{"report_id":"2a245b43-1f3d-432a-878a-5d2ab69ed1c9","version":0,"status":"done","tags":[],"date":"2026-10-16T02:28:17Z","url":{"schema":"http","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":0,"asn":15169,"as":"Google LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"title":"Home - ICPNT","dom":{"size":56400,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13494)","md5":"e88e1a05a848cefdf3238e92d82e16d8","sha1":"075d02b878ca221230c32212540db47065e2b04c","sha256":"cd854dc6832b81e7a3caebda2994795c417da3bec08e36a62ffbb788aea21562","sha512":"339efbe38c9447c78af474a67207ad122783f41492e1d9a63d0ee1ae5f01eb363cbd3a1eab5a492066d4f6886328d8494c598782a9078fb408e8eecda1ff6a7c","ssdeep":"1536:gxapypOmw+eUJ+eZ+eb+eU+exb+eL+eR+ep6Bap8mTYE:PklwSJL9yLb9zrZp","tlshash":"5843d8b3d069007f336f47dda198b324b1a59118ca429e25b2fc21bdc6d6ef512b362d","dom_hash":"domhashb2f4ac7f05d1b0aa8fcb47470d174067","first_seen":"2026-10-16T02:28:41.436148Z","last_seen":"2026-10-16T02:28:41.436148Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":0,"asn":15169,"as":"Google LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T02:28:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"icpnt.org","ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-02-05","domain_rank":0,"first_seen":"2026-01-09T08:09:28.574484Z","last_seen":"2026-01-09T08:09:28.574484Z","alert_count":58,"request_count":29,"received_data":861239,"sent_data":14719,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"All in One SEO:5.0.2.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"All in One SEO Pack:5.0.2.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-11T22:48:14.897501Z","alert_count":0,"request_count":1,"received_data":508662,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-10-11T23:38:49.428366Z","alert_count":0,"request_count":1,"received_data":272177,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-11T22:46:23.68047Z","alert_count":0,"request_count":2,"received_data":144934,"sent_data":1149,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":8444,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-10-12T00:19:08.819854Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":823,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"icpnt.org/wp-includes/js/jquery/jquery-migrate.min.js?\u0026ver=3.4.1","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-16T04:26:43.483658Z","times_seen":1014514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-compat.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7af18739a253c198a0324d2070155a4","sha1":"c137d30bb65a42b7c5e252b5d677579dcee32a99","sha256":"8dd79297d1e3a486a8cf4586104322fb686b5ae37085f410066c4bda37fc11fd","sha512":"6e4ce92551ad77da9b6157c3114da8f09e0dd864ab5819a1c77e323ea47a28227a858ee1ffcf05f7d58ea6213942d2d20a2e362edd1056fea38efb2721ec691f","ssdeep":"","tlshash":"9c2149ba3021747509ae040db5bfc7c67d705190b9073842c97cd5bd0131dce5485ebe","size":1214,"data":"","first_seen":"2025-07-04T18:07:13.82165Z","last_seen":"2026-10-16T02:28:41.454347Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FXRBN64NVM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e97ee722fca827a0446ee4dd8c6ef7c","sha1":"082980b416fc9ea11b0aa6138c0df5d17fd74e99","sha256":"6b75bc31fe5e600529fa86e338f1925c0771738de19cae62afaca4e4229ea5d3","sha512":"62ca7c25b622a21384f8ce9d3311dc65b68559a888fea738bdebbcfe403fb6ac17e977d5798106458822028292fd2440ba7e68fb542afbb2aa6db98609bb8373","ssdeep":"6144:fAveGmbsEDAhI4FtC7b+843GoQsRcwwbhEa93DmszOskAYQC1Q4T8/:LLDAhw7b+8rE+YQC1M","tlshash":"49b41acdb3d674229396f078903f01cba57b29a2b44cc996b189dce02d74a9a4137f7d","size":508058,"data":"","first_seen":"2026-10-16T02:28:41.449871Z","last_seen":"2026-10-16T02:28:41.449871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98937b77acfaf4e44c4b97b8ee21ab29","sha1":"522a7fffef1f7d1633cb695cf2bdbe640f67f30b","sha256":"15e4b6f5b78972fd15644cb420ee4ba53a76e4997b215a052bb92dad03412f63","sha512":"d9e9ea0575561a0995dc2f94083822ba8e3dcf3bfd76141a52a689d37e7f54cc4faca184708bfc4f320054f90ea1a08ac14d5fee3c13ac308aacfbab6f0658e5","ssdeep":"","tlshash":"a0c09bdd314a5d71d5eb37404f2fb608b542715494d1eb314d266344d631d175b55850","size":145,"data":"","first_seen":"2026-10-16T02:28:41.487391Z","last_seen":"2026-10-16T02:28:41.487391Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce76206f383b9c35053566a97c441736","sha1":"13e74ca964437531c94764c0e6bd70e51d6ae30a","sha256":"79634da3e49fd859bc32f08c45fbce3947a18fd1490df7e79be63e294448e012","sha512":"8bf765131db251ad85f9294572a0c791089e131f529e0ccc714ab4d534069da92c3684328e65d09ecbc00b35df544543e3fd96e2b8b592e86a156b3783c88494","ssdeep":"","tlshash":"a321c19a3cbd003c1311121c39ade25269650b12f8c1d914f4b4fc7568e2e97d86eeee","size":1233,"data":"","first_seen":"2026-10-16T02:28:41.489776Z","last_seen":"2026-10-16T02:28:41.489776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"21cfbf2732aea9e23dbfc225b6bc5f90","sha1":"bf1a6cf2e87cfd13b5de2086696b44f41dc3323c","sha256":"e77b941e7276047c234518539ef54f97f978375b53aedb63aec15447682e2c0a","sha512":"1e2561d975cce87551a68a0cc4ff6b17b4e4d652bf90409de5a0db7b545cd679582fe2d6452c10644fa3b2f845c2b2ecd0a8aa325742a1d1eab3ba257f6e53e4","ssdeep":"","tlshash":"51c02b0c741340df400333c8240c2d8834316038e1c029368cfb2000a4b080e4812fdc","size":134,"data":"","first_seen":"2025-08-25T15:44:55.695236Z","last_seen":"2026-10-16T02:28:41.491348Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbf78fcb067a946f6010d9c553a930b7","sha1":"00938da402ad99d20bc0c7249b834acd8aa62daf","sha256":"ddce36afbabae6987a6e87067c35b047616e645954925c47e4d7a84f504ef85a","sha512":"118ceac4ce17b9a6f2065eb83b3a3403cac007a669768e540c18ee7afecfa1feab6e5bcdb91d62c098cae030d09ed519609ba76be1c73814b574eea7cf50c2cd","ssdeep":"","tlshash":"68c02b0e7435f81840353634b87f830c0333547311424c10c6d000723c5001db60387c","size":134,"data":"","first_seen":"2026-10-16T02:28:41.492445Z","last_seen":"2026-10-16T02:28:41.492445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f11d030ea096d5de54505b93b2847e24","sha1":"92e015a59404683e58e420709a0c5115c1c27d59","sha256":"9a1a5aa7b4e924e2553e1536aace7ef16489568f03813fecef21c5418213ca5d","sha512":"cea770ee64e833a98a793bdb1331b5eac7ad8c7fc2be01f97e9805313cc37c056ac4fa5c6db265f5a9bd4e838c0b351e0c7455ee35204718a3428cd6b111dfb4","ssdeep":"","tlshash":"0ae04f5f4939594913a527ccf206ae88a1d5d03df48d8e14e69c946945f1e4098e437e","size":345,"data":"","first_seen":"2026-10-16T02:28:41.494407Z","last_seen":"2026-10-16T02:28:41.494407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d5d2535bd0e545f92aaf4709b0453fe","sha1":"6f1a75c5efb3f5efc7bdabec6caedc066d8e5a84","sha256":"f0577c6143954ba792ede306dab0ab5448c8c04057d63379d89fd31a5927822f","sha512":"5b7c953422509ac7a53a229ab444298edca33f4057366dff1b8162156b5f503824bbdeb32ec553b6eddf31a1c964f0123e66a750376e0add3441c28728c4c014","ssdeep":"","tlshash":"0c21141e3111763613a743ded8991f47f9ac10993368441bf5fc96190698d8eb07fd29","size":1396,"data":"","first_seen":"2023-03-11T13:39:22Z","last_seen":"2026-10-16T04:39:27.142068Z","times_seen":3419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-default.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbfec4e2167b3a282bfac0b6b211a69","sha1":"b6cad92342fc4e8fc363a1e8ca5b52e91cbc84b0","sha256":"47cc0598f79c793213c8725e3da13c253c637c5f3260b6222d66b0072c0436b5","sha512":"12952827c42ffc966dc0f77198f5eabe19fccb8bb58ea2d12d1dc0d3854bd81d4bd4ea986b1031ac72d8db9e77916f3ff682404ae28c190d92e3b1d2bc774fc5","ssdeep":"768:nogqmPwhYYy5JAzm666AYZLcH7JpPjWVv+tbxp:BPFdAS6AYhcHWv+tbxp","tlshash":"71c2fa4df212607242fb91bd606e26062132dc76650140b8787ccef4ae7af5563e7fba","size":26726,"data":"","first_seen":"2025-07-04T18:07:13.809991Z","last_seen":"2026-10-16T02:28:41.476231Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-fold-unfold.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f8abeaa99f87ef1586bdfba463d388","sha1":"e2df2e1eb9a05fd71d0d572515aa022942a6ca65","sha256":"77497ab62352940b4cd53aaca5db57ca9737cc1858eb42872c69ed61c31d6e32","sha512":"d2da26e121702383d3d38abf5d6349d54dd8d157766f4264d43bcbb94a2e5c988fefdbb80639bafc94d0471b0ad9f3883afcba081ae928a9a6ff67efc4573cc1","ssdeep":"96:8Z2BZK3oX1rNBGigLJSwfKl95gV92fzHudD+OlDfjW1gE+D4oVfoTfgA/AO:8Z2BZK43B9cvSH5gV9lD+z1iDTNGfF/Z","tlshash":"48b1d0636b162c78e9cac5ad109e16402714d583b5c1fdac7d34d8d6c9f088b32b96fe","size":5183,"data":"","first_seen":"2025-07-04T18:07:13.80287Z","last_seen":"2026-10-16T02:28:41.457568Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-megamenu.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abac6a3906bd4575e7224324f1ab0722","sha1":"8f1b6171f3f7eb0304fdf942b20f843e06bf0bbe","sha256":"985f0b8d29616b6dfb84775a9f6d129bd211d9c3fc0e621a56b6366d1a62aa77","sha512":"a27d84ecd2478fc86d2c14feba56badd8c691f404e69f84af2a4918558e77fb39dffc27be6172b94c337203c35ab3948d8572453b0692d895b1a8bc05966a7ab","ssdeep":"","tlshash":"b061e05df62051b144af6375292ff80d72b318b50e124560247a46b90fbef9a93a3f58","size":3291,"data":"","first_seen":"2025-07-04T18:07:13.814791Z","last_seen":"2026-10-16T02:28:41.4438Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-gallery.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d67f2d02de3cd3836bdcc51e9d71b1","sha1":"e196842355ba48c885eb23f3fe75ff1cbe9eefe6","sha256":"71768e2e37a6bca97318df3873c7d56c404c851f5a47783c96eb9d37705c1cc7","sha512":"b8edf61b06e99b822d7490ebf6793d9b1fb37a860b36e4f0721dbfbf3419ee96dc5d2ec7d8fa462765413cc185ac85c3b0bf635ad13f58c514fa567b438457f3","ssdeep":"","tlshash":"e641649a76696090249f10b8050e61019129bcb9870acd1d99a70cb7dd3eea87775f3f","size":2378,"data":"","first_seen":"2025-07-04T18:07:13.794895Z","last_seen":"2026-10-16T02:28:41.477203Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/tec-user-agent.min.js?\u0026ver=da75d0bdea6dde3898df","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b5feb0e8fc528175f9ac2a41082e526","sha1":"0c8a21aaff0fcde306d4115aebec00df4153173c","sha256":"ea3c2a697de741d64d97053000c57f002343ad420ab46df0d4ede67fbf54ebe4","sha512":"fb26e40d1ce802df10d8b9604e336a30f715d4b40f267ceca848e8a0c92d54007774eb3cacae664ce3d9cc6390e0d5d3992d557cc4cdfe562ffbddebbd6ffe23","ssdeep":"","tlshash":"98d02b05a2ccf03610362b90677bb720bf074234d5a4a0c1222ccdc5b0804b7c459dfe","size":288,"data":"","first_seen":"2025-09-26T18:20:16.40605Z","last_seen":"2026-10-16T02:28:41.479261Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?\u0026ver=7.8.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5154c9cfeacba69034ca43d78e1d5fb0","sha1":"f3f7fa1b40d32a4257d90a2a2196a5e37df9b24d","sha256":"cb34d2ee2a93fd11b734c124a6fc661339585c63382d08eb31bf921b66519eac","sha512":"23f5d6f60e32bd560b13f5817317cc452291ff182f001e712380c43a066e7bea602aade7a267d4e30b99eac72009dccbe7fae3552994da1047357b03bb76db56","ssdeep":"192:xIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:x2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"e5f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","size":7888,"data":"","first_seen":"2023-03-07T01:31:55Z","last_seen":"2026-10-16T03:03:15.798791Z","times_seen":12493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-includes/js/jquery/jquery.min.js?\u0026ver=3.7.1","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-16T04:26:13.756952Z","times_seen":1111781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-video.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"356444667f7817bf53837249471443a6","sha1":"0dfdba6053bc3e1543707f7f77d6ab9e75acfe63","sha256":"632e379ecbe75af359ed620e8e5d12ea51381894839a143619c47bb9435afc25","sha512":"ead3835668fab21ccc8c05d7318dfb8103a187a7923104c6dc557ce523609c281ac67d1d924122b2cc658bd6cd005fc913214e765248b15619d13905f99c3de9","ssdeep":"","tlshash":"442156667149406f00bd5e7ca90a9b327b11167b8a19c89bc8f649308233f0e7e66c7b","size":1397,"data":"","first_seen":"2025-07-04T18:07:13.814053Z","last_seen":"2026-10-16T02:28:41.484707Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-widget-js.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"602082bba8d89a1b6cf7f862dc649bf3","sha1":"f34559a843ef2e1ba2250e92fdaf922d3579a639","sha256":"20bf92199b970fcc32075f6c544dcf59362ae1486966a6dd6e126914dbf0875f","sha512":"98900bcdc1d540f93556fe376b53cf6401bf95aef4b67b13164d9c61ff8e8d0df42cc7087c2237ff01eb2755212d1dbb2a60f0f44aa8d8b61b0c718010c54399","ssdeep":"","tlshash":"fc217199b362b45013fd3aec400e4807605dcc7797164a45a286dcbe4bff9283abed39","size":1209,"data":"","first_seen":"2025-07-04T18:07:13.797155Z","last_seen":"2026-10-16T02:28:41.470189Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"platform.twitter.com/widgets.js","fqdn":"platform.twitter.com","domain":"twitter.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"44eadd30caaa53e4629d4f7c82454f2f","sha1":"7e477f433dce809bb34153e37bbb525434616715","sha256":"cee8c177d918a93cdb029c7616478f4a5ca2585c7b4f8115a597dbc326c9822b","sha512":"5d4377070e33c64d4d4e1fd8ccfb0dce0af68e1ebcc46768bd4362b8dfe096a2471b937e3efc1b345ed65ce91edf8d540278ea8554349e1e242dcc6f13bcf79a","ssdeep":"","tlshash":"5ed0951e244473240650df01f7639541d30708f815d091f4d07494e84b0b825a4f6fdd","size":247,"data":"","first_seen":"2023-09-02T17:04:56Z","last_seen":"2026-10-16T03:25:11.884043Z","times_seen":9229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-js.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f0a22b37d1f8d4e51f493cd82e9a710","sha1":"dda591173913ede0819ec82ba1f42162716f7ac8","sha256":"cd5c6ab172de3e504c5b62da1583ff56bef22fac3741a4c25259d124fb31f57c","sha512":"458b32be91b06890e532d1163d678e54a288f42e9e3033dcbe50161fde8199bb822b96d465ddaf606a46ee118f0e5ce7f32268dcb7b82dd055edf2ac2907cc41","ssdeep":"","tlshash":"ee21235221a9a026d0b94116e0b942c2f0f82ce9345ee00472bdf1b55d6585fa27fef6","size":1291,"data":"","first_seen":"2025-06-24T04:37:00.991263Z","last_seen":"2026-10-16T02:28:41.438972Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-parallax-support.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1c057d0c6d9811a4278d02e4587429c","sha1":"6ba3ada4b5963ea1f1be08e734afacea7d82ee92","sha256":"249625eaf75dc882ced09f2f676032a3260b782b4dc87b933ff9d00472ac456b","sha512":"658795cb44866a2cff2816cee8244f6a13b47047b81932ceb9c42f639c18826aeaeb34d1c2ceebf1600094a263d5582d95abc86eeb4793682c9f669566dc292f","ssdeep":"192:rtsxg0UMMwqRAN9sPpMEiO5qirN9NvwIZ/o9SVTn2nfvuPyk1IAy6yS/w4TQ94o2:ryxEMM1RAN+PpkK","tlshash":"12e1719472b3ec566186931682ee1d03541ef49822f4a42fb72886de4cb8f4e153d37b","size":7401,"data":"","first_seen":"2025-07-04T18:07:13.788042Z","last_seen":"2026-10-16T02:28:41.464223Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec2cd5364f72ec1642db191a145c6e5","sha1":"78eb8f4c19c16808504ddb4ba3d53713a6b4f9a9","sha256":"c3b91fa542f11865788928d7223fde4fcfe2b886bf3be4c3c525afc59fc563d5","sha512":"b5371638d9ee03774d0bb4afeadbfb5f61c89f5741aeecb907153aaa95c31181d00ac3f6f5ea5e5bffed94c38c4827b515d2866b3f7dda9a0bf9899c00fba17c","ssdeep":"384:Kbroi4IJAJW68RddRHXOvC2xQ+n//Y3C9DFvw9z/2s4LN2ZsZx:KQDCMQ+n/rRFo92saNlZx","tlshash":"74921b58f1a3b21783ab75b86c5f240c3b72a626c907c0057659d8e86cfde84a127f3c","size":20726,"data":"","first_seen":"2024-12-03T18:27:54.028107Z","last_seen":"2026-10-16T04:17:12.171895Z","times_seen":1871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-tabs.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"99df136e4914da4e20f0efd2c1009300","sha1":"bfd40b7f82a6aa1fddae01128bb0ec2bd6031e73","sha256":"517e804642b1cf8c8b5b5c3de12e039cdc24af076cc08a8137b829813567c7e4","sha512":"b0cfe27b29d3158dcf115542db264e7f526ce454183f99f36e3823003cd2216d2b68447df0c6164f992b863bc673f8024b2f0b5ee39c29b239bf3b999d7750e4","ssdeep":"","tlshash":"c8412469b640703216ab49b5da8ff303d02266e7cd1505cc704545452efa665b0dfb5b","size":1946,"data":"","first_seen":"2025-07-04T18:07:13.80619Z","last_seen":"2026-10-16T02:28:41.459574Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-lightbox-activation.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bb898b9dd9b677a7765797ed671a56","sha1":"0bc2799ac044c35b612225a3b8a59561c151069f","sha256":"4e4d9b511bf175620e77eeca1736a1c9ff4e59b32fb71cb29ac4fb8024f967e1","sha512":"3b0694721a76b4c3fafc7d1a7eb1215920e19ee072cd8ba123db866f8c68b4fcf78de37933639ebfb274f0a288ae5cc1e384bf81b4d59c660980f6076daa2f27","ssdeep":"96:LVUS5u/U2jlK/5m31HPbPiB5/6Rg5DqpJPwnRDzRWqw/mCkjtCk5M1rfNRx7efNX:5sBx1HT6KaNK6vNjtu1rfN+fNX","tlshash":"a6a1b80531a7648586de70d8181d3419b5276dbec5cdc1fafd71887888e7b4d2163d3d","size":4717,"data":"","first_seen":"2025-07-04T18:07:13.805249Z","last_seen":"2026-10-16T02:28:41.466729Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/js/waypoints/waypoints.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c868da9995dd338b6cc83455612c69c","sha1":"a9ee6b66f096fc03a70356ef3a447df17420d5b5","sha256":"083d39b7748a145d540f729bc5d7e75301a1aed0b943e69ef2fd5fca2acb6ef2","sha512":"c68f7eefdfcb702f5325400124361b0f964f11fa99a5de05546fbf159f4ff0103209baf089841ea694ab1107e54a197dd5606ff8331038f18b146a4cb34fb59c","ssdeep":"192:mEPKasXzHz9D5/6J8bvctcfq7T5EsvfikrCeexsvfip9Y8pY7pZpzbhHyQ8HFl8J:mESjzHz9Dpm8L2cfq7T5EsvCeexsvfi+","tlshash":"6d027189760174221b9f90fad91f434aa3375828b40580bdb0d4d4ee28f252d777bfba","size":8967,"data":"","first_seen":"2023-05-09T05:09:57Z","last_seen":"2026-10-16T04:17:12.131716Z","times_seen":3027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-shortcodes.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"35b0ff93ac3cd333cc1b9b63a1107bf6","sha1":"18a3e55a515757c65d1d0e3d38f3fa968985c586","sha256":"0840fa659e72722df491ae6e7f5a377f981e8f29461482c23690ffc0e15fcc51","sha512":"858e9cf903c6de7c27d69b55543bc59b8809abe630893a37d0edf16a8cf1bf314e1eaeb6714effa1d33390622144c58b0e5db37e60d159282cb72a34bd687321","ssdeep":"384:kt1e7DU3LWQjnZQjnat1TRKzDsy5+4X4JGp:G1SQjnZQjnaTRahp","tlshash":"3aa2d8ceb6c6b305038771bea62f9805a17ccda25548c5baf9b08449ff312589633b7d","size":23104,"data":"","first_seen":"2025-07-04T18:07:13.807504Z","last_seen":"2026-10-16T02:28:41.483014Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-slideshow-video.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53450f0c36b76e6ae4bd84bd0516a98c","sha1":"f8ea402fe84c265177c396635cd6b64f04a8d8e6","sha256":"5b34336071f61d9bb029b1843ce1af79f0b64ac46351bf73d76a8a921b26ac36","sha512":"9636af77a27e99509be0c582afceab6e9e8db36908013df8544ba3b6bc3cfa0b2e1ff0165b3c67ce9375718711b5b2675dbdbb593446d8179b7df8d472660642","ssdeep":"96:8zzX4PW6Udc/GiZNhUtiEuYAQOn5TVDB12uSLknn2GBOlwHTSkkOcdm6cOKYxQXA:8zHLiZpDCuSVmc8S3uCdpxwe","tlshash":"0a129747b5c6a15902da94bc1a2b30053139e66e6406cb78f073faddde78e4b50239fd","size":9562,"data":"","first_seen":"2025-07-04T18:07:13.819237Z","last_seen":"2026-10-16T02:28:41.441473Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-hamburger-menu.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4df86d09579bda9fe42f59f95d0185c8","sha1":"68e707db750434b999ecbd00aacc481cfe930260","sha256":"bc16327e502ac7f0453bf76148b33618c489d7abc82d1a240656339d9a595afc","sha512":"790a773a556159420f5bd57bd12cdd78000a0fd5998e7216a13ea26a92c68046b8fa9b567a8fc73cdbde570de77934b151ca59c94c64a5a8b1443289228f1aef","ssdeep":"192:F+B00siJuMcKlK6MvFjxMXRlas7Z5VSOUje4:4XdJuMcKlK6MdjxMXRlJ7Z5VSOqe4","tlshash":"e3f1ea89f55180f292af62bd010f5a0291b79e37db094540747d0db92e3bfe426d2f2e","size":7880,"data":"","first_seen":"2025-07-04T18:07:13.787188Z","last_seen":"2026-10-16T02:28:41.472502Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-footer-effects.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27613a7346cf4cc0db886cd2b776140e","sha1":"eb122ccc6346f9b5b0ed9b2692476db137453fef","sha256":"363b8a14abe08f1e7d92352eb2a9d6ce6ac32bfc7b02acd721223f324d847a8a","sha512":"d05b8232f77d33858bef8a70361069565d6a8a2a3238dfea6a687804b041448bb2d68cac03a5ac0893bf3590ed81201dbb1ee0fee250b9533730d6b3faf82fe9","ssdeep":"","tlshash":"8601892936293be8b4df56cf2409960b1065fc338b09c0a1f9e1d8621771cdb2719f2e","size":804,"data":"","first_seen":"2025-07-04T18:07:13.815463Z","last_seen":"2026-10-16T02:28:41.444938Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Twitter embed placeholder is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1901602 for details.","filename":"moz-extension://9a310967-e580-48bf-b3e8-4eafebbc122d/lib/shim_messaging_helper.js","line_number":23,"column_number":15},{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://icpnt.org/wp-includes/js/jquery/jquery-migrate.min.js?\u0026ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-js.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.302Z","timestamp":1792117557302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-js.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-50b\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1291,"size_decoded":903,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1291), with no line terminators","md5":"6f0a22b37d1f8d4e51f493cd82e9a710","sha1":"dda591173913ede0819ec82ba1f42162716f7ac8","sha256":"cd5c6ab172de3e504c5b62da1583ff56bef22fac3741a4c25259d124fb31f57c","sha512":"458b32be91b06890e532d1163d678e54a288f42e9e3033dcbe50161fde8199bb822b96d465ddaf606a46ee118f0e5ce7f32268dcb7b82dd055edf2ac2907cc41","ssdeep":"","tlshash":"ee21235221a9a026d0b94116e0b942c2f0f82ce9345ee00472bdf1b55d6585fa27fef6","first_seen":"2025-06-24T04:37:00.991263Z","last_seen":"2026-10-16T02:28:41.438972Z","times_seen":32,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/js/waypoints/waypoints.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.316Z","timestamp":1792117557316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/themes/enfold/js/waypoints/waypoints.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-2307\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8967,"size_decoded":2956,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8802)","md5":"8c868da9995dd338b6cc83455612c69c","sha1":"a9ee6b66f096fc03a70356ef3a447df17420d5b5","sha256":"083d39b7748a145d540f729bc5d7e75301a1aed0b943e69ef2fd5fca2acb6ef2","sha512":"c68f7eefdfcb702f5325400124361b0f964f11fa99a5de05546fbf159f4ff0103209baf089841ea694ab1107e54a197dd5606ff8331038f18b146a4cb34fb59c","ssdeep":"192:mEPKasXzHz9D5/6J8bvctcfq7T5EsvfikrCeexsvfip9Y8pY7pZpzbhHyQ8HFl8J:mESjzHz9Dpm8L2cfq7T5EsvCeexsvfi+","tlshash":"6d027189760174221b9f90fad91f434aa3375828b40580bdb0d4d4ee28f252d777bfba","first_seen":"2023-05-09T05:09:57Z","last_seen":"2026-10-16T04:17:12.131716Z","times_seen":3027,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-slideshow-video.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.328Z","timestamp":1792117557328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-module-slideshow-video.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-255a\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9562,"size_decoded":3376,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9562), with no line terminators","md5":"53450f0c36b76e6ae4bd84bd0516a98c","sha1":"f8ea402fe84c265177c396635cd6b64f04a8d8e6","sha256":"5b34336071f61d9bb029b1843ce1af79f0b64ac46351bf73d76a8a921b26ac36","sha512":"9636af77a27e99509be0c582afceab6e9e8db36908013df8544ba3b6bc3cfa0b2e1ff0165b3c67ce9375718711b5b2675dbdbb593446d8179b7df8d472660642","ssdeep":"96:8zzX4PW6Udc/GiZNhUtiEuYAQOn5TVDB12uSLknn2GBOlwHTSkkOcdm6cOKYxQXA:8zHLiZpDCuSVmc8S3uCdpxwe","tlshash":"0a129747b5c6a15902da94bc1a2b30053139e66e6406cb78f073faddde78e4b50239fd","first_seen":"2025-07-04T18:07:13.819237Z","last_seen":"2026-10-16T02:28:41.441473Z","times_seen":16,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?\u0026ver=7.8.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.335Z","timestamp":1792117557335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/plugins/sg-cachepress/assets/js/lazysizes.min.js?\u0026ver=7.8.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Sep 2026 17:19:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab40a21-1ed0\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7888,"size_decoded":3749,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"5154c9cfeacba69034ca43d78e1d5fb0","sha1":"f3f7fa1b40d32a4257d90a2a2196a5e37df9b24d","sha256":"cb34d2ee2a93fd11b734c124a6fc661339585c63382d08eb31bf921b66519eac","sha512":"23f5d6f60e32bd560b13f5817317cc452291ff182f001e712380c43a066e7bea602aade7a267d4e30b99eac72009dccbe7fae3552994da1047357b03bb76db56","ssdeep":"192:xIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxOn:x2kNdcC9J6co91qwLcI6KgkixbdjqBFH","tlshash":"e5f1b59f755570b3aadb74b5416f310f673279339d86e092e2bac080493c84aa323f2d","first_seen":"2023-03-07T01:31:55Z","last_seen":"2026-10-16T03:03:15.798791Z","times_seen":12493,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-megamenu.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.347Z","timestamp":1792117557347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-megamenu.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-cdb\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3291,"size_decoded":1457,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3291), with no line terminators","md5":"abac6a3906bd4575e7224324f1ab0722","sha1":"8f1b6171f3f7eb0304fdf942b20f843e06bf0bbe","sha256":"985f0b8d29616b6dfb84775a9f6d129bd211d9c3fc0e621a56b6366d1a62aa77","sha512":"a27d84ecd2478fc86d2c14feba56badd8c691f404e69f84af2a4918558e77fb39dffc27be6172b94c337203c35ab3948d8572453b0692d895b1a8bc05966a7ab","ssdeep":"","tlshash":"b061e05df62051b144af6375292ff80d72b318b50e124560247a46b90fbef9a93a3f58","first_seen":"2025-07-04T18:07:13.814791Z","last_seen":"2026-10-16T02:28:41.4438Z","times_seen":29,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-footer-effects.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.349Z","timestamp":1792117557349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-footer-effects.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-324\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":804,"size_decoded":757,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (804), with no line terminators","md5":"27613a7346cf4cc0db886cd2b776140e","sha1":"eb122ccc6346f9b5b0ed9b2692476db137453fef","sha256":"363b8a14abe08f1e7d92352eb2a9d6ce6ac32bfc7b02acd721223f324d847a8a","sha512":"d05b8232f77d33858bef8a70361069565d6a8a2a3238dfea6a687804b041448bb2d68cac03a5ac0893bf3590ed81201dbb1ee0fee250b9533730d6b3faf82fe9","ssdeep":"","tlshash":"8601892936293be8b4df56cf2409960b1065fc338b09c0a1f9e1d8621771cdb2719f2e","first_seen":"2025-07-04T18:07:13.815463Z","last_seen":"2026-10-16T02:28:41.444938Z","times_seen":33,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/2023/02/1298747_instagram_brand_logo_social-media_icon.png","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:59.591Z","timestamp":1792117559591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/1298747_instagram_brand_logo_social-media_icon.png HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nCookie: _ga_FXRBN64NVM=GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0; _ga=GA1.1.2139700511.1792117558\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_FXRBN64NVM","value":"GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0"},{"name":"_ga","value":"GA1.1.2139700511.1792117558"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1292\r\nlast-modified: Mon, 13 Feb 2023 21:00:29 GMT\r\netag: \"63eaa4ed-50c\"\r\nexpires: Sat, 16 Oct 2027 02:25:59 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1292,"size_decoded":1663,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79fa8b6ea894c0fda94be4aa54b5650a","sha1":"3ed2a3b2a92ddb955a0bd2a1177aa8a3f4f4bad0","sha256":"0d4e8b6ef4974e6956f1722312e074cde52c438aacc7bc933d52fd4c83087077","sha512":"6abf45a74fcb56b941ea886ab0b6f3fffd6c9ce241b7e7b74fa7042ebc19053cdef4d60a74d9a18aa0dca4cb7c71cc88ede9de2aa81f6e295582933a7138aff0","ssdeep":"","tlshash":"5721c8462e8a528a47d62977e8c0859808d680f386ecf678cc01eda8e94622a7d665e5","first_seen":"2026-10-16T02:28:41.447051Z","last_seen":"2026-10-16T02:28:41.447051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FXRBN64NVM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.286Z","timestamp":1792117557286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-FXRBN64NVM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\nexpires: Fri, 16 Oct 2026 02:25:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 171772\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508058,"size_decoded":172376,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3e97ee722fca827a0446ee4dd8c6ef7c","sha1":"082980b416fc9ea11b0aa6138c0df5d17fd74e99","sha256":"6b75bc31fe5e600529fa86e338f1925c0771738de19cae62afaca4e4229ea5d3","sha512":"62ca7c25b622a21384f8ce9d3311dc65b68559a888fea738bdebbcfe403fb6ac17e977d5798106458822028292fd2440ba7e68fb542afbb2aa6db98609bb8373","ssdeep":"6144:fAveGmbsEDAhI4FtC7b+843GoQsRcwwbhEa93DmszOskAYQC1Q4T8/:LLDAhw7b+8rE+YQC1M","tlshash":"49b41acdb3d674229396f078903f01cba57b29a2b44cc996b189dce02d74a9a4137f7d","first_seen":"2026-10-16T02:28:41.449871Z","last_seen":"2026-10-16T02:28:41.449871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":51,"receive":69,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mdb-ui-kit/3.10.2/mdb.min.css?ver=7.1.3","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.296Z","timestamp":1792117557296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/mdb-ui-kit/3.10.2/mdb.min.css?ver=7.1.3 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 17 Jan 2022 10:37:02 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWgzml%2FvhswhJnJM7X%2BSXQP8py6khZmZLr%2FcHzORcRuDhGIxq%2BjcEjGBm%2FZWvh2SyvW1yu%2BdXYv2AoCQG0RTn7MUUpkdX36o29NmhrdH9HRUsTCV870Jhhh3Ti5hw8jIHTkWkGlU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4b39dad38188deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28893\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271180,"size_decoded":29890,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (59612)","md5":"fbcf7b7aa4ef56d33383110c0cb109e2","sha1":"bc828cc4f7cb02aa508233322f2421486884b7b3","sha256":"992bdd3fe31d7a811809a0ca860bac1269705190b37d85a8adf5f9de9e7fa2fe","sha512":"0f38b4cf3f7309eda8959361abec27cc68cee482cebfc7ffc83ea3f2cad6f971a79eff5d50dd38784a087551f142a8b2f2e067db59e2216429882cd82441f7ca","ssdeep":"1536:CtZIhcfkwG+sEBp8Zc3EfA0PDVwAL/RZuq4iaNIpz600IZ7XrGM+GD:CtZUL/RZuq4iaNIpz600IZ7yM+GD","tlshash":"6a4451d6f495245ee8a3c115b1d0bbf9063f6642e7021e6fe02b37b887862db0563f58","first_seen":"2024-06-19T23:38:47Z","last_seen":"2026-10-16T02:28:41.452426Z","times_seen":15,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-compat.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.305Z","timestamp":1792117557305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-compat.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-4be\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214,"size_decoded":887,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1214), with no line terminators","md5":"f7af18739a253c198a0324d2070155a4","sha1":"c137d30bb65a42b7c5e252b5d677579dcee32a99","sha256":"8dd79297d1e3a486a8cf4586104322fb686b5ae37085f410066c4bda37fc11fd","sha512":"6e4ce92551ad77da9b6157c3114da8f09e0dd864ab5819a1c77e323ea47a28227a858ee1ffcf05f7d58ea6213942d2d20a2e362edd1056fea38efb2721ec691f","ssdeep":"","tlshash":"9c2149ba3021747509ae040db5bfc7c67d705190b9073842c97cd5bd0131dce5485ebe","first_seen":"2025-07-04T18:07:13.82165Z","last_seen":"2026-10-16T02:28:41.454347Z","times_seen":36,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/2022/12/Presentation2-1.png","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.307Z","timestamp":1792117557307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/Presentation2-1.png HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35456\r\nlast-modified: Fri, 23 Dec 2022 15:33:12 GMT\r\netag: \"63a5ca38-8a80\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35456,"size_decoded":35829,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 537x509, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6de4ec1f431f39f59e87ae3e3c9e4dd1","sha1":"870551109b0f5bb7645e8c2d36e15f29369f5ea7","sha256":"325f5662b45faa1ae5f7d9af75e2fcef11fc32a35c8e2e7235327df7b423de64","sha512":"45f58a580ec0f577fb6700b09abb17e031a72a80d9de5675e79a905ed429513344088404abf81d15d2514d24e60e2192f454454338ebd197d80163b30652ef64","ssdeep":"768:6N0F6xfuEd/2GUzj+1TWcHFSr8acJMnYd1SzGAQu4yWQ+g9me9pLYYc:6GSfuy1AilH7TJMnpYulR+R+cY","tlshash":"95f2e1316dd0fa1cbbab28187d6470525b48978d7ee9603adca46a3e310e95d4df03ec","first_seen":"2026-10-16T02:28:41.455328Z","last_seen":"2026-10-16T02:28:41.455328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-fold-unfold.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.341Z","timestamp":1792117557341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-fold-unfold.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-143f\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5183,"size_decoded":1791,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5183), with no line terminators","md5":"c0f8abeaa99f87ef1586bdfba463d388","sha1":"e2df2e1eb9a05fd71d0d572515aa022942a6ca65","sha256":"77497ab62352940b4cd53aaca5db57ca9737cc1858eb42872c69ed61c31d6e32","sha512":"d2da26e121702383d3d38abf5d6349d54dd8d157766f4264d43bcbb94a2e5c988fefdbb80639bafc94d0471b0ad9f3883afcba081ae928a9a6ff67efc4573cc1","ssdeep":"96:8Z2BZK3oX1rNBGigLJSwfKl95gV92fzHudD+OlDfjW1gE+D4oVfoTfgA/AO:8Z2BZK43B9cvSH5gV9lD+z1iDTNGfF/Z","tlshash":"48b1d0636b162c78e9cac5ad109e16402714d583b5c1fdac7d34d8d6c9f088b32b96fe","first_seen":"2025-07-04T18:07:13.80287Z","last_seen":"2026-10-16T02:28:41.457568Z","times_seen":36,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-css-e851574a946c0af17cd15906f2b14245.css","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.294Z","timestamp":1792117557294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-css-e851574a946c0af17cd15906f2b14245.css HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 May 2026 02:15:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a0fbc51-725c4\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":468420,"size_decoded":61055,"mime_type":"text/css","magic":"ASCII text, with very long lines (42195)","md5":"ca71ce077acdc3ff12a091e42a5110f9","sha1":"9006f13eab456381cc52184c27668a23826d5f62","sha256":"b92c3c5611d1930a5ae5fea17b6d3af05da41c879c7ec0ed429d005db2f4f179","sha512":"6f59a9ee60fee047fac59eb161e388996686c7ddeb0b542ca7a15639a7fbd3b5cfd2cfba039ee5bfa12485a60e9c2d98ac43da7ffa1376fd330fa404b3681a21","ssdeep":"12288:2qlIW37ObPHlWD3OHnne8Ncb2zCdS5ycxkfkl:2qlIWybPHlWD3OHnne8Ncb2zCdS5ycxP","tlshash":"92a4d853e35401376af7067cb2d4fe0862a8bc92ba4297f7fd24c60985e73da125239d","first_seen":"2026-10-16T02:28:41.45834Z","last_seen":"2026-10-16T02:28:41.45834Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-tabs.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.326Z","timestamp":1792117557326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-module-tabs.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-79a\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1946,"size_decoded":1182,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1946), with no line terminators","md5":"99df136e4914da4e20f0efd2c1009300","sha1":"bfd40b7f82a6aa1fddae01128bb0ec2bd6031e73","sha256":"517e804642b1cf8c8b5b5c3de12e039cdc24af076cc08a8137b829813567c7e4","sha512":"b0cfe27b29d3158dcf115542db264e7f526ce454183f99f36e3823003cd2216d2b68447df0c6164f992b863bc673f8024b2f0b5ee39c29b239bf3b999d7750e4","ssdeep":"","tlshash":"c8412469b640703216ab49b5da8ff303d02266e7cd1505cc704545452efa665b0dfb5b","first_seen":"2025-07-04T18:07:13.80619Z","last_seen":"2026-10-16T02:28:41.459574Z","times_seen":33,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello/entypo-fontello.woff2","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.063Z","timestamp":1792117558063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello/entypo-fontello.woff2 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39912\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\netag: \"68ec39c0-9be8\"\r\nexpires: Sat, 16 Oct 2027 02:25:58 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39912,"size_decoded":40285,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39912, version 1.0","md5":"b24a50124f938a9698219b7f1dd7a79a","sha1":"55aa7750a04f700878d1efc094320b647f18e395","sha256":"23fa9cf5d6c8516350beba0ada66c1bd87998b14711c9be657c5dcfc13fbb146","sha512":"e3b94ed8df5072ee913fb0425f321bf1cbd17755e1483efdf7c01ee0f64ba3113474f62a7aec5d0daf7f450b5409f4788666bfcb1cada51eb1d9d4b0766bd839","ssdeep":"768:qWzTk/iH0uyoOkW8qw/Bip0dP6B8peF9pVkeLxhpLQzbWC/SLpKk:7fuiUuOklqwMSdP6FLLxjs6six","tlshash":"7903f1dc467f2910374e2b734498690a7cd3096c6ae352fa9837625912889cf3b5aec9","first_seen":"2024-08-26T18:17:38Z","last_seen":"2026-10-16T04:17:12.136603Z","times_seen":3623,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello-enfold/entypo-fontello-enfold.woff2","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.336Z","timestamp":1792117558336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello-enfold/entypo-fontello-enfold.woff2 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nCookie: _ga_FXRBN64NVM=GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0; _ga=GA1.1.2139700511.1792117558\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_FXRBN64NVM","value":"GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0"},{"name":"_ga","value":"GA1.1.2139700511.1792117558"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 3472\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\netag: \"68ec39c0-d90\"\r\nexpires: Sat, 16 Oct 2027 02:25:58 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3472,"size_decoded":3843,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3472, version 1.0","md5":"82db031afb34a3937853459f47b1d102","sha1":"76a3c0ea9b2774f2504c972b918abf904f7d7fbb","sha256":"10b30261c5f2f7e3eadc13ffb9ca0000aa3f642656b1201eb8408231ebf14eec","sha512":"f732f8835512bbb927a4dc7d168f29edaf6d6056c4898e5df9eafe417410096691a12c95afbd80c90327747e9bae9fc644b37020e2bf475aa18733b4737080e5","ssdeep":"","tlshash":"4a616d106ab42dc085240e39c470b50b52edf8eec62bf3922286823154fa71d36c66bf","first_seen":"2025-03-04T19:55:45.385938Z","last_seen":"2026-10-16T04:17:12.181345Z","times_seen":1682,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-includes/js/jquery/jquery-migrate.min.js?\u0026ver=3.4.1","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.300Z","timestamp":1792117557300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?\u0026ver=3.4.1 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 May 2024 11:27:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6634ca15-3509\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5064,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-16T04:26:43.483658Z","times_seen":1014514,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-parallax-support.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.339Z","timestamp":1792117557339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-parallax-support.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-1ce9\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7401,"size_decoded":2483,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7401), with no line terminators","md5":"e1c057d0c6d9811a4278d02e4587429c","sha1":"6ba3ada4b5963ea1f1be08e734afacea7d82ee92","sha256":"249625eaf75dc882ced09f2f676032a3260b782b4dc87b933ff9d00472ac456b","sha512":"658795cb44866a2cff2816cee8244f6a13b47047b81932ceb9c42f639c18826aeaeb34d1c2ceebf1600094a263d5582d95abc86eeb4793682c9f669566dc292f","ssdeep":"192:rtsxg0UMMwqRAN9sPpMEiO5qirN9NvwIZ/o9SVTn2nfvuPyk1IAy6yS/w4TQ94o2:ryxEMM1RAN+PpkK","tlshash":"12e1719472b3ec566186931682ee1d03541ef49822f4a42fb72886de4cb8f4e153d37b","first_seen":"2025-07-04T18:07:13.788042Z","last_seen":"2026-10-16T02:28:41.464223Z","times_seen":17,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-lightbox-activation.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.345Z","timestamp":1792117557345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-lightbox-activation.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-126d\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4717,"size_decoded":2059,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4717), with no line terminators","md5":"24bb898b9dd9b677a7765797ed671a56","sha1":"0bc2799ac044c35b612225a3b8a59561c151069f","sha256":"4e4d9b511bf175620e77eeca1736a1c9ff4e59b32fb71cb29ac4fb8024f967e1","sha512":"3b0694721a76b4c3fafc7d1a7eb1215920e19ee072cd8ba123db866f8c68b4fcf78de37933639ebfb274f0a288ae5cc1e384bf81b4d59c660980f6076daa2f27","ssdeep":"96:LVUS5u/U2jlK/5m31HPbPiB5/6Rg5DqpJPwnRDzRWqw/mCkjtCk5M1rfNRx7efNX:5sBx1HT6KaNK6vNjtu1rfN+fNX","tlshash":"a6a1b80531a7648586de70d8181d3419b5276dbec5cdc1fafd71887888e7b4d2163d3d","first_seen":"2025-07-04T18:07:13.805249Z","last_seen":"2026-10-16T02:28:41.466729Z","times_seen":29,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.190Z","timestamp":1792117558190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/ptsans/v18/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icpnt.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 45532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 15:52:25 GMT\r\nexpires: Tue, 12 Oct 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 297213\r\nlast-modified: Thu, 04 Sep 2025 17:27:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45532,"size_decoded":46345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45532, version 1.0","md5":"3f66ddcf744f9d3144a164781c1c8d12","sha1":"a922c0987319ee73a9645918566d35cb90196b3d","sha256":"2dea6190c113af617923c6b71f7f10ffbdf72074556f79963610254fe40e49be","sha512":"ab44f6e75fdef3596d5aad958e14b1b2bedd4132aebe0b136b8f4ae466d2594a68baa1c4dd047e70ac03116dda521934e13445e85ef0f2d56bd341c46d116d86","ssdeep":"768:fYn3iesPbiNr4ew9DQrVPgxlpWLCbyByd2YVi15T85aavJWo0xB6tkKCEg9sJ29:AnSbbzsfuYXYU38MYJWo0xB6yKCEg2Ju","tlshash":"b613f174e6421cb77b86260a76dcfa805c77486536fc2a27baffc02b52ca02045995bd","first_seen":"2025-09-05T01:58:17.133494Z","last_seen":"2026-10-16T03:40:45.086919Z","times_seen":21596,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":4,"connect":43,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/2022/02/favicon.png","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.460Z","timestamp":1792117558460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/favicon.png HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nCookie: _ga_FXRBN64NVM=GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0; _ga=GA1.1.2139700511.1792117558\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_FXRBN64NVM","value":"GS2.1.s1792117558$o1$g0$t1792117558$j60$l0$h0"},{"name":"_ga","value":"GA1.1.2139700511.1792117558"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1230\r\nlast-modified: Wed, 16 Feb 2022 18:53:48 GMT\r\netag: \"620d483c-4ce\"\r\nexpires: Sat, 16 Oct 2027 02:25:58 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1230,"size_decoded":1601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ae626640f932566d4877aa1ec45e49f7","sha1":"994bcc5b27a0f957f86d389bd1fd710233f609b6","sha256":"c26a62595a6b5eff53641803bdb8a03a9ce4918464d357f725340017c0a16231","sha512":"297a71d81f24aa6f5f8fdd69e42e01398b6a51689b557894561952d2a9a774f6f4532015021e4ac484905f1795af41db1ab254e794103b94a6038c6d3138bbc8","ssdeep":"","tlshash":"2721ba59897be545e666eca178b81880fbcd1c6d9e286050842351d08cc2cf3fcf5747","first_seen":"2026-10-16T02:28:41.469094Z","last_seen":"2026-10-16T02:28:41.469094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-widget-js.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.351Z","timestamp":1792117557351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-widget-js.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-4b9\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1209,"size_decoded":971,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1195), with no line terminators","md5":"602082bba8d89a1b6cf7f862dc649bf3","sha1":"f34559a843ef2e1ba2250e92fdaf922d3579a639","sha256":"20bf92199b970fcc32075f6c544dcf59362ae1486966a6dd6e126914dbf0875f","sha512":"98900bcdc1d540f93556fe376b53cf6401bf95aef4b67b13164d9c61ff8e8d0df42cc7087c2237ff01eb2755212d1dbb2a60f0f44aa8d8b61b0c718010c54399","ssdeep":"","tlshash":"fc217199b362b45013fd3aec400e4807605dcc7797164a45a286dcbe4bff9283abed39","first_seen":"2025-07-04T18:07:13.797155Z","last_seen":"2026-10-16T02:28:41.470189Z","times_seen":32,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T02:25:55.991Z","timestamp":1792117555991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://icpnt.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://icpnt.org/wp-json/wp/v2/pages/26\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://icpnt.org/\u003e; rel=shortlink\r\nx-tec-api-version: v1\r\nx-tec-api-root: https://icpnt.org/wp-json/tribe/events/v1/\r\nx-tec-api-origin: https://icpnt.org\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"All in One SEO:5.0.2.1","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"All in One SEO Pack:5.0.2.1","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":55369,"size_decoded":12830,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13494)","md5":"04aec8fb0f74db642a655a894ce4db2b","sha1":"b57bd93142f8a29f65963616fc690930fdebd7fa","sha256":"e23f5e00f9a021f70f8624f0e3c4c42380be46645644f0d3b1f26b6a521b0265","sha512":"e98685f9acff5aedbf9202e3c61723c15b9585f3d36e8c7e364ea0a4610b76e3979f743ff0dde44a3dde9a676c83f29734c32e734213747f7e6f6401b683f35e","ssdeep":"1536:5xkpypZ4E+edJ+ep+eb+eP+e7b+eL+eR+ekUTd8mCYT:8kEEbJ39ZVb9ziUd","tlshash":"e443c7b3d069103e336b57dda198b324b1a59118ce429f65b2fc21b8cad5ef112f362d","first_seen":"2026-10-16T02:28:41.471241Z","last_seen":"2026-10-16T02:28:41.471241Z","times_seen":1,"resource_available":true,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":68,"connect":96,"send":0,"wait":191,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-hamburger-menu.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.337Z","timestamp":1792117557337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-hamburger-menu.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-1ec8\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7880,"size_decoded":2771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7880), with no line terminators","md5":"4df86d09579bda9fe42f59f95d0185c8","sha1":"68e707db750434b999ecbd00aacc481cfe930260","sha256":"bc16327e502ac7f0453bf76148b33618c489d7abc82d1a240656339d9a595afc","sha512":"790a773a556159420f5bd57bd12cdd78000a0fd5998e7216a13ea26a92c68046b8fa9b567a8fc73cdbde570de77934b151ca59c94c64a5a8b1443289228f1aef","ssdeep":"192:F+B00siJuMcKlK6MvFjxMXRlas7Z5VSOUje4:4XdJuMcKlK6MdjxMXRlJ7Z5VSOqe4","tlshash":"e3f1ea89f55180f292af62bd010f5a0291b79e37db094540747d0db92e3bfe426d2f2e","first_seen":"2025-07-04T18:07:13.787188Z","last_seen":"2026-10-16T02:28:41.472502Z","times_seen":33,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Merriweather:300,400,700%7CPT+Sans\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.822Z","timestamp":1792117557822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Merriweather:300,400,700%7CPT+Sans\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 16 Oct 2026 02:25:57 GMT\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7760,"size_decoded":1437,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"34536a2c2849bfa9578a114c2cf3c3ee","sha1":"5cd00d080195b2d0eb960058a9bf777346afe1e9","sha256":"f5f083c4855cdd5232670e136e53e696b160e73cb02b7b39b779e9c3420ad0dc","sha512":"b919286ff9c3ab90b4576294bd572507887f42b8b45fc24b0a733008a5ca2ee914c53d22b8173dc5bf11fe118480441fc0fe39d222d65433465bb46ffbe6649e","ssdeep":"192:HdH3d/gdZ6dbRdWdHOd/9dZLdbMdLdHDd/0dZWdbVdsoE+le4:FR+DwxY1aKz","tlshash":"c1f140a108275814a3875dd573df3d32ae4f2168b044a076affe189caceac3a4365f4d","first_seen":"2026-10-16T02:28:41.473325Z","last_seen":"2026-10-16T02:28:41.473325Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-includes/js/jquery/jquery.min.js?\u0026ver=3.7.1","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.298Z","timestamp":1792117557298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?\u0026ver=3.7.1 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 May 2024 11:27:17 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6634ca15-15601\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":29985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-16T04:26:13.756952Z","times_seen":1111781,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-default.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.318Z","timestamp":1792117557318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-default.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-6866\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26726,"size_decoded":8528,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26726), with no line terminators","md5":"3dbfec4e2167b3a282bfac0b6b211a69","sha1":"b6cad92342fc4e8fc363a1e8ca5b52e91cbc84b0","sha256":"47cc0598f79c793213c8725e3da13c253c637c5f3260b6222d66b0072c0436b5","sha512":"12952827c42ffc966dc0f77198f5eabe19fccb8bb58ea2d12d1dc0d3854bd81d4bd4ea986b1031ac72d8db9e77916f3ff682404ae28c190d92e3b1d2bc774fc5","ssdeep":"768:nogqmPwhYYy5JAzm666AYZLcH7JpPjWVv+tbxp:BPFdAS6AYhcHWv+tbxp","tlshash":"71c2fa4df212607242fb91bd606e26062132dc76650140b8787ccef4ae7af5563e7fba","first_seen":"2025-07-04T18:07:13.809991Z","last_seen":"2026-10-16T02:28:41.476231Z","times_seen":32,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-gallery.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.324Z","timestamp":1792117557324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-module-gallery.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-94a\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2378,"size_decoded":1198,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2378), with no line terminators","md5":"b8d67f2d02de3cd3836bdcc51e9d71b1","sha1":"e196842355ba48c885eb23f3fe75ff1cbe9eefe6","sha256":"71768e2e37a6bca97318df3873c7d56c404c851f5a47783c96eb9d37705c1cc7","sha512":"b8edf61b06e99b822d7490ebf6793d9b1fb37a860b36e4f0721dbfbf3419ee96dc5d2ec7d8fa462765413cc185ac85c3b0bf635ad13f58c514fa567b438457f3","ssdeep":"","tlshash":"e641649a76696090249f10b8050e61019129bcb9870acd1d99a70cb7dd3eea87775f3f","first_seen":"2025-07-04T18:07:13.794895Z","last_seen":"2026-10-16T02:28:41.477203Z","times_seen":34,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/tec-user-agent.min.js?\u0026ver=da75d0bdea6dde3898df","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.332Z","timestamp":1792117557332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/tec-user-agent.min.js?\u0026ver=da75d0bdea6dde3898df HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 07 Oct 2026 01:51:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ac5a58e-120\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":288,"size_decoded":556,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1b5feb0e8fc528175f9ac2a41082e526","sha1":"0c8a21aaff0fcde306d4115aebec00df4153173c","sha256":"ea3c2a697de741d64d97053000c57f002343ad420ab46df0d4ede67fbf54ebe4","sha512":"fb26e40d1ce802df10d8b9604e336a30f715d4b40f267ceca848e8a0c92d54007774eb3cacae664ce3d9cc6390e0d5d3992d557cc4cdfe562ffbddebbd6ffe23","ssdeep":"","tlshash":"98d02b05a2ccf03610362b90677bb720bf074234d5a4a0c1222ccdc5b0804b7c459dfe","first_seen":"2025-09-26T18:20:16.40605Z","last_seen":"2026-10-16T02:28:41.479261Z","times_seen":285,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.343Z","timestamp":1792117557343,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-50f6\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20726,"size_decoded":7521,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20599)","md5":"0ec2cd5364f72ec1642db191a145c6e5","sha1":"78eb8f4c19c16808504ddb4ba3d53713a6b4f9a9","sha256":"c3b91fa542f11865788928d7223fde4fcfe2b886bf3be4c3c525afc59fc563d5","sha512":"b5371638d9ee03774d0bb4afeadbfb5f61c89f5741aeecb907153aaa95c31181d00ac3f6f5ea5e5bffed94c38c4827b515d2866b3f7dda9a0bf9899c00fba17c","ssdeep":"384:Kbroi4IJAJW68RddRHXOvC2xQ+n//Y3C9DFvw9z/2s4LN2ZsZx:KQDCMQ+n/rRFo92saNlZx","tlshash":"74921b58f1a3b21783ab75b86c5f240c3b72a626c907c0057659d8e86cfde84a127f3c","first_seen":"2024-12-03T18:27:54.028107Z","last_seen":"2026-10-16T04:17:12.171895Z","times_seen":1871,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-mXrVGjziE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.194Z","timestamp":1792117558194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/merriweather/v33/u-4e0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmYiSeqqJ-mXrVGjziE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://icpnt.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 97776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Oct 2026 16:10:46 GMT\r\nexpires: Tue, 12 Oct 2027 16:10:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296112\r\nlast-modified: Fri, 29 Aug 2025 16:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97776,"size_decoded":98589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 97776, version 1.0","md5":"e6c9a38367c7a204d3cc630e657c5f98","sha1":"f04e08b1d0f67f8a0e91a0695317caa49af1ab66","sha256":"a851aa2bdd01adc4d11d1982670db59caf5dd13efb42d58e83191e61b532aaa8","sha512":"9bd74b8b284052287106ac620ddcb8cb321ed3312f4e6a8dd6e9525737e0e3623476ddd996687454e2fbf4516f01a387f4d1f36c8b7e38e02200eb8be1ce2b86","ssdeep":"1536:V4y4wSy1BJR19N0AqeZkiM3QrwFQilbZO/G0qhBlF3jlN6Jpf+mHIR:l4VyjJRzN0peZkiyQ0vl9jlhj37mH+","tlshash":"d0a312dfae25e789fb890ce93e7625ca050fd18cf546ce899e3c48a91fd1905d833245","first_seen":"2025-03-05T20:22:14.554251Z","last_seen":"2026-10-16T03:27:31.110548Z","times_seen":21580,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-FXRBN64NVM\u0026cid=2139700511.1792117558\u0026gtm=45je6ae1v883449836za208zd883449836xf1\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385423~120469145~120469153~121246026~121246034\u0026z=165786973","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:58.340Z","timestamp":1792117558340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-FXRBN64NVM\u0026cid=2139700511.1792117558\u0026gtm=45je6ae1v883449836za208zd883449836xf1\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938469~118897920~118897930~120213116~120385423~120469145~120469153~121246026~121246034\u0026z=165786973 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 16 Oct 2026 02:25:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-16T04:24:16.699052Z","times_seen":1110727,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":36,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-shortcodes.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.322Z","timestamp":1792117557322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-shortcodes.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-5a40\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23104,"size_decoded":6720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12522)","md5":"35b0ff93ac3cd333cc1b9b63a1107bf6","sha1":"18a3e55a515757c65d1d0e3d38f3fa968985c586","sha256":"0840fa659e72722df491ae6e7f5a377f981e8f29461482c23690ffc0e15fcc51","sha512":"858e9cf903c6de7c27d69b55543bc59b8809abe630893a37d0edf16a8cf1bf314e1eaeb6714effa1d33390622144c58b0e5db37e60d159282cb72a34bd687321","ssdeep":"384:kt1e7DU3LWQjnZQjnat1TRKzDsy5+4X4JGp:G1SQjnZQjnaTRahp","tlshash":"3aa2d8ceb6c6b305038771bea62f9805a17ccda25548c5baf9b08449ff312589633b7d","first_seen":"2025-07-04T18:07:13.807504Z","last_seen":"2026-10-16T02:28:41.483014Z","times_seen":17,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/siteground-optimizer-assets/avia-module-video.min.js?\u0026ver=7.1.3","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.330Z","timestamp":1792117557330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/siteground-optimizer-assets/avia-module-video.min.js?\u0026ver=7.1.3 HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Oct 2025 23:29:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ec39c0-575\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1397,"size_decoded":969,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1397), with no line terminators","md5":"356444667f7817bf53837249471443a6","sha1":"0dfdba6053bc3e1543707f7f77d6ab9e75acfe63","sha256":"632e379ecbe75af359ed620e8e5d12ea51381894839a143619c47bb9435afc25","sha512":"ead3835668fab21ccc8c05d7318dfb8103a187a7923104c6dc557ce523609c281ac67d1d924122b2cc658bd6cd005fc913214e765248b15619d13905f99c3de9","ssdeep":"","tlshash":"442156667149406f00bd5e7ca90a9b327b11167b8a19c89bc8f649308233f0e7e66c7b","first_seen":"2025-07-04T18:07:13.814053Z","last_seen":"2026-10-16T02:28:41.484707Z","times_seen":33,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icpnt.org/wp-content/uploads/2022/02/logo3-150x150-1.png","fqdn":"icpnt.org","domain":"icpnt.org","tld":"org"},"ip":{"addr":"35.212.105.144","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://icpnt.org/","date":"2026-10-16T02:25:57.358Z","timestamp":1792117557358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icpnt.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 28 Sep 2026 15:19:35 GMT","end":"Sun, 27 Dec 2026 15:19:34 GMT"},"fingerprint":{"sha1":"C9:EE:4C:FE:53:A0:F9:D1:93:BE:B8:76:10:51:12:30:FA:35:EF:16","sha256":"51:92:31:4A:1F:1B:8E:DC:B8:55:83:61:CF:64:7B:44:26:2A:F4:05:D9:2A:72:0F:99:29:D4:29:93:EB:FC:73"}}},"request":{"raw":"GET /wp-content/uploads/2022/02/logo3-150x150-1.png HTTP/1.1\r\nHost: icpnt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://icpnt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 16 Oct 2026 02:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7232\r\nlast-modified: Thu, 17 Feb 2022 14:22:16 GMT\r\netag: \"620e5a18-1c40\"\r\nexpires: Sat, 16 Oct 2027 02:25:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7232,"size_decoded":7604,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f592f10bb4b8429fd5f4747856f88d28","sha1":"9aef0f8324649e88acf8222276e8c8cf0fa598ae","sha256":"3393d5f9a71ebf46f96a38c863aa9ebc21b1375c9da4f4207e9700200659048b","sha512":"fdcc24f59f1f3a480f03606b607093ef0b8c18a462f9614b2d405345a9bb938710fc80cbfaf91f5a740a42081e17dde6efcfe67a449969156cdfe39099e86e1f","ssdeep":"192:Nk2xmxcN3U9RrWbTiNSf32gvFInW1JYf9w:YxcFUHrWv7hvFIMuf9w","tlshash":"21e1af768095062f9af455005001abcd7fce3bbb3f986770d6066e31525376db2f5281","first_seen":"2026-10-16T02:28:41.485344Z","last_seen":"2026-10-16T02:28:41.485344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"icpnt.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
