======================================================================
MEXICO HASH COLLECTION - SOURCE DOCUMENTATION
======================================================================
Generated: 2026-01-15 16:43

======================================================================
WHAT ARE THESE HASHES?
======================================================================

These are GRAVATAR HASHES - cryptographic hashes of email addresses
exposed through WordPress websites.

Gravatar (Globally Recognized Avatar) is a service that provides
profile pictures based on email addresses. When a user registers on
a WordPress site, their email is hashed and used to fetch their
Gravatar profile image.

HASH TYPES:
  - MD5 (32 characters):    1,479 hashes
  - SHA256 (64 characters): 3,489 hashes
  - TOTAL:                  4,968 hashes

======================================================================
HOW WERE THEY COLLECTED?
======================================================================

WordPress exposes user data via its REST API at:
  /wp-json/wp/v2/users

This endpoint returns JSON containing:
  - User ID
  - Username (slug)
  - Display name
  - Avatar URLs (containing Gravatar hashes)

Example API response:
  {
    "id": 1,
    "name": "John Doe",
    "slug": "johndoe",
    "avatar_urls": {
      "96": "https://secure.gravatar.com/avatar/abc123...?s=96"
    }
  }

The hash in the avatar URL (abc123...) is extracted.

======================================================================
WHY IS THIS SIGNIFICANT?
======================================================================

These hashes can potentially be:
  1. Reversed to find the original email (via rainbow tables/cracking)
  2. Used to identify users across multiple platforms
  3. Cross-referenced with leaked databases
  4. Used to enumerate organization email patterns

This is a known WordPress security issue - many sites expose this
data without realizing the privacy implications.

======================================================================
SOURCE WEBSITES EXPLAINED
======================================================================

Total sources: 73 websites

MEDIA (2255 hashes) - News & Media Websites
ENVIRONMENT (474 hashes) - Environmental Organizations
REGIONAL (456 hashes) - Regional/Local News
BUSINESS (305 hashes) - Business & Finance
FOOD (301 hashes) - Food & Lifestyle
RELIGION (230 hashes) - Religious
NGO (217 hashes) - NGOs & Civil Society
TRAVEL (173 hashes) - Travel & Tourism
PARENTING (169 hashes) - Parenting & Family
EDUCATION (122 hashes) - Education
LIFESTYLE (79 hashes) - LIFESTYLE
WOMEN (46 hashes) - Women's Issues
DIY (26 hashes) - DIY
SPORTS (23 hashes) - Sports
FACTCHECK (18 hashes) - FACTCHECK
UNIVERSITY (13 hashes) - Universities
CULTURE (12 hashes) - Culture & Arts
MUSEUM (10 hashes) - MUSEUM
RESEARCH (7 hashes) - Research Institutions
STATE (6 hashes) - State Government
POLITICS (6 hashes) - POLITICS
TECH (5 hashes) - Technology
NEWS (5 hashes) - NEWS
HUMAN_RIGHTS (5 hashes) - HUMAN_RIGHTS
SCIENCE (2 hashes) - SCIENCE
LEGAL (2 hashes) - LEGAL
INDIGENOUS (1 hashes) - INDIGENOUS

======================================================================
DETAILED SOURCE LIST
======================================================================

sinembargo.mx
  Hashes: 791
  API: https://sinembargo.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

forbes.com.mx
  Hashes: 734
  API: https://forbes.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

ecoportal.net
  Hashes: 437
  API: https://ecoportal.net/wp-json/wp/v2/users
  Type: WordPress REST API exposure

contralinea.com.mx
  Hashes: 341
  API: https://contralinea.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

foodandwineespanol.com
  Hashes: 264
  API: https://foodandwineespanol.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

etcetera.com.mx
  Hashes: 252
  API: https://etcetera.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

t21.com.mx
  Hashes: 244
  API: https://t21.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

desdelafe.mx
  Hashes: 230
  API: https://desdelafe.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

bbmundo.com
  Hashes: 169
  API: https://bbmundo.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

dossierpolitico.com
  Hashes: 164
  API: https://dossierpolitico.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

mexicodesconocido.com.mx
  Hashes: 160
  API: https://mexicodesconocido.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

mexicocomovamos.mx
  Hashes: 146
  API: https://mexicocomovamos.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

educacionfutura.org
  Hashes: 122
  API: https://educacionfutura.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

tribunadelabahia.com.mx
  Hashes: 84
  API: https://tribunadelabahia.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

eldiariony.com
  Hashes: 76
  API: https://eldiariony.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

mundoejecutivo.com.mx
  Hashes: 56
  API: https://mundoejecutivo.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

conexionmigrante.com
  Hashes: 53
  API: https://conexionmigrante.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

local.mx
  Hashes: 46
  API: https://local.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

fundar.org.mx
  Hashes: 45
  API: https://fundar.org.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cimacnoticias.com.mx
  Hashes: 43
  API: https://cimacnoticias.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

lineadirectaportal.com
  Hashes: 39
  API: https://lineadirectaportal.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

gourmetdemexico.com.mx
  Hashes: 37
  API: https://gourmetdemexico.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

sopitas.com
  Hashes: 34
  API: https://sopitas.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

periodistasquintanaroo.com
  Hashes: 29
  API: https://periodistasquintanaroo.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

nssoaxaca.com
  Hashes: 27
  API: https://nssoaxaca.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

greenpeace.org/mexico
  Hashes: 27
  API: https://greenpeace.org/mexico/wp-json/wp/v2/users
  Type: WordPress REST API exposure

manualidades.es
  Hashes: 26
  API: https://manualidades.es/wp-json/wp/v2/users
  Type: WordPress REST API exposure

futboltotal.com.mx
  Hashes: 23
  API: https://futboltotal.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

revistacambio.com.mx
  Hashes: 20
  API: https://revistacambio.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

piedepagina.mx
  Hashes: 20
  API: https://piedepagina.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

lopezdoriga.com
  Hashes: 19
  API: https://lopezdoriga.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

verificado.com.mx
  Hashes: 18
  API: https://verificado.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

uanl.mx
  Hashes: 13
  API: https://uanl.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

travelinglifestyle.net
  Hashes: 13
  API: https://travelinglifestyle.net/wp-json/wp/v2/users
  Type: WordPress REST API exposure

conlagentenoticias.com
  Hashes: 12
  API: https://conlagentenoticias.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

transparenciamexicana.org.mx
  Hashes: 11
  API: https://transparenciamexicana.org.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

socialtic.org
  Hashes: 10
  API: https://socialtic.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

museosoumaya.org
  Hashes: 10
  API: https://museosoumaya.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

vallartaindependiente.com
  Hashes: 9
  API: https://vallartaindependiente.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cemda.org.mx
  Hashes: 8
  API: https://cemda.org.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cide.edu
  Hashes: 7
  API: https://cide.edu/wp-json/wp/v2/users
  Type: WordPress REST API exposure

laverdad.com.mx
  Hashes: 6
  API: https://laverdad.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

estilodf.tv
  Hashes: 6
  API: https://estilodf.tv/wp-json/wp/v2/users
  Type: WordPress REST API exposure

elcotidianoenlinea.com.mx
  Hashes: 6
  API: https://elcotidianoenlinea.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cenart.gob.mx
  Hashes: 6
  API: https://cenart.gob.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

r3d.mx
  Hashes: 5
  API: https://r3d.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

noticiasya.com
  Hashes: 5
  API: https://noticiasya.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

menshealthlatam.com
  Hashes: 5
  API: https://menshealthlatam.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

lajornadasanluis.com.mx
  Hashes: 5
  API: https://lajornadasanluis.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

elclarinete.com.mx
  Hashes: 5
  API: https://elclarinete.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

tlachinollan.org
  Hashes: 4
  API: https://tlachinollan.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

revistareplicante.com
  Hashes: 4
  API: https://revistareplicante.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

periodicocentral.mx
  Hashes: 4
  API: https://periodicocentral.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

elasegurador.com.mx
  Hashes: 4
  API: https://elasegurador.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

diarioacayucan.com
  Hashes: 4
  API: https://diarioacayucan.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

startupmexico.com
  Hashes: 3
  API: https://startupmexico.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

quintanaroo.gob.mx
  Hashes: 3
  API: https://quintanaroo.gob.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

somoselmedio.org
  Hashes: 2
  API: https://somoselmedio.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

michoacan.gob.mx
  Hashes: 2
  API: https://michoacan.gob.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

mexicoambiental.com
  Hashes: 2
  API: https://mexicoambiental.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

filmoteca.unam.mx
  Hashes: 2
  API: https://filmoteca.unam.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

elderechoinformatico.com
  Hashes: 2
  API: https://elderechoinformatico.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

digitalpolicylaw.com
  Hashes: 2
  API: https://digitalpolicylaw.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

codigocosmico.com
  Hashes: 2
  API: https://codigocosmico.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cienciaonline.com
  Hashes: 2
  API: https://cienciaonline.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

pyme.com.mx
  Hashes: 1
  API: https://pyme.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

pueblosindigenas.es
  Hashes: 1
  API: https://pueblosindigenas.es/wp-json/wp/v2/users
  Type: WordPress REST API exposure

prodh.org
  Hashes: 1
  API: https://prodh.org/wp-json/wp/v2/users
  Type: WordPress REST API exposure

mujeresnet.info
  Hashes: 1
  API: https://mujeresnet.info/wp-json/wp/v2/users
  Type: WordPress REST API exposure

lavozdelsur.com.mx
  Hashes: 1
  API: https://lavozdelsur.com.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure

diariodeoaxaca.com
  Hashes: 1
  API: https://diariodeoaxaca.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

cdmxnoticias.com
  Hashes: 1
  API: https://cdmxnoticias.com/wp-json/wp/v2/users
  Type: WordPress REST API exposure

campeche.gob.mx
  Hashes: 1
  API: https://campeche.gob.mx/wp-json/wp/v2/users
  Type: WordPress REST API exposure