21b8ad7d023ac29ce426e293144abff3","first_seen":"2025-12-23T22:08:50.608338Z","last_seen":"2025-12-23T22:08:50.608338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dn0qt3r0xannq.cloudfront.net/wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js","fqdn":"dn0qt3r0xannq.cloudfront.net","domain":"dn0qt3r0xannq.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"52.84.50.72","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /wordpress-2Pvwql52OT/wordpress-longform/prebid-load.js HTTP/1.1\r\nHost: dn0qt3r0xannq.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Dec 2025 19:54:29 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1H0mm7HmG04z7g9fCiKHgH6VyZFFAl9O\r\nserver: AmazonS3\r\ndate: Tue, 23 Dec 2025 21:58:04 GMT\r\ncache-control: max-age=3600\r\netag: W/\"e89da31feb124bdc878b5edd17a0a549\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: FdTlkBp3l8eiWR-qhAIPiYr2WBw-axEbNcU0ehVK_3avwciUGAHhdw==\r\nage: 616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":33772,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33575)","md5":"e89da31feb124bdc878b5edd17a0a549","sha1":"84ff9fdf1a71bf4cc884020dd3ae22990b99518d","sha256":"245873a633902456efdbac235052f2f826be7cc8f02996badf4136dd7085684e","sha512":"85397733e280e4134134955878a526de3f1496065fd6ce71c5998fac201e19bb86a46ee449c935cdcac280383f9f09107d4e1fead6829f54142d60569145ac01","ssdeep":"384:uAwweWMfva1P6lXaCjc/tAp3Mprh8yayDgXf27QHP3BemiAEljRKXB0Phlf/hhEq:u1WeEcXayeSpnJtXtP3BCRKy5lf/h2mR","tlshash":"a7e208973765f06203eb50fda03f1106f371d669581d843cf288aceb256e64a92a7f36","first_seen":"2025-12-19T23:38:39.894089Z","last_seen":"2026-01-05T21:15:16.724612Z","times_seen":280,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":13,"dns":9,"connect":1,"send":0,"wait":1,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raven-static.aditude.io/prod/1.16.0-sj05vn/raven.js","fqdn":"raven-static.aditude.io","domain":"aditude.io","tld":"io"},"ip":{"addr":"104.20.42.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:19.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aditude.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 01:10:16 GMT","end":"Tue, 03 Mar 2026 02:10:13 GMT"},"fingerprint":{"sha1":"DE:A2:88:D2:47:F9:34:C2:72:AD:3A:0F:85:BE:E5:09:4D:EE:24:56","sha256":"0C:5B:82:21:39:7D:DB:63:11:A6:47:AC:69:25:EC:CA:A7:3A:91:D1:42:20:1C:21:8A:0F:85:B2:3C:C5:85:E0"}}},"request":{"raw":"GET /prod/1.16.0-sj05vn/raven.js HTTP/1.1\r\nHost: raven-static.aditude.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Dec 2025 22:08:19 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: Hiv1hztCAnEXa2EbkZPPgcmHPyO68+3kKYMr22VD9udk1JD1PvxiAHCSgY7cdTnPq+XnbDl+z1Lt4oVYpkHAADRA75FS1egE\r\nx-amz-request-id: A5HSHF3AXB4NJ2RM\r\nlast-modified: Fri, 19 Dec 2025 20:07:25 GMT\r\nx-amz-server-side-encryption: AES256\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 3350\r\ncache-control: max-age=604800\r\ncf-cache-status: HIT\r\netag: W/\"67551faa60cad1cd2f1a4bc55c8623c3\"\r\ncontent-encoding: br\r\ncf-ray: 9b2b2d4b093eb4f7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":119542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65415)","md5":"67551faa60cad1cd2f1a4bc55c8623c3","sha1":"76f1050f843ff6b985e77f17ea5c9e11e1997f63","sha256":"b5b48a3da14551137ab07a9ad13f97e86970887764a63271d79cfed1f951323a","sha512":"35b297267fd79fa7072b8df13c5d8a637bac71297c9dc70dff139bbefd00fe5c92573e81023facbb359ffccc3e52c0174ea7aec6da6e2cfe913b7672b02e9d1f","ssdeep":"1536:X/PVdbKt+nbTWCv4q50bKNdFQuvFPLKB0VXfWcFnQik8qWRrEFrwv2MD1Xfrx3TU:NvWrWWcxDzqDs20Tu3HqE6LS","tlshash":"2cc33ac6b2cab57d83d955d0c0345105f33649aa780dc0b4f3a86ce3356ad8b62b6f3a","first_seen":"2025-12-20T02:52:16.742676Z","last_seen":"2026-01-14T15:29:10.117384Z","times_seen":427,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo-location.prebid.cloud/v1/geo","fqdn":"geo-location.prebid.cloud","domain":"prebid.cloud","tld":"cloud"},"ip":{"addr":"18.165.122.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cortesexmasletter.wordpress.com/","date":"2025-12-23T22:08:20.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geo-location.prebid.cloud","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 29 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C1:4E:4F:A9:ED:22:86:71:8A:71:C7:D1:88:A7:A9:B4:5E:5A:69:7A","sha256":"8A:80:C3:25:04:BF:57:AF:C8:E0:71:BB:1A:F3:D5:01:1A:61:26:CC:64:B4:1A:A1:38:1C:C7:DB:26:9C:4E:71"}}},"request":{"raw":"GET /v1/geo HTTP/1.1\r\nHost: geo-location.prebid.cloud\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cortesexmasletter.wordpress.com/\r\nOrigin: https://cortesexmasletter.wordpress.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 84\r\ndate: Tue, 23 Dec 2025 04:08:22 GMT\r\nx-amz-apigw-id: WBhUiFFbIAMEWNQ=\r\nx-amzn-requestid: 021a3dc3-dfea-40ec-9384-e127b87a7c48\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4737976a27f5e96a307bca1f8a140466.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Faqpr1r0SRVjyRWiohYG9MxEi3LmfiaOYa1YuF-VGngkEvKklt_aUg==\r\nage: 64798\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"30a3d7f6d4e90637dfe0846efb738e06","sha1":"739ddb46b583643440036620000f4e40d467f19c","sha256":"ee1d34d809fce756d0f9ef4448c85644916e1f9694c9998a934078ce90b98c6e","sha512":"e3999aa7b9c9041250f8759b69684b31cba82d176b003c9a439d75865ff6e6452174c0452831de33175690a23087773a78231870e60a780c210d3f2759c4379c","ssdeep":"","tlshash":"0ea01128b0280ea288f0230c222ac00308ab2f0a2382308283830f282b8c83320e200c","first_seen":"2025-12-19T20:54:37.382871Z","last_seen":"2026-01-20T02:20:59.901118Z","times_seen":490,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}