{"report_id":"91aa721c-eea0-414d-9f61-b6c0a80d8380","version":0,"status":"done","tags":[],"date":"2026-10-08T04:27:04Z","url":{"schema":"http","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"104.21.44.121","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"title":"台灣專業人士協進會 – 以各領域優秀專業人士為主體，推動台灣國際競爭力之專業評鑑、培訓與推廣組織","dom":{"size":62016,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7295)","md5":"96cf84d5cd393107514547c07b478ed6","sha1":"06b0eec9978c5090e2c464f7c9424d9a77fd5aab","sha256":"bd9a2da9a8d29fd5ab9a0383d251836feb3cc6afea60a649abae1c21bd346fb4","sha512":"ad664d43c536e5d647cfa2c9003d5195a63cbb87d9355cd79b94485b4e2159c261a57280b2ed9aabf9f4131ad47b8a9873d4562868fb221066feacbee0084d6d","ssdeep":"1536:CZP+lu0KLoFb8LioreXhBrUHi43/8HPHMI8IIqfhUZkTLrZ/0OT16:C+u05Fb8LjeXhIkTLrR0OT16","tlshash":"fd5393338508a82985630384b465735d63a6f73dd7c248e4bef8dbe4e7cdaa54072bc9","dom_hash":"domhash50034986d2ba871b269a528464a1e169","first_seen":"2026-10-08T04:27:18.001443Z","last_seen":"2026-10-08T04:27:18.001443Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"104.21.44.121","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T04:27:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"atprofessional.org","ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-21","domain_rank":376593,"first_seen":"2013-12-17T12:57:15Z","last_seen":"2023-05-21T05:19:08Z","alert_count":120,"request_count":40,"received_data":4802494,"sent_data":20968,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.2.22","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.3.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:5.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":6,"received_data":76682,"sent_data":3393,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-04T22:47:16.540786Z","alert_count":0,"request_count":2,"received_data":30817,"sent_data":1266,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69e8aef687972a0c60ead66bd3f306c8","sha1":"ce6e9ece5d7c76e24296025eb0befc6926e0aa50","sha256":"5367b900ff781f056dfd5e6d6a6d43b58bf18b8bec09b4cf5b250f9ce5d70d1a","sha512":"81fb6432093679c4adcad49a21b16ccdfa42b4ad49c9e0367819701fd7f2c0c1601a3751902f5ad3fe6e953775e7ff373f85bcd7d2f3e0522b43a49bb1994a5c","ssdeep":"","tlshash":"4841e0b52691545676f208b3f16f5e0f3b214a0300caa9365254e9a0397dcd5c1fad1d","size":1944,"data":"","first_seen":"2026-10-08T04:27:18.061377Z","last_seen":"2026-10-08T04:27:18.061377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f740b956919fbaa673bb496be184ac1","sha1":"fa7d2aef8069f1be31c655fb889c897eae36757a","sha256":"c8d83f1bd6a850a6f197b9bcce38828132ad627358b9c2c78e7c4bef4d22c304","sha512":"e35920e657641e1a0fd7854febd24180da274bf4a9e243a3d3c356cb92281f7174c451d2bf89a98f618368cfecdc77fa11308eb8665b2719b4780390aa755364","ssdeep":"","tlshash":"93417b829b5c80fd88267269ad395315a67acc73130905b2be4d2c9dec54923c7cb9be","size":2326,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-10-08T05:12:11.99158Z","times_seen":15904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d220637da53bc536a7909991965bc83","sha1":"c86b966cc33c153a9aeedd874fbcad781d373efb","sha256":"c164dae24e3db75c1c8ec368c059ba0b5a57917d2f0cf3619a9518c8c6911222","sha512":"5dbcb26253d5777aec4dbc7973a3d4e8206e60ff956cd5550ead077aa78a2bbcb93d17188dd41aae1eaf3b78f30e5f8ee54bdcd384eb73b343a5779568b18f63","ssdeep":"","tlshash":"604102b2c38d249bcd73120190ee66d4ecbee437e50b20f7fadc61741098229525daee","size":1925,"data":"","first_seen":"2026-10-08T04:27:18.063385Z","last_seen":"2026-10-08T04:27:18.063385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d42f5df16ca985572f164e99834c6d99","sha1":"aad004e25025e296ae39302dce044793e4e1bb46","sha256":"41d979a92299a4fc042514cfcdc6a735ab82d4da6ac88eecc911db130c47fa5d","sha512":"932ee2d279f4c18cf9e434e1dd084e7d16713cc6f363e7492b848a6398b3c69b0f8b82291f6df23cb849003c0e9d51676b4e71593aaacef10d45ef5e6edb96c1","ssdeep":"","tlshash":"d351cc1e36865cacbc1b693fe5d8b7e891ec0c53f508e417f84864614b25eadc0a3b39","size":2575,"data":"","first_seen":"2026-10-08T04:27:18.064227Z","last_seen":"2026-10-08T04:27:18.064227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1324e7861a98ad284c240fd1ba95545e","sha1":"a8036690d94fbbe9b628b9bb511b987273ecfe46","sha256":"eb0abc27d2c33fd34836471bd47dc51dd4a408e0c088e73423e1a5a7ff2fe04f","sha512":"c55d2da6ed1001bbd65b435210a10122302b1eb3cf5d4cf2f303a6f68abac566cd8e57fc858e847e38661d7972272358807f8736c2150e3909e5a777045c9869","ssdeep":"","tlshash":"d7e0e5a2e31e08685c15117715e4f5897ccc137269101c2aff6c983050b3f23452ab58","size":418,"data":"","first_seen":"2023-03-07T21:20:52Z","last_seen":"2026-10-08T04:27:18.065089Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63e968af8c5f3ae90d45a280bcb6d00a","sha1":"160a7c06b168440d63297ae1ec300d7f8ce3d897","sha256":"e62faf8d6519889a347805582d3e29a84a5849a599f3016b0a0acfd0ed97463d","sha512":"0a1676932a90051819556cd409f7e6850bd4589e950b085597f292f467b2ea821bb1cd312cb3b58701c96a64ad92baa5f90309cf20acd235c4645aea4e973bf3","ssdeep":"","tlshash":"57c02b0cf70a00df400333c8284c19c834391038e5812d3b8c7a5000d0f082e4813fdc","size":139,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-10-08T08:03:18.046724Z","times_seen":5333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f9d962fec91b1421d50a1ed0433b51a","sha1":"2e6a58364e8211e0d35933bc657e4a495cdb018e","sha256":"80b46273093ed35ebacfb7c2e8b0406d6b727489f1cb84d14e585b531e0c4398","sha512":"501beeefcddda9689432c68d335554c98ee6b93e030d70bc1babd70109356a87ce5bc63e1ba96cacfb5d58443b8f3850f607edd5076e395135e4061812b0ad24","ssdeep":"","tlshash":"f231010e5343ed201ef6c2d9de6c19f6ecd6c34a104b8492a6fed107229ca0af466937","size":1697,"data":"","first_seen":"2026-10-08T04:27:18.066364Z","last_seen":"2026-10-08T04:27:18.066364Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1503186c81dfc6efa7a388a4b8113898","sha1":"5009cb6668aada32466569d5c3fc320c6138f62a","sha256":"f967ab9d754c6c9b5834719e3be12744d09e929e84e2edccdf90f9ef5c6d5780","sha512":"2f61ad9e20e5b139a769e836a72e23d763e47bc947486ef838aba8a4376b93e6e30090266d5cb218cbca9cdd48554dc99622eb232d8b9f308f2f216d8fb201da","ssdeep":"","tlshash":"b701891d0706446f156bb050b139d9ceec6ace66042a04d8edf861ade1e29988f669c4","size":808,"data":"","first_seen":"2023-03-07T13:01:57Z","last_seen":"2026-10-08T04:27:18.067554Z","times_seen":1096,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc970bd31387cbb2a2c6e0fddc26c79c","sha1":"92465f572265c27be05f81408d536efa86e0f37a","sha256":"8c8196ae99a0c0d95c71bd6905e736d690aadb3bf376906469bc908103ab7a4b","sha512":"a0544011514cca90f1fa89c81a3acdf18e1a9bee128fe2eec09c0f172facfbb14ef16133050b6a86d3e81fd127ded19c2736f10bee776bc62704bea4897bde52","ssdeep":"","tlshash":"d5c08c0055846d8920b4c39c036c22607a4b29168c5b072a9a8885c41fa60f8c849a82","size":156,"data":"","first_seen":"2026-10-08T04:27:18.068156Z","last_seen":"2026-10-08T04:27:18.068156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9fd086a485fbc237d9921d57f1c7895","sha1":"020cca2110ed554a802c97afa102df416770f47e","sha256":"d4774fa935220ad35fbf855cceaaf5e717d5cb3a0d8de5033ec81416e378f167","sha512":"17f786fb9a55e4d7dfe128ba88b0b96904757e670b24b9ae195c575a8691a9543b9155a282b3a04a40948363437d71743a42bca4e8dbdcee346c4708fcd0a4c6","ssdeep":"","tlshash":"12c0c000ac4c1de540f017d83d00f2331bee13123d4008010d4decc00e100049820043","size":166,"data":"","first_seen":"2026-10-08T04:27:18.069233Z","last_seen":"2026-10-08T04:27:18.069233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00d8694ef0e4f8f026e13d57ca8975c6","sha1":"ff528ae12776ffe7aac9366f1f4fb234a1df9e4a","sha256":"d51581e53d1254540c25519d9f68654726b953151e2ca41c272b22bb7187a4c3","sha512":"47b9d944e0ffc10687c22d3c57fc58cf4b0b0051ad76131f156edcb0c5f278b3550a760fc472de0ffc573c5352197e425d6b4d7ae387e3023ff97ac705172037","ssdeep":"","tlshash":"aeb01210e9980c5522b032f0371594a54fc324066c1188611c8bdde81e13a50907a58b","size":99,"data":"","first_seen":"2026-10-08T04:27:18.07037Z","last_seen":"2026-10-08T04:27:18.07037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f89263c0c2f24398a1df52eead69f5f8","sha1":"850e9cfb1680eb1df4365889724e69f38df7bb9e","sha256":"125ec330f66081e7dc9f2814e9ec18f4e2d0baa1936d497375eedfda7ac12e5c","sha512":"0a9435b57e67be8140ae38b643a6d4a2d66f83181f54433d13000a637d76eb8eae95716da2f18f692d36bc4f2c0dc4a3390c0da3eb951df2acbf2d0e6874bb5c","ssdeep":"384:Y0M5w2j16xNN7FU2CyuIC+VhB2Dv2lyAiVK1IU4p3S3OVKEkl8bXnC:R8Xj16xNN7C2T6FU4p3ZVNC","tlshash":"625274c8f3ee1185c67630b85c8fc1cd6b7e6472e4421aabfe5c545028d88785b25f2d","size":14280,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-10-08T04:27:18.020019Z","times_seen":3992,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","size":89496,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-10-08T08:30:49.987962Z","times_seen":14946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eca6ed028850aa07d5f4a003fd7079e","sha1":"1f02b8c5485108373bdd14a96bb1fe22d72e157b","sha256":"9556bca5ad5eb24439887d7339fcb687088776bbaa995553aa489c9607cf9e19","sha512":"6328977461a8c077169132ed6071bd785496b58a91881d169753784ef916ad88eb3b7fcfcae1389933bd2bb32e45cf685c38682817102be4eb0ac3749321b9f0","ssdeep":"1536:tjaxl8yra469QduD5VFg2WKl+2qCd+m0SNpINVp7Nu1HfwvoOdV3LU6AKSx:N469QstWKALm0SbI7u5WogbpI","tlshash":"7fc33cd87151b432029766a6453f0a0ff23b9d15740b456cf328e4c87e3c9a991bbfba","size":119386,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-10-08T04:27:18.03437Z","times_seen":5299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/themes/kingster/js/script-core.js?ver=1.0.0","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"989f77341034f92ab6f549cc52440139","sha1":"cfc95b1b98323b21d05d7462e0bed6332f67cd58","sha256":"521cb5ca917586cc1fa5e1dd24590a46058e07ab2819b0b644c821bfab9bd1c0","sha512":"d60dabf68a0a091097634fa64fc904d57d3fc059579e88eab26b392761e1ed2f21a0d509215c953c1661a28ecd85e21c2bcb6a60c7b9c09ae9379f4ca1322aee","ssdeep":"768:wlUEf8C7XMeZQtOQmOIBJAdaO3jnGkUkXl2C5UXA4mn3a7:wlUEfNmmOIBpfkXpUXT7","tlshash":"7543e9c4f34f227a49eb72a1563f5184ea7ec43786018064b1b976982ca254553f3ffd","size":57157,"data":"","first_seen":"2023-03-08T02:21:46Z","last_seen":"2026-10-08T04:27:18.039188Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/themes/kingster/learnpress/kingster-learnpress.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c163d869aa87ba87ec15a34cb992303","sha1":"a98b089b35a34544548c52fefdcdb7fc7a3dc396","sha256":"861bd453d188cf427c6e1fa0e9de221642c1c8e093edd51fb28d6f7da7985412","sha512":"7a3bf002dfa3df543b99e7c2ed9abc66182f0b11ac305d442f35cc064b557f916e11a9afe208673e00138ce677230ff6b88faac4f813231439111ae20f1076fb","ssdeep":"","tlshash":"6321465cf38d22d86036399d36dacecf12fa26415b734473dcec06b845c69494213de0","size":1435,"data":"","first_seen":"2023-03-08T01:42:57Z","last_seen":"2026-10-08T04:27:18.055537Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/script.js?ver=1755149150","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe0b35492f3eb8e716abf275aff4e44e","sha1":"934eefd2ed355c97ed4292acddd030849b4f673f","sha256":"f86103e8429689e680842fe125e3749f4ce92f2cfd2955408c5f90c550c5b11b","sha512":"3c4f32922fd2c6b1b5f8b059dd2217b2360bc89fb5356ea3499fff28ec15b91a2126530c8e2a1ad7635f77435b6a193d6a9f57b5c8b11a882c48206dade28dd8","ssdeep":"6144:Sw9zPOYdfk8ALbvje9P4NnkrT6uYvZEQcIo+d3M7fK6jrdJ:Sw9zPOYdfk8ALbvjeu2gVM7fB9J","tlshash":"df844a8d7291353643a772f4502f450ea23b6454680b89acf67ad4e63cb8c8e217bf7d","size":377330,"data":"","first_seen":"2023-03-07T13:02:51Z","last_seen":"2026-10-08T04:27:18.020607Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/include/js/page-builder.js?ver=1.3.9","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a0fff79e4cbc944ca76a1ede8a41e58","sha1":"73f4585d42ddc4285945a6ae2e560c8d34b1263f","sha256":"8a8a44ad9f39da3914b9e1f688f355bb1aa10e5b06df64bd884effc90dd30111","sha512":"0a0cae002170342e60e948e8e2d50822c1a1737f9efd038a9cb277a6f99048738319ae9f3b31850df52ea8ffc632f1077a8f6c7091c1447aeb4b0009f2172162","ssdeep":"1536:AbY//sMXYVbqomsdO2E2LMAvQlJaKa+xrvnvhsD0nODKRGsZRkbU5mGxh1F:rL5fYgh1F","tlshash":"ce932ed0731eb81e91d63366247e7544af3ce732818180f1fcad9998a9e910953b2ff9","size":90359,"data":"","first_seen":"2023-03-07T13:02:51Z","last_seen":"2026-10-08T04:27:18.041875Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/wp-embed.min.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ed6038a5dbf62380de72a681340afd3","sha1":"1b7f829b844eaa1a3e2d05f51fa81d6579d76738","sha256":"6ebcda7a3a41ef97f0b4071160ceb1020e540fdc0f790079a5c2ef01ab654fe0","sha512":"cf69087b8f92f7b81efa788c3eb0b8a551405cdc7fa137e09a918349617359715ad5ef833f901e8d6e80c9ff20f63091710b492224e2ad23848673995dff5610","ssdeep":"","tlshash":"9021302a3628c93a94db10d3b98475c6c2a217ee680114e209788c49f9a8f97996aec0","size":1434,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-10-08T04:27:18.026258Z","times_seen":2677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/wp-emoji-release.min.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c748456e1cf97f3303ee25c838b1ad76","sha1":"80b17d30a5e36f28c203a0cfc798792b532d85e7","sha256":"3685c3818240f5f390073c7d04f944a5cb5d848093224f3a7888034e8c050eb4","sha512":"2a649d4a6d8071ed0cd3945ecb8f53f5184f4fde392b6ce4ce56b37d15424c12b87f05885d63a13b27c2c339a525138f6c3e9ade4d20473fe13e30b3517a2e69","ssdeep":"384:71DjuPTbUUh31//bEP+XgA3pkmQeffJmp3:xPUUUh31//YWXgAjffC3","tlshash":"0052bd5b732b5f9b743e3bd78d96cf4ec5da55932580e078cafeb68229a00598374c80","size":14246,"data":"","first_seen":"2023-03-07T12:11:09Z","last_seen":"2026-10-08T04:27:18.015339Z","times_seen":319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-08T08:31:23.653004Z","times_seen":88852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5702feb8810be04c356543d737724b","sha1":"3385fcee5497e03be43e3bbd17e052bb533f3994","sha256":"60f59e08903c3d0b70e928af542ded081c10a790b6c198c7026788b77f4256ac","sha512":"af428a9afc2bd46b0dfa9b0bb2327343abee3b18c6a23fc6518dfac366d596a991ab85fa2e6dcacbd693d8a5af06b3889973fc1dd46d6fb482666b9875fc8719","ssdeep":"6144:slhZz/xgM34F0CXHUMo5/gv9oWGGKRxSifdGknTKbl7wnoyJDKgOfqMbxL:slP34FWYv96RxSifdGknTKbl7wnoyJDs","tlshash":"50643be8e531787a04e743db905a440433b5e92de30785a2f1bbe1695c5858d02ebffe","size":327000,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-08T04:27:18.019467Z","times_seen":3634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/ui/effect.min.js?ver=1.12.1","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65b229b1cbc084072342bfa5f4e1d766","sha1":"2f0dd9a1759cdc5f43c1254364341e319daa0c33","sha256":"40aefaa6011c37cea92dd8c282018e245ef27ab7873856b79b4a75c8fa488427","sha512":"e6107c8d6933f91eee9ad6067740acaf779dbade8d04f3673ebc8feeccbf8b744d3ef78812378e96f3357bf16b8992224b2e76e5e93e757413a969d2f1b56f7d","ssdeep":"384:um3aM31LuJz+Kp3YErtsiCzL4LGvUUkzrT9t:JXpHjzL4UgXD","tlshash":"3472f8dcb490b4698ba7aa32102f9a0eb03a5d0c724f4584f12ac4e9bc7d64d5077f7e","size":16968,"data":"","first_seen":"2023-03-10T12:22:11Z","last_seen":"2026-10-08T04:27:18.003531Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://atprofessional.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","line_number":2,"column_number":709}]},"http":[{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/ui/effect.min.js?ver=1.12.1","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.413Z","timestamp":1791433590413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.12.1 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSz3Z2O5KAdgtI7TogCW2EeszX89bAjjUC7xHboZQWG3oSyY0u59JIciYgrBo1R%2FP0UANS1DxHF440DpjwPrhKV349zxAkIBdTBTOhhZ9YmSU%2BZpRmavxoJNKLCPSDwILK7VL6A%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100951-4248\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a472634418807127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16968,"size_decoded":7621,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14576)","md5":"65b229b1cbc084072342bfa5f4e1d766","sha1":"2f0dd9a1759cdc5f43c1254364341e319daa0c33","sha256":"40aefaa6011c37cea92dd8c282018e245ef27ab7873856b79b4a75c8fa488427","sha512":"e6107c8d6933f91eee9ad6067740acaf779dbade8d04f3673ebc8feeccbf8b744d3ef78812378e96f3357bf16b8992224b2e76e5e93e757413a969d2f1b56f7d","ssdeep":"384:um3aM31LuJz+Kp3YErtsiCzL4LGvUUkzrT9t:JXpHjzL4UgXD","tlshash":"3472f8dcb490b4698ba7aa32102f9a0eb03a5d0c724f4584f12ac4e9bc7d64d5077f7e","first_seen":"2023-03-10T12:22:11Z","last_seen":"2026-10-08T04:27:18.003531Z","times_seen":12,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/col-icon-3.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.515Z","timestamp":1791433590515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/col-icon-3.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-3e34\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2Falk%2BKniHzFNgZStN%2BWRUXMrc5XctMU0%2FnGK1R%2FmEBukCFY8UHhqJ1CD1vbSAxAFmwEA%2BtENOnEjjQGC7kh496QeyCXSb83wgD%2BlzSo451%2BxGfv1qNkvF7Yu1mTRujKZF98GXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344b8937127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15924,"size_decoded":16788,"mime_type":"image/png","magic":"PNG image data, 40 x 43, 8-bit/color RGBA, non-interlaced","md5":"b775409a12d532db652463f78564a9ef","sha1":"dc2b49459079b0de94322d54b01faf052738967b","sha256":"e1fed6f83d480e226a0525497a774b7d04ff54e01d44b0c7062917a38f54cffc","sha512":"a2767b14ab8743e7b37033fb673d50f8d5d5cd6602cb0f21236fde625b574872b5fb65c77be268c76746c4165fd147b8dd989a9abe8dcdd454b02ca8ef7f4f5b","ssdeep":"96:5ShS48kEWmPIaDxNX7sc5OPr6HVo8p/nj/4AZr4z:5SE9k6f+iVomb/FZcz","tlshash":"d162b624faf1b15ae889e5313dd524065c370903d9c05d42b6ce8c626f10bed2daf696","first_seen":"2026-10-08T04:27:18.010541Z","last_seen":"2026-10-08T04:27:18.010541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/footer-logo3.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.522Z","timestamp":1791433590522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/footer-logo3.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-57ea\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vllfvuJfNejxz4M1d9XvkYoAIOORar6ge5WCnYD03AOguoNBhIzmB53e7qihiFMpumMbGRaxfJKpqx0mR08rcXj%2Fht8qq4Ky6bKg%2FfGH%2BHJi4hFw9y6Ka6ew5kt7jYkPqPEanQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344c8957127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22506\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22506,"size_decoded":23360,"mime_type":"image/png","magic":"PNG image data, 298 x 60, 8-bit/color RGBA, non-interlaced","md5":"4726111f281f1ce11eb393e21725d1d7","sha1":"9c3be94eabd5717f6a33338b9445515897447098","sha256":"9ce75e0cec6d185fe4950ec5d016d56798755a44d93e31c3e22f34c5d001cc82","sha512":"0f75129f2912ad5605fd0960fea8a14712c2c21d827d3cd4f67d15f4d35a2cb8908a400107b433789c3391a4b72100cdc868c128dde57f79b55a70afd39c072b","ssdeep":"192:bSt5kt0sTYCEfVIVTCR+cTChVkm3Q8MfjbwWlM3uPnI:Oct0sTQ9IClTChVFMvwnuPI","tlshash":"29a26d62fdf23644554c7a3a16c2514a9fb34a4bc5406ccdb6dd88b24f027ec4d5fa87","first_seen":"2026-10-08T04:27:18.012033Z","last_seen":"2026-10-08T04:27:18.012033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/themes/kingster/css/style-core.css?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.378Z","timestamp":1791433590378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/themes/kingster/css/style-core.css?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Yu7xddxTiUrqxqdB9f%2B3cDhSS47u9GwZzUhU0Fxz7sVBo8JH10vuoF9fvA1wRjHvNX1Zla6hsjg%2FX%2BfqxYFHxHoqPehjIAFkrnCB3NMJ%2B6zrbF3Yvqbkg4mhUszAs%2BeIhJrzU4%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110091b-1b8cb\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343d8737127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112843,"size_decoded":21596,"mime_type":"text/css","magic":"ASCII text","md5":"1e3eba19129c16d5b0cd346d4ff77ac1","sha1":"c926e5e37f7f4d38162a0bed267940fad04dbd09","sha256":"942f0de5f5b5d827f4cc87e2eae81d5afca90ffb6adb452b9f88e15da52be9ce","sha512":"4e4f4793924c3e1bc3c578452a3f8ca89e36aab6a0c60736b3765618364c4e9e804e7498c7f71fc556e24739ae9e80d1981a16a9c95070faa63b334471b1b5f1","ssdeep":"1536:0Ia8mqZeEwdJt5IPHlD5tRn+Es+q+A2RovfMXadugr1TxSbkX:6EwqDn+Es+q+AMovfMKT","tlshash":"6db37253fd1011346e1373f4bed667c1eb944e03a782d8fa98921b0ae19f9a901b3b5d","first_seen":"2023-04-24T10:56:41Z","last_seen":"2026-10-08T04:27:18.013273Z","times_seen":94,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/slider-1.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.501Z","timestamp":1791433590501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/slider-1.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-643cf\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoQ%2FVGBalYWPId14RA5beysQpDZrbmffnvk4YvX8bWVvYPKht3onPseK8OANMNAt4mGRcIYczYQt558M5euE0qg2B2ZImDlB%2BcKGTkKIx%2FGvwM3XrH1Bk97%2F1Fw4VIufOySEX24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344988e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 410575\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410575,"size_decoded":411434,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x1119, components 3","md5":"d89786f006bb0ee1a9bf58517a2056e1","sha1":"e555e2f75f8a8dfc6377bf70fa3a3f16f4015c89","sha256":"d479d1c07c8d3a89e83139e363f500a28015a429096edf953d02625289ad5a09","sha512":"2777253b4da54e5c7099059115fb31ddb037161021949406dd0b062e8b4e322a73b7b148ddabff66188e216bacb62ff9cb103cc305e899864fcfa96afdd4f210","ssdeep":"6144:jUdSm5fbzw4fTub8hBLq8ganJyXTzr8bG9vMc7caqar0MYcd4S6z+0a4:jgSupzBGynUXX4b0vUaj0Mr4Srq","tlshash":"2c941234d5102bb0f688293b9fbd18292934f9d0d9618d988b3b67db3eb27b12d3d444","first_seen":"2026-10-08T04:27:18.013918Z","last_seen":"2026-10-08T04:27:18.013918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/wp-emoji-release.min.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.512Z","timestamp":1791433590512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wamuq2gCMSG2fVtUXEMVeXLQUMgLF5VSi2Kr%2FviGxq2ax4UE3CS3SbeJwR%2FVGUmdDA3shMkYzfND28x3tC9n8aUBbTabKd%2FPZp5lnHyh5Ww1nmY5Nuxniwjb2%2FnyGyMOBRjBJLc%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110094f-37a6\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726344b8927127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14246,"size_decoded":5711,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11287)","md5":"c748456e1cf97f3303ee25c838b1ad76","sha1":"80b17d30a5e36f28c203a0cfc798792b532d85e7","sha256":"3685c3818240f5f390073c7d04f944a5cb5d848093224f3a7888034e8c050eb4","sha512":"2a649d4a6d8071ed0cd3945ecb8f53f5184f4fde392b6ce4ce56b37d15424c12b87f05885d63a13b27c2c339a525138f6c3e9ade4d20473fe13e30b3517a2e69","ssdeep":"384:71DjuPTbUUh31//bEP+XgA3pkmQeffJmp3:xPUUUh31//YWXgAjffC3","tlshash":"0052bd5b732b5f9b743e3bd78d96cf4ec5da55932580e078cafeb68229a00598374c80","first_seen":"2023-03-07T12:11:09Z","last_seen":"2026-10-08T04:27:18.015339Z","times_seen":319,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abeezee/v23/esDT31xSG-6AGleN2tCUkp8D.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.862Z","timestamp":1791433590862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/abeezee/v23/esDT31xSG-6AGleN2tCUkp8D.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:26:20 GMT\r\nexpires: Tue, 05 Oct 2027 16:26:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216010\r\nlast-modified: Mon, 08 Sep 2025 18:03:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18504,"size_decoded":19317,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18504, version 1.0","md5":"5bb75cc4d0a7ef04cdfec9f03bb679ce","sha1":"0b36a189bdc794c1488b61712358ce42c689e21f","sha256":"5a07789d989f9cc37bd8c2dc2cb2c0e406550eb02e0f6edfca625bc31b8eed8c","sha512":"17d52feecbb6060ec408b34b40346017d21f1488948060fdd200bcc866280e11354b1c0b0def63f998d5fd473222311233399f4b5991f897fb162eb1bc1d686e","ssdeep":"384:+Za8BWyeilqGyyI2Z5/5LAOmYu+VWu8BPC/7JIGASa4FCPsknyz:C3Bpy5ytNLNFuxukPCP96skO","tlshash":"5682e103679ac1d3b0c99e7668a27be33c4019f30db09e76233954197783b12be932e4","first_seen":"2025-09-10T04:19:20.280818Z","last_seen":"2026-10-08T04:27:18.016064Z","times_seen":249,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":26,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2018/08/search-bg.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.892Z","timestamp":1791433590892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/search-bg.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:23 GMT\r\netag: \"61100933-192d3\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=biiG8kcPZ8xWFedm7pJmikwPxqvy7KNMD8iAc6x8lGR%2Bk5v3Aj29Az1z5CkmOvGy3j9fqLwBfmtOOw7Y86ceoOdhCOyzZZYAIyXgeIkjciTGR1haqww%2Bssa7BRkSimXyiVQ81Jg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634708ef7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 103123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103123,"size_decoded":103978,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1700x682, components 3","md5":"c80d5953002dd64fb8c192225346325e","sha1":"463ed3dc75e2da932e597e5de650341eb477f7e9","sha256":"2d022c898f639e250a4b07f161b8c2e43edb72ac6991f7aa630d7e3031c065c0","sha512":"f562f4e1688db890aa7795430587b6286f649d4da01fce9299ec31cb630f2286a38bd2f36e66d1c16d625c31a0eca29082b53eca8faa2769d8cf40e2d1b0471c","ssdeep":"1536:3BhjRzjTxmlPtkAvEMprcv8xqgI/6zUcUIotTGP5FPZUUTjYx:xthjo35vXxw/6OYLPugjk","tlshash":"43a30224f06176318c506a0ddeee9224a44554f321b5e2e43d6f2cebdbcb46336a4e7e","first_seen":"2025-11-22T10:02:19.801157Z","last_seen":"2026-10-08T04:27:18.016626Z","times_seen":4,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.006Z","timestamp":1791433591006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21856\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:01:40 GMT\r\nexpires: Tue, 05 Oct 2027 16:01:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 217491\r\nlast-modified: Wed, 10 Sep 2025 16:48:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21856,"size_decoded":22669,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21856, version 1.0","md5":"8a53e5ecdbffafb4aaa40a23fdece238","sha1":"446adba5bd78ee16c84f35e33b5ecc5c2976a0bb","sha256":"1fe9ad5d8b2ebd8ecb8fbd05bed1e3fdfa52dae3f1a04e1c219918442fe9394d","sha512":"82333082235dc518ae7e788db3ff7007f111b706586f065f38bf19340019fffba1bb2f9a88a3cfe6eb37c3ce5cada82bcf0811694cf7ebef6dfb151b1be9bf2b","ssdeep":"384:OE2iuJGj3ntoOm5d1JrjMnsuNXbxLt6/B8ZfB3Q0tlqLUIgRtBlhi6D0R7pw27:OE/uYj3ti5Fr0swLb6/eQcWUnh7uyC","tlshash":"b9a2e12544b70e10d985d5f741d29adb9430dbc81ce6af8adc14bce887356fc09adf68","first_seen":"2025-09-11T17:03:52.650693Z","last_seen":"2026-10-08T06:38:50.774844Z","times_seen":10069,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.009Z","timestamp":1791433591009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 04:27:20 GMT\r\nexpires: Sat, 02 Oct 2027 04:27:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518351\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-10-08T08:39:16.925617Z","times_seen":314339,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.357Z","timestamp":1791433590357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnS98tJ4XZyna8w5wZtJIQ24f4JeaG7vIG%2BPNocQFgkP1lp34%2FLQhvrYOUsxM%2F8eZcF2EEmiKduDFafIYJOH03ddMqNpGmR4wr6SrgnWegsdMP1o9cuBC3Zaa4x9bylm5WDptoM%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110090f-780\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343b86d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1920,"size_decoded":1603,"mime_type":"text/css","magic":"ASCII text","md5":"a2e915fb21387a23a3578cb1b2b5a724","sha1":"c3601301dacf90fc9eede9363f2698d922c05327","sha256":"fbf8ab57db7f9981bd71d79c7daaa01a3c578ffa0aa8e9b4a9b2bfe2e9927427","sha512":"3d4c6d96df645a1edd58f9992d5e1978c87ab8ec797af8caf3cd5281b000aaf1f0814195dec882052dd16754cd7dac6ef41b9c7ba913a6b189eb048c60340bd5","ssdeep":"","tlshash":"64410f7415006d518ffe92db2fe9db0a638e18a0de0faf5760c15abc5a782412132a5e","first_seen":"2023-04-06T11:52:22Z","last_seen":"2026-10-08T04:27:18.018909Z","times_seen":3451,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.392Z","timestamp":1791433590392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.22 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vk6yOnRslVGnQJJn%2FM29uwsaORz7%2Fp4bjzdUDudHDg%2FQ3zwdwfEnTborWzb52OIWb8v0nugt%2FCXmUUIuTtnFGoujyQLaO1J4RW8X7R1UuhqYJiYN%2FkgqoU3E9VZmTA6OmiBW5NQ%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100912-4fd58\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343e8787127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327000,"size_decoded":88144,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64268)","md5":"8a5702feb8810be04c356543d737724b","sha1":"3385fcee5497e03be43e3bbd17e052bb533f3994","sha256":"60f59e08903c3d0b70e928af542ded081c10a790b6c198c7026788b77f4256ac","sha512":"af428a9afc2bd46b0dfa9b0bb2327343abee3b18c6a23fc6518dfac366d596a991ab85fa2e6dcacbd693d8a5af06b3889973fc1dd46d6fb482666b9875fc8719","ssdeep":"6144:slhZz/xgM34F0CXHUMo5/gv9oWGGKRxSifdGknTKbl7wnoyJDKgOfqMbxL:slP34FWYv96RxSifdGknTKbl7wnoyJDs","tlshash":"50643be8e531787a04e743db905a440433b5e92de30785a2f1bbe1695c5858d02ebffe","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-08T04:27:18.019467Z","times_seen":3634,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.405Z","timestamp":1791433590405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BXHhY7xzKCghsl1aQ27Y1ReW4Q4EismNIyVxCQyR4eXcYP%2BQCC8HWOMVnY%2Fz0AQPt5glGm3xPknlChz2JP%2FpUsI%2B2Qt0VoYy881bgUZKQ7AuM7fUoUINwykLEcSZW7LWKdjuYU%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110090f-37c8\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726344087d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14280,"size_decoded":5116,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"f89263c0c2f24398a1df52eead69f5f8","sha1":"850e9cfb1680eb1df4365889724e69f38df7bb9e","sha256":"125ec330f66081e7dc9f2814e9ec18f4e2d0baa1936d497375eedfda7ac12e5c","sha512":"0a9435b57e67be8140ae38b643a6d4a2d66f83181f54433d13000a637d76eb8eae95716da2f18f692d36bc4f2c0dc4a3390c0da3eb951df2acbf2d0e6874bb5c","ssdeep":"384:Y0M5w2j16xNN7FU2CyuIC+VhB2Dv2lyAiVK1IU4p3S3OVKEkl8bXnC:R8Xj16xNN7C2T6FU4p3ZVNC","tlshash":"625274c8f3ee1185c67630b85c8fc1cd6b7e6472e4421aabfe5c545028d88785b25f2d","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-10-08T04:27:18.020019Z","times_seen":3992,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/script.js?ver=1755149150","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.408Z","timestamp":1791433590408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/plugins/script.js?ver=1755149150 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZmVSyKBGjTwoxawSoq2DMv6Mq%2FJYbu7dBc8PZh7rQuKkGtn%2BXS3ZxLBWMwCyy31jYC9kihqTAYP%2FT4jPY5uDxttNhL10XHkhdj6Vr3cMSzoVjfNWUMlo1Zx9wmniIiXVEwb8vk%3D\"}]}\r\nlast-modified: Thu, 14 Aug 2025 05:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"689d735e-5c1f2\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726344187f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":377330,"size_decoded":117798,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23053)","md5":"fe0b35492f3eb8e716abf275aff4e44e","sha1":"934eefd2ed355c97ed4292acddd030849b4f673f","sha256":"f86103e8429689e680842fe125e3749f4ce92f2cfd2955408c5f90c550c5b11b","sha512":"3c4f32922fd2c6b1b5f8b059dd2217b2360bc89fb5356ea3499fff28ec15b91a2126530c8e2a1ad7635f77435b6a193d6a9f57b5c8b11a882c48206dade28dd8","ssdeep":"6144:Sw9zPOYdfk8ALbvje9P4NnkrT6uYvZEQcIo+d3M7fK6jrdJ:Sw9zPOYdfk8ALbvjeu2gVM7fB9J","tlshash":"df844a8d7291353643a772f4502f450ea23b6454680b89acf67ad4e63cb8c8e217bf7d","first_seen":"2023-03-07T13:02:51Z","last_seen":"2026-10-08T04:27:18.020607Z","times_seen":193,"resource_available":true,"data":null}},"time_used":993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/col-icon-2.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.508Z","timestamp":1791433590508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/col-icon-2.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-3f9f\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLrdjwWgCMT6okX0Ir5wibroQNtp7%2BYUb6qmE9o%2BbD1cCHFLmg5oe6qI192JZlSCYuujMYu0yj2j2h8zqIfy8ku5SuqL1JhGzL0eLA8bsEKiDN1MU9YRrOkN6Vt%2FM0Z%2BLd44TPE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344a8917127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16287,"size_decoded":17143,"mime_type":"image/png","magic":"PNG image data, 43 x 45, 8-bit/color RGBA, non-interlaced","md5":"13c4cdc10bc5f1bb4a38397196169196","sha1":"2e28c965d2b7817629732a994dfa4111ca8f555a","sha256":"bb9b5b3dfa6818e3d10f5d38161e8116cba15b2f3139bd6c9014b2fdb0ea058e","sha512":"6aa118eda38e9573d91eb8e9f981f867760cd488dc9577870d9089ec8ec1433eb79990100d29a29317a23bc82f75953780c825ed84def82b004691f6d9c9ae87","ssdeep":"96:xShS48kEWmy6oFAKxNX7sc5HRhyDU/tf0b0KMzba2NGY4:xSE9k60Ph/cNcba0GY4","tlshash":"3572d834eef13251a18dda315de61406ac330587dac1ed41b6cd88123f04bf94e5f68a","first_seen":"2026-10-08T04:27:18.022274Z","last_seen":"2026-10-08T04:27:18.022274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2018/08/about-bg-3.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.886Z","timestamp":1791433590886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/about-bg-3.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:22 GMT\r\netag: \"61100932-bfff\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O7G4whUXf4CHLBeNnpl4oDXltSfRtrGy7cFjZbzbwiXIrjKtb2GUlb1GwprudGheWZnyTitNenjmMYj84khplYmwYMKKmiWEuXFoOI4SiqqbQCP1zcoNfL1zBUXTyW%2FtZ83pNfI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634708ed7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49151\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49151,"size_decoded":50002,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x700, components 3","md5":"693a134eb8e872da54bf68c84149b092","sha1":"515ec8efb903ad904ed7bafc06a0495a90463fa9","sha256":"42481ba1d092338c9f599b8fdf31056168414da2c22ce8b408d3243a550cf662","sha512":"37bfb3962af6861b4f243e400226fe441c9224a86a28db50f4f5385d5f47f607ec7ad12c249fb5b500974d20055c1cc6622cbf6248f94e617609ed16554f9340","ssdeep":"768:c1jXXZjVQlcdLpXMS3CgVAE8w36hMUYaQnI7zDOpuv1ZKlkBnokAdnW1Icp:cRXpjVQlbS3Cg+E8wnpLCepuTK+No7Mn","tlshash":"7223d173d342342ae898a33804fb4e0b777744b8af169b8a97c79d326db63007d79544","first_seen":"2023-05-21T09:36:15Z","last_seen":"2026-10-08T04:27:18.023415Z","times_seen":14,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.795Z","timestamp":1791433591795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:32 GMT\r\ncontent-type: application/font-woff\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:40:50 GMT\r\netag: \"61100912-1d70\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXSm5ojSIjh4Xq7nl239rtSPTEDuL99cRXQEs7D0UrfRX2XksYkDO5oUySJE9%2FUx2wLI0I74Dj7mAxFvx%2FAK0E9dEXUsBleNBlcAxBvoG7Bn9GUAet56neF1OEh5v8qif85xlH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634cb9897127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7536,"size_decoded":8412,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-10-08T07:21:59.233341Z","times_seen":33553,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/fontawesome/font-awesome.css?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.364Z","timestamp":1791433590364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/plugins/fontawesome/font-awesome.css?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOG4pfib%2FMDggxJcQz%2F%2F3XOr%2BpuPmI5qcXZJCeVAS9StNvwQvptUrCJ69wL0mVJZXjhvS%2F6EFJejZhaP1EvhIYP4hpnn3HbuOxjd2G%2B7wsYP%2FVjzfWuHSGJ5ibooRJtq6CZBnkA%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100910-789f\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343c86e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30879,"size_decoded":8077,"mime_type":"text/css","magic":"ASCII text, with very long lines (30800), with CRLF line terminators","md5":"1cbdf58db7054d3a8dad5f59864b7053","sha1":"fd32723700bdb3c7a06b73a9eddc7d3bd4c56885","sha256":"0d208db5ade19fdd2a973c7c2520575b5e54e009a147007eea616550d0006d45","sha512":"47fe086fc2d6436ffe899dad4c16b7c23478f4bf2de09ff5f60acbda0d6078696187c80662a2bceeea71334f326e171d10b9799a9b2285ffae9e756a1cf6ae3c","ssdeep":"384:VCu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:VVlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"fcd241e8e54c01d66731c48bff81b36862bafb3dc5854da9f01f290c29d226552c5fba","first_seen":"2023-04-07T12:08:26Z","last_seen":"2026-10-08T04:27:18.02522Z","times_seen":1272,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/include/css/page-builder.css?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.372Z","timestamp":1791433590372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/include/css/page-builder.css?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GmDtcQZryr1YWiXDV%2BHe0U6ai0F%2FfEUJc7J0IdjFkVAHYGa2eFxmKhxsiGOCIpjvkuu2D0FfieEh9Y7cJYytwWvNCffoIZcQJoM8oklk4DHEia0fRk7QvDqTr9LrjqFRS4yIMUc%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110090f-4929a\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343c8717127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299674,"size_decoded":43090,"mime_type":"text/css","magic":"ASCII text","md5":"07d359fc990eba202183d91851ee18a0","sha1":"d04b3adc6bcbf263fd3ca6eefa016a8b28597e37","sha256":"1dc42892bb3090299b33e9242ee0f340b363975fde72847b47e490b39da8ffe1","sha512":"a218087f4a891b44b7864ed402ed49b1282c6660be395ad8e9c62bcba965a48c295a842970bd4deca0b4c0bf74ca4858225125acb5f4fa6fa6c5442ed606ab1f","ssdeep":"3072:NxbfK6r2G9lzYl5lbppQabNf8dvCM+xwNDQ1l:NxbfK6ryf6DNDQ1l","tlshash":"30540c676114b118e167aba479c5b7847b44f34f92d328f9ec811fc8c2ae69c4163fca","first_seen":"2023-04-11T14:01:55Z","last_seen":"2026-10-08T04:27:18.025737Z","times_seen":229,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/wp-embed.min.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.474Z","timestamp":1791433590474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1DIsSIj7bWYOl6OMPLMnS7LcIo0%2FESBiD13sCzckznFIFrqJhfxH0%2Bx8kGzqKbRRf3ccT12fg50h1Z3KZ7rKt%2BFNX7iQ%2BovPywN7gi4ddyzB6QLVZBr4CA25pYTGNsTS6ObN4U%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110094f-59a\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726344788a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":1647,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1399)","md5":"8ed6038a5dbf62380de72a681340afd3","sha1":"1b7f829b844eaa1a3e2d05f51fa81d6579d76738","sha256":"6ebcda7a3a41ef97f0b4071160ceb1020e540fdc0f790079a5c2ef01ab654fe0","sha512":"cf69087b8f92f7b81efa788c3eb0b8a551405cdc7fa137e09a918349617359715ad5ef833f901e8d6e80c9ff20f63091710b492224e2ad23848673995dff5610","ssdeep":"","tlshash":"9021302a3628c93a94db10d3b98475c6c2a217ee680114e209788c49f9a8f97996aec0","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-10-08T04:27:18.026258Z","times_seen":2677,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3Aregular%2Citalic\u0026subset=devanagari%2Clatin%2Clatin-ext\u0026ver=5.6","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.361Z","timestamp":1791433590361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Poppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2Cregular%2Citalic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CABeeZee%3Aregular%2Citalic\u0026subset=devanagari%2Clatin%2Clatin-ext\u0026ver=5.6 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Oct 2026 04:26:30 GMT\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22298,"size_decoded":1666,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4c77ade24463bdf52ae133c0aeaba113","sha1":"b169b32a829f0248082466c7013b11371efa3a9d","sha256":"6addfa3a27a402deaca3ee3d9ec3cb72de88664f30dff58c0e764afa4c5ea98d","sha512":"b2b98bd59fffd8e0f722e8f222756d91491195b4af659da1f2bcbbe1cb12deadc11eef1a9d336bd416cf148fe28d3c10668f931cf4a02df487f038b27187c327","ssdeep":"384:h4m3e3C3HhTbAQ4qMsX91k00K+2prDsMJ+Gl:Fuib+Gl","tlshash":"f2a2aba1083be51467871dc122df7c36ef0ea284b444a974abfe1cd8ad97c6a137172d","first_seen":"2026-10-06T02:06:55.641068Z","last_seen":"2026-10-08T04:27:18.033389Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":35,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.390Z","timestamp":1791433590390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.22 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FCP1bO4%2F7x9VWdM5tQopBf5PWsVVrAZ%2BTlCM9TIsxvRU21hHe%2B0jVnxVnJa2Wez9IiloNt01A9Um86ftE9USE2i7VMkBuMODz13jhSrAwuRPlkK0NbCTbwMmUBQDBROPNxPsh0%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100912-1d25a\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343e8777127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119386,"size_decoded":48268,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41022), with CRLF line terminators","md5":"1eca6ed028850aa07d5f4a003fd7079e","sha1":"1f02b8c5485108373bdd14a96bb1fe22d72e157b","sha256":"9556bca5ad5eb24439887d7339fcb687088776bbaa995553aa489c9607cf9e19","sha512":"6328977461a8c077169132ed6071bd785496b58a91881d169753784ef916ad88eb3b7fcfcae1389933bd2bb32e45cf685c38682817102be4eb0ac3749321b9f0","ssdeep":"1536:tjaxl8yra469QduD5VFg2WKl+2qCd+m0SNpINVp7Nu1HfwvoOdV3LU6AKSx:N469QstWKALm0SbI7u5WogbpI","tlshash":"7fc33cd87151b432029766a6453f0a0ff23b9d15740b456cf328e4c87e3c9a991bbfba","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-10-08T04:27:18.03437Z","times_seen":5299,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/themes/kingster/js/script-core.js?ver=1.0.0","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.421Z","timestamp":1791433590421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/themes/kingster/js/script-core.js?ver=1.0.0 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lh%2FzoxLsnJdX9UI0W67g%2FGjW0WZEErOBnwERf137a3xdCZSkPxuoYK6E1888vnJCZhHus4I6FymJey83RLopztbzSKQB%2BVHz3otgBlqA5WloqqQfKtH07oLZGrrtGAcDPoMFtas%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110091d-df45\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a472634418827127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57157,"size_decoded":15937,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10169), with CRLF line terminators","md5":"989f77341034f92ab6f549cc52440139","sha1":"cfc95b1b98323b21d05d7462e0bed6332f67cd58","sha256":"521cb5ca917586cc1fa5e1dd24590a46058e07ab2819b0b644c821bfab9bd1c0","sha512":"d60dabf68a0a091097634fa64fc904d57d3fc059579e88eab26b392761e1ed2f21a0d509215c953c1661a28ecd85e21c2bcb6a60c7b9c09ae9379f4ca1322aee","ssdeep":"768:wlUEf8C7XMeZQtOQmOIBJAdaO3jnGkUkXl2C5UXA4mn3a7:wlUEfNmmOIBpfkXpUXT7","tlshash":"7543e9c4f34f227a49eb72a1563f5184ea7ec43786018064b1b976982ca254553f3ffd","first_seen":"2023-03-08T02:21:46Z","last_seen":"2026-10-08T04:27:18.039188Z","times_seen":56,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/kingster-style-custom.css?1755149150\u0026ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.382Z","timestamp":1791433590382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/kingster-style-custom.css?1755149150\u0026ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQvAI1%2FUaKBo30OCyQz%2FA8Qw%2BC4NFDq6IUmll0boqoh8baHLzMoBNBylJXHY%2FcqoZJrVsV6ojo2vBHd0CgSWNx04LQM5uOUQgdE9PUwbz16tK1J0Ox31QifUO%2BlABozV0e09Mfg%3D\"}]}\r\nlast-modified: Thu, 14 Aug 2025 05:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"689d735e-16ed2\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343d8747127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93906,"size_decoded":14124,"mime_type":"text/css","magic":"ASCII text, with very long lines (1069)","md5":"fce51fc931631952424e883625b7c695","sha1":"0c0cf1a2889b39615cc3b883175e206cb2507aff","sha256":"c2b9a92857caa039678b8ac7d0a703521c087d23186260916d308e130a9d8540","sha512":"d69f675f15cdb722243afc833a83bcdb7bcde977d9391a8eebdb7f033a769f7ffaaf95cef0250fa86c4f8eb9dac99b73bff68bad26389510d4f0f9cd6ed960e0","ssdeep":"1536:F2BwJw1wtbbb4YG+9+j+xpiViqijihewvwStrDoLvY/YMbEqtQjuxtqxENXbCAaq:F8mqtQjuxtqxENXbCAaq","tlshash":"aa93ead7f501b136ea1367983c9ab680fba0f78892c156b8ec250f99d03e15c1472fe9","first_seen":"2026-10-08T04:27:18.040454Z","last_seen":"2026-10-08T04:27:18.040454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/include/js/page-builder.js?ver=1.3.9","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.411Z","timestamp":1791433590411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/include/js/page-builder.js?ver=1.3.9 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7G1cXu6%2FyDxfmS0fjKbpk8AOe5dSAxFFDXNCE3EF%2FtaYBpFpa1MEOOBdTFIMqK4rRyoVjpvXd%2BUQbnoVcItsc8lDhTHWucaEptSRlzoTr0X7yiBMwZpoPOWCR54VJnGVZhhyJc%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100910-160f7\"\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726344187e7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90359,"size_decoded":19550,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (317), with CRLF line terminators","md5":"3a0fff79e4cbc944ca76a1ede8a41e58","sha1":"73f4585d42ddc4285945a6ae2e560c8d34b1263f","sha256":"8a8a44ad9f39da3914b9e1f688f355bb1aa10e5b06df64bd884effc90dd30111","sha512":"0a0cae002170342e60e948e8e2d50822c1a1737f9efd038a9cb277a6f99048738319ae9f3b31850df52ea8ffc632f1077a8f6c7091c1447aeb4b0009f2172162","ssdeep":"1536:AbY//sMXYVbqomsdO2E2LMAvQlJaKa+xrvnvhsD0nODKRGsZRkbU5mGxh1F:rL5fYgh1F","tlshash":"ce932ed0731eb81e91d63366247e7544af3ce732818180f1fcad9998a9e910953b2ff9","first_seen":"2023-03-07T13:02:51Z","last_seen":"2026-10-08T04:27:18.041875Z","times_seen":185,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/slider-3.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.506Z","timestamp":1791433590506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/slider-3.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-d1f5c\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YdfdibfcKUfq1rGHHOlOUQgWZ0aecHwDU7I3UZeYTAZfMo8R0bVOLSS%2FsuJwKv53ahW4aEocotL6luwMUIIzwSwUxps0viHJdYuhSaIIv1th3a0D8RfxJs0iTTs1uFDL25NGZq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344a8907127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 859996\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":859996,"size_decoded":860849,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x1119, components 3","md5":"303c235eecef95083ade6a4305b4e31c","sha1":"10a08676bf554eaf57982e7f69c777d84a588c97","sha256":"a3a76b5f7591f0bbfac45531fa62f825386aa76d5d13d1f768b4efbde2535e88","sha512":"d41db840ce0b102b9b455a539251db63c2284addbe1a8d3f4f48448e0b53bce0cf4744db19a2f5e997f832d21be8f36309a11484d8b31079e1bcc000bd718a84","ssdeep":"12288:Axvbkmqv31WoTZSsNqMKH8A6kwwFMWaaVQu9z8V333kmErw5BNb+OfdcEDvlDWhf:Ai31WSo8YwXXu+33UGr59xVATc3Jk","tlshash":"12052378e94ac0819c6ef29819a7910fbb4b3a740a71ad5fd0627f033226a33d35569d","first_seen":"2026-10-08T04:27:18.042878Z","last_seen":"2026-10-08T04:27:18.042878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2018/08/icon-4.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.517Z","timestamp":1791433590517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/icon-4.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:23 GMT\r\netag: \"61100933-702\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NQtt5Z666k8D2YyzqJnjkc7NzmlNDgRWS6mHN5OKJawQaJ1CWPcYOudEzMZCZeYPiKccKl6inDJrShL41VKCApvgbXQLU6l9M5DYOnoLTbSb0CPUu5UDXxapkVhHO96rXTBPQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344b8947127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1794\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1794,"size_decoded":2640,"mime_type":"image/png","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"116594ca4d2d65fcef91dbd7192a2772","sha1":"c36ce9a5ce3e311543c06230ecdacc3ade1464b9","sha256":"564b1043f83bb9ea313cb305e626597ccf588db67a4f1055926d6276762a513c","sha512":"3ce00a80e937f6f1821f8e0aedad6d215501604b65612db911dc4624a22c752e6a00576eed656d42e7c9129df7f8edcb0988be9b7da8d7fa3f52e1f093bde53f","ssdeep":"","tlshash":"5b31e987f4547d02a14abce950e5d007599388448ee6dc7bfa4ac8374ca47b01d5c9eb","first_seen":"2023-05-21T09:36:15Z","last_seen":"2026-10-08T04:27:18.043978Z","times_seen":41,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.854Z","timestamp":1791433590854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:38 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218032\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-10-08T08:41:57.258852Z","times_seen":416235,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.857Z","timestamp":1791433590857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 16:10:23 GMT\r\nexpires: Fri, 01 Oct 2027 16:10:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562567\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-08T08:41:57.228506Z","times_seen":295758,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.859Z","timestamp":1791433590859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atprofessional.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 15:52:39 GMT\r\nexpires: Tue, 05 Oct 2027 15:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218031\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-08T08:41:57.292977Z","times_seen":319616,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/05/group-of-people-in-conference-room-1181304-scaled.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.881Z","timestamp":1791433590881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/05/group-of-people-in-conference-room-1181304-scaled.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-79630\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UBLbnOnpheK73crUoqgl79uU4DPtHE96QCwoIUXkptmB74xsymEjUkoDUvIB6LBOhlpsmPUjh8wb%2F2OdGBYdRSyPXK0Pss1fwgerQhTte9TqEd19NHVlRp0Wvo6rxvxWRSTcl2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726346f8eb7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 497200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497200,"size_decoded":498053,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 2560x1709, components 3","md5":"6fd20b802d2f27f26759263d6e99ed9a","sha1":"dd0b366d6658672f6f534dbce670308c8c1301c0","sha256":"d94517861e4826353afcd1832b69eed54cab446bece7e276e3eb08a4d6cfeb75","sha512":"013546291f516c5d09ed33d5e628c4020b4d9a2a2cd5de72ff0a27537dff756db25551843fdbd7e66763d61a4b0c8f87f6a24f80b028e32fa7f9da99b139fa5b","ssdeep":"12288:OlikgtGtVqgU4yo6YNf8P4dVo4/9WwDSTP5vux6FMvlRsyqMF:OkkgMU4y08ooVwDSTxux6tO","tlshash":"4ab423632799a84fdcdb3b878f984a170b9b9507e240c95c039ececce923e615f495d8","first_seen":"2026-10-08T04:27:18.046627Z","last_seen":"2026-10-08T04:27:18.046627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/the-events-calendar/common/src/resources/css/common-skeleton.min.css?ver=4.12.16","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.007Z","timestamp":1791433590007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/the-events-calendar/common/src/resources/css/common-skeleton.min.css?ver=4.12.16 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCDzs4aCf4lNAgr95GCF3bNgJbJfJbN3y7KBZlGVRRZ%2FOT4oTW9GCXB2t%2FDOEpvmoNu42zom%2Bci7G%2F8QtxrQg%2FePeLYQ7rkysO4R%2F1OqhTiNpSNjJtLxi7oMlHpSSpCZGDfow1g%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100917-3144\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726341881f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12612,"size_decoded":3375,"mime_type":"text/css","magic":"ASCII text, with very long lines (12612), with no line terminators","md5":"98ab18ae30aa945c250d1518125306ed","sha1":"43456bf05e87a9d6166040a80da131874d09894e","sha256":"cd1c57063478b82f0dbf91525785d7dd35115da8a1cee2aba6472bab7e069c7a","sha512":"a31fd6d98c60a4af40e0c62858e6c567532843d2f59c6ad7e3bfa57c936e2570925725b1b4d5a9f5c69081770bd731ac2ae4b762202260fb22f4d85e535eb61d","ssdeep":"96:5buOqRlQlkgcLVORtLkYy/OSvHbCRbYiUDvv7VHT6gmdhT0H6cQYN0AU7AdvOOzD:1fMVOrVSkwt215I","tlshash":"fa425421d8e30be64cb94506a9bdb45c111de3fd92a2789b64debf718bcd35c0122a1b","first_seen":"2023-04-11T03:43:10Z","last_seen":"2026-10-08T04:27:18.047645Z","times_seen":353,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/elegant/elegant-font.css?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.366Z","timestamp":1791433590366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/plugins/elegant/elegant-font.css?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrLCwJTJU4UcLLpL12lLIjgqAiK6Fr6wn2EhP0HqDTJ4IeMDRSF4k2e6SHdpAhMiWelOicYgyyVRIOcyDRc5W5vpDjxYKGqm8TN7ldqs680xUMP3V5lgUDy7F1ER8EmkkVlztCo%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100910-54e5\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343c86f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21733,"size_decoded":5119,"mime_type":"text/css","magic":"ASCII text, with very long lines (21733), with no line terminators","md5":"1151d563689d7335d1aa1859d4de509f","sha1":"4986da52b44ef9614f3d4ada60a849ae74f6eed2","sha256":"02e2b3b30a747b8196a16712d5fe39efd502cc6c04257a86fab515970eaf0653","sha512":"ad159eb5e6c89fa66a9183ee500a1bb0837089e14208a26d878ee4b584425986940c4547e857f29092bb8dbced520a07a376d32981303e019ea54c4b8de71b79","ssdeep":"384:8D+y77q5IqlXYcCup3kYitaMSvnDqwqLVloIGVQE04e0ewqKK5B/94FtHFngh0YQ:NYcCuNtMKnDqwqLVOVQE04e0ewqKK5BC","tlshash":"c2a27ee1da4c79cab721c912c305a378dc9af2349ef11c17f05b848c2bf5356a6d6a6c","first_seen":"2023-04-07T12:08:26Z","last_seen":"2026-10-08T06:38:50.828106Z","times_seen":1613,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/07/atp_logo-1.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.498Z","timestamp":1791433590498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/07/atp_logo-1.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-2807\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJM9pJYIFtdrQT1tOplI5XYT2xrhRWiD7X7zEXMnvLhMjrLjqBb9lPlZ8FkG%2FxPiZdUnkbyrcWvhgLjIe9Iv%2B5gb0E7kbmhypgOiU6hysbLSw2NRh8U%2Bh8DqtgGozj99u8Hzdic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344988d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10247\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10247,"size_decoded":11101,"mime_type":"image/png","magic":"PNG image data, 520 x 72, 8-bit/color RGBA, non-interlaced","md5":"bca4059fae5d3a64fb5f8c4da4f41c91","sha1":"896673026933a3cbde0979ce2f881d245ca52495","sha256":"d7129000ef605a841ccfdc963030e8b8386665f811dea992eb9f730d4a0e8781","sha512":"e459376477363530c86ae78198026a3bfcb39121b2a41ff7b11a72f8bd16a47d8f5d0d6d2d719b467dd280b31aeac59a2bd9f6fd4b3c16f6d37dcb767d5d9382","ssdeep":"192:MP+GXHoD7M/BSzh+RUdX4qDHw4G72+/uT/5PQgh0kyDBjHyVS+hoSLmGJyG2astM:MID7MgV4M4iQ4A2+/ud4g0kyDxS0uoSd","tlshash":"8622b0b9b7770191fd0f5a4e28f12012ab714502c0a493e4fc52964bf1b89e2f65daa9","first_seen":"2026-10-08T04:27:18.048779Z","last_seen":"2026-10-08T04:27:18.048779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2018/08/about-bg-2.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.883Z","timestamp":1791433590883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/about-bg-2.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:23 GMT\r\netag: \"61100933-cfdd\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1KFcSiXWOh%2FY%2B3LeyGQo1tnbLq%2Bc%2Bwqq7GpC9k35tw5xfaWv6HZDkme7ARGtoclSN6QLef%2FyEE%2FmuRBDTA3JigMwp8wjA4v%2FanyHTHinQuFCX3mpz8AYzfeXltBjxeimIfcsCg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634708ec7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53213,"size_decoded":54076,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1125x763, components 3","md5":"8cea88e66f1fdfa4c60421dea7656d27","sha1":"9fa0bbbd4b520c0bdfc580f3dcee19e3f82fdb5f","sha256":"97fd1867f702b86f51217208cf8865e9415bb5ff76979760a0ca3d251006e4bb","sha512":"b95a4a79b4205aaebac2d1a093a1500711b5ee8b0de15ace4eb54c68d2b7d4fbd631595c48c5ff3d218e2fbdd2dea2103ec040b74494eaff5dbe627d32a5f2ac","ssdeep":"768:R8yHkPEvVE+phAq9oMfiQzn46trwK5OpTGY7ag16H3oaXo9iXLVDLWZ9qpUSTTz9:ePYOChAq9r1znVSNJ16HPei7t44nTzKA","tlshash":"c233f10bef850a73dbcc27364cd36167bb33246a4e5714a22a5b85b1a9e13a42ed61d0","first_seen":"2024-12-21T06:14:01.063422Z","last_seen":"2026-10-08T04:27:18.05012Z","times_seen":13,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/cropped-atp_icon-2-192x192.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.508Z","timestamp":1791433591508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-atp_icon-2-192x192.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-fef\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AYlDjWo5MOhKUfTL3OKclZ%2BBdzztWYkbNBWTbOsTgAwxD2JDHwTarOO6IPoSZ2T9R4jDrch4Io2qehBeH6JdF1o85uB4VhCnglVIxQunhNcPGscTuEYiGPkkRasa0pMsW%2FpXFw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634ae92c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4079\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4079,"size_decoded":4932,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit gray+alpha, non-interlaced","md5":"9e5caa33f45bcd746922f0783fd1d482","sha1":"b03aa3a26c3a8ca38acc5ef6f2b0b986e1538084","sha256":"00ac4944fa9a515074bc9d7b1702eddbb9e5f52ebab909e82bb09ea55825feb2","sha512":"1cad8e7de8b6700b8d9f0b539a47d7cc9668e208f15b570d393964363b80e03b62d7b3e91ef16bf44ef4cdd5313089e9a4f59ceb7ad72733ffc9b7dcaaae3deb","ssdeep":"","tlshash":"9a818e64c64a4ee46288d17a02f228679dc202d2dd49b65f8bae1c9506d9dcb94060f6","first_seen":"2026-10-08T04:27:18.051263Z","last_seen":"2026-10-08T04:27:18.051263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/cropped-atp_icon-2-32x32.png","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.510Z","timestamp":1791433591510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-atp_icon-2-32x32.png HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-277\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mQHMYZpMXS%2B1mFlnkKJX1nE%2FiuxOkgzNQ4bQQAkKfOjJx3J%2F6rd%2B7h2dH7fl9kkbGTSe3PG4ni4YSaX4KLsTj0yZ8R0GIPtfvwPfD1sRh7MNmrOG9adoVMxz%2BSe%2B0X2Q67Rdm2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a472634ae92d7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631,"size_decoded":1491,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced","md5":"f001d37a37da8f4e4471d7c8a481bc83","sha1":"7cb9b1d79dbe4503347e65b376e593039c349ff4","sha256":"2977244e11c5f7f599d315afdd316e09fbe682d2ed9fdecf3b8d087a3ae8dc5d","sha512":"f9bf63665ab235caf2b64a2f9b2d4b7ec080e21d2b63bb1730fa1e980543d0e78ce8c37f40b85aaf71dca171b62b72e56779b0f2d2c39e22c2930bdb8110b389","ssdeep":"","tlshash":"28f062a61ae8fc99da0b209288c1282c8ca71da96ee40e7ab04a49020d85401e3422fa","first_seen":"2026-10-08T04:27:18.052373Z","last_seen":"2026-10-08T04:27:18.052373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/the-events-calendar/common/src/resources/css/tooltip.min.css?ver=4.12.16","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.012Z","timestamp":1791433590012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/the-events-calendar/common/src/resources/css/tooltip.min.css?ver=4.12.16 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3hRczsDFwkzBZRr6OMqvLzMKdt%2FkM%2BfC9RBWhDjZWAkzzv9iy1TJNvzlCYxCKv%2FgwYMD13oSyCXaUj7wCRPnhWv%2BAVVwC3ugmESzUChESooIN4Pvhj7bBKgg8YFKRmJvAegexU%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100917-662\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a472634198207127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1634,"size_decoded":1457,"mime_type":"text/css","magic":"ASCII text, with very long lines (1634), with no line terminators","md5":"5f209d26ccda9892a1fa030b3062a59d","sha1":"7d6522a7107d3e8d60e37740f2f91844be48689b","sha256":"872454cbfd47b444a3fa6cfa9a74b0f57e5f6b3a47b9870108d2b0e5ce4aace5","sha512":"91d9561cb0bd252bf4278b083c0bf95e4818637ff0397d6d8f5af1fee67a02a480e2e565c95d7fab9a0ca1200c37b1b2d682b8fdd91ddb774b8b76e394a694ab","ssdeep":"","tlshash":"df31460bc6732e8b5d06948b54eeb78c13675eff51e32179508911f5a2ce39e235c643","first_seen":"2023-04-10T02:02:50Z","last_seen":"2026-10-08T04:27:18.053382Z","times_seen":761,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/css/dist/block-library/style.min.css?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.354Z","timestamp":1791433590354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTxi0Yu8uKTYMbkoz9lupKQuw4%2BuvcgfjaPdZcj7%2F7uet4P1%2FDwhW6V8VeM742%2FkcvLd06H5RQivmw%2BGMCurr4%2FOGNKkKg1nSpFLjBBz1EH7n5tUeicjkkrGunUO8Zq%2Fk6RsSNE%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100949-c8e9\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343b86c7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51433,"size_decoded":9509,"mime_type":"text/css","magic":"ASCII text, with very long lines (27609)","md5":"27f5295ccf3ad9e0e85dcac543630288","sha1":"19810723999badc836eca3dee977b4de1bbca8ed","sha256":"5c2288ca7b324881faae5e368eb4d69457e2784e042e868de335d3827bb90981","sha512":"ffa38a60e417b21083ed1a26301e0ce8af712939d31fe1fc1cb3931844d9b0cac8f998c6437fcedadea2a86a66ba286025a5fe1d9a411b057d12a357c68aa2b3","ssdeep":"384:FLBjc7HBZDO/KRUb4XMXib+d+AwlVHI+vg7Y3K0dXtNXTXlx:d8XMXib+d+AwlxI+vg7uJ/TVx","tlshash":"1133212913b5ccf935afab3c8d9df248e441a981c54a97e7f036e050624c99a5cf3b1b","first_seen":"2023-04-05T11:52:57Z","last_seen":"2026-10-08T04:27:18.053937Z","times_seen":667,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.375Z","timestamp":1791433590375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.22 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdZk%2FD92v5pkTZKKx5YKMpACgD4%2Bpfpidi9iqqIE8wJTLDw6ph%2FYX8YV16hlH8AqlyczIbpaSd6az%2F02JtBk54MVru7KRVtnH5rfnCUEjUQgNYCPbxe03SsQb8bk%2Ffa7Na6I1dM%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:40:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100912-ea95\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343d8727127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60053,"size_decoded":14866,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"6965137b6996c7953be805866df582ed","sha1":"7fa546bdc941a31224fcc0b64c75d30f23630583","sha256":"b86f3cdcccad303cb5300fab4d2774eafc3a2788f07ff1f3cd1953dd0debaa3f","sha512":"880635e6a9dc5ccc9bfab9525fde5d98c660245c19d70c90de14f63d2997202eaedcd1e6a1568948b9d7401fa134a4609331194fc1645824d7cd82754088b6ef","ssdeep":"1536:2MhMbEX0szVQdHkub8uIhqQRHmU2WMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dz:pmHkubys","tlshash":"fb43c67198921da82327ca81e7ec0bd49e25cd32ae030cadf597321dc39e599467d7ce","first_seen":"2023-04-05T06:02:17Z","last_seen":"2026-10-08T04:27:18.054506Z","times_seen":2541,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.384Z","timestamp":1791433590384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hPNeaGhm9PQWLuWuEoWImutPE7V4is2ZVzd9ghC1eHgkkB2WfGXG7tz37gg27%2BJkI096CfgEaWx85540mjqwlTDZqovsDyYJUX6o8E3GESdnJ0BNohdYVwmXCSZvhQyHJyzATw%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100951-15d98\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343e8757127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89496,"size_decoded":33821,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-10-08T08:30:49.987962Z","times_seen":14946,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/themes/kingster/learnpress/kingster-learnpress.js?ver=5.6","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.395Z","timestamp":1791433590395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/themes/kingster/learnpress/kingster-learnpress.js?ver=5.6 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wUFHhLGPW3eFelPE0p8SFzLVOuuXx7gOvBH%2BW3JCzqFKCWaSxACOubNprKJzLmQ3IfvQeXz70bCQFbMLpXXT8t6pN4NtrUZeMlb5npFB8xH19hEuTSxxWAFuHXe0kGxsLbE%2BlCE%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"6110091e-59b\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343f87a7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1435,"size_decoded":1354,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5c163d869aa87ba87ec15a34cb992303","sha1":"a98b089b35a34544548c52fefdcdb7fc7a3dc396","sha256":"861bd453d188cf427c6e1fa0e9de221642c1c8e093edd51fb28d6f7da7985412","sha512":"7a3bf002dfa3df543b99e7c2ed9abc66182f0b11ac305d442f35cc064b557f916e11a9afe208673e00138ce677230ff6b88faac4f813231439111ae20f1076fb","ssdeep":"","tlshash":"6321465cf38d22d86036399d36dacecf12fa26415b734473dcec06b845c69494213de0","first_seen":"2023-03-08T01:42:57Z","last_seen":"2026-10-08T04:27:18.055537Z","times_seen":224,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/fontawesome/fontawesome-webfont.woff2?v=4.7.0","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:31.011Z","timestamp":1791433591011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/plugins/fontawesome/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/wp-content/plugins/goodlayers-core/plugins/fontawesome/font-awesome.css?ver=5.6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:31 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:40:48 GMT\r\netag: \"61100910-12d68\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHn5IjdI1cHYTVC78SE8tGoiz7jnsItK0%2BOXLreuLgQ4Wzjgktc5WQK6uSOIqR8HFYVoliPzrPrTxDIIA74auWzIeUbMS2AS4qpNsgQB823ZOn%2Fz0QwS2U5Kjm9Hnsf0Uqow6vE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726347c8ff7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":78039,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-10-08T08:38:27.4882Z","times_seen":550154,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/uploads/2020/06/slider-2.jpg","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.503Z","timestamp":1791433590503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/slider-2.jpg HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 08 Aug 2021 16:41:05 GMT\r\netag: \"61100921-af41f\"\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FfZKkf6v3gNjQBsnQqsYIFhnR2PgxmH41RKIxSVDb3ufh3ZZw7EEYbOD9PL16S%2B6koeMGZytiVC6ExB8jVIbO7Z%2FCvxZvlGIL%2Fl5iRYgapNZAoWcOEF7yj3fpnnFPDO%2B4jZnZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4726344a88f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 717855\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717855,"size_decoded":718716,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1800x1119, components 3","md5":"3bb8a6b62a0461862aba8ac3e5a2cce6","sha1":"3a9bf74bb8c115d0d9d01912eb707442f901d6d2","sha256":"6e1709b1ace6ba657bdbeb82e10c5def154a91dcf9fcbcb76f8462790411662c","sha512":"83fade44a74a0370649e2e95ecf4f986582323d95eb24afd9fa6f41992418262ba62ce22da0c375428e6e86d29930cfa192d8256b9b56d02913e25f0f636e239","ssdeep":"12288:SIOYTYeirKdZHR+4vqXBPpTfznuSe3c+b/64xYopcc6RZ4W0fpb0CaQvBSJCvEI:mY8eirK3xzEBBTfznZX+b/6436MpAZQB","tlshash":"7be4220e92279f135aa6383d44d6bc6f0aa5acd0461c0a054735bf6afeef1f63383516","first_seen":"2026-10-08T04:27:18.056589Z","last_seen":"2026-10-08T04:27:18.056589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T04:26:29.242Z","timestamp":1791433589242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://atprofessional.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://atprofessional.org/wp-json/wp/v2/pages/2039\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://atprofessional.org/\u003e; rel=shortlink\r\nx-tec-api-version: v1\r\nx-tec-api-root: https://atprofessional.org/wp-json/tribe/events/v1/\r\nx-tec-api-origin: https://atprofessional.org\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OP4kjYPc%2F6lZD40S3Et%2FfCrDtpkgV9VTbto4USZFJXIgkizp74zlO7wUnr%2FlWSdHUyZZNS5xCWiEwwQyLT7Ds9P%2BaFsOfpCIGjVx6HjgjTy5pdrI2nJj8qZoDLWueflR8b1bo3c%3D\"}]}\r\npriority: u=0,i\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a472633d4fea7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.2.22","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.3.2","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"WordPress:5.6","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":53014,"size_decoded":14316,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7398), with CRLF, LF line terminators","md5":"b752e9245fdfab2e21b9d562fa0c8e35","sha1":"2457aa8677b07307647e754f82eaa94cc3ba3534","sha256":"674500dab77ec36a22c43098607f6fa6ef725d8dc764d8175db570bc6edc7504","sha512":"54df3c9f0cddd88235f75d6eb5a4b33e61f5674a5188e0b1524220984aedd1aade72c23af3490f2cc3bcff5732c98602d5e10473c06ffb74178905c515e4e808","ssdeep":"1536:JP+fEW/R7vModeZ15rUHi43/k/X/MIkImarhRNkPHVF/G6PycH:aEWxvreZ15kPHVtG6PRH","tlshash":"0033b5639508a42d85620384b4257349a3a6f73de7c644d0befcdbe4ebcaea14532fc5","first_seen":"2026-10-08T04:27:18.05763Z","last_seen":"2026-10-08T04:27:18.05763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":61,"connect":23,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-content/plugins/goodlayers-core/plugins/style.css?ver=1755149150","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.369Z","timestamp":1791433590369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-content/plugins/goodlayers-core/plugins/style.css?ver=1755149150 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1hXI2eqhXFn5JJmSXWP%2FsuvzgFqM3IKF1nHHiHDyxPbIIok5LPJdW7KZpkEFiiE4IwasOisqEYB50xVuhNRKn1uG5WNrWJ6tlpPwlPBzQAAzdfiEIBz2EyqB2XfMy5eTvCBFVk%3D\"}]}\r\nlast-modified: Thu, 14 Aug 2025 05:25:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"689d735e-ed19\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343c8707127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60697,"size_decoded":7985,"mime_type":"text/css","magic":"ASCII text, with very long lines (39108)","md5":"5ccce8313d04c914196502e86da69f0d","sha1":"f29943059aaab75bf5ce67461d3d31780f54cd48","sha256":"de99056591baceaa923ed487401eae58ba515174df43f86be3095935c8384a5a","sha512":"5e2e3cf5c3f996960e419275adc1fe8e1c5e2f6ebc4f7ba447a4f6ec0e20cd5a97a58dc5ce09bf75716f2dc8c78a0ef09b6e8fecb1a4af717f270ad58e5b828b","ssdeep":"384:07c/8PIPkzMzMzizBSztbQrMD/GvdNeUwUaBB/X5KdJG28l4ZtBo5vHj2w/sqwp/:T+I6gMqz","tlshash":"dd53f33a6a03620cb136d78963e98a64166ec31362310cdf7359290f8ed7bcf916579f","first_seen":"2023-04-22T01:38:01Z","last_seen":"2026-10-08T06:38:50.829963Z","times_seen":272,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atprofessional.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"atprofessional.org","domain":"atprofessional.org","tld":"org"},"ip":{"addr":"172.67.199.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.387Z","timestamp":1791433590387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atprofessional.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 17:04:45 GMT","end":"Mon, 14 Dec 2026 18:04:38 GMT"},"fingerprint":{"sha1":"3D:27:25:C3:9A:B4:14:54:DC:D4:AC:C5:A3:EC:AE:D3:CC:9C:08:E7","sha256":"CD:52:FA:AF:CE:6A:A7:8B:FF:B8:3E:70:3B:B0:D2:AE:8E:7E:37:9F:D5:E1:3F:9E:FB:8C:2C:E0:58:CF:DA:33"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1\r\nHost: atprofessional.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FuMEfHpZNjXOz4S0xEXZUZNWsTP6nFXC37X%2BAvRScprd4ipxiR3VHP7HQTIbanKPWQpYTmmab920r8YToHpwhCx1HpfM9NK5vrQlMEzt8oaOatg%2B%2BuTqArpaxfdvOJ7ArlorT0%3D\"}]}\r\nlast-modified: Sun, 08 Aug 2021 16:41:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\netag: W/\"61100950-2bd8\"\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a4726343e8767127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11224,"size_decoded":5313,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-08T08:31:23.653004Z","times_seen":88852,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"atprofessional.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Playfair+Display:400%7CRoboto:400","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atprofessional.org/","date":"2026-10-08T04:26:30.402Z","timestamp":1791433590402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Playfair+Display:400%7CRoboto:400 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://atprofessional.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 08 Oct 2026 04:26:30 GMT\r\ndate: Thu, 08 Oct 2026 04:26:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7151,"size_decoded":2313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1566)","md5":"11d172367bdb87f558aedb451628f852","sha1":"48b78f1a75992e8e3d773160f19341d2c815131c","sha256":"a87c325f0eb42236767da1579aa7143cd3c066287ff54f83cbe5cdc9e4ceb7db","sha512":"7ebfda642a4a599fbda90d1468f95fcb7b1a7087d469ec9e352b368df0775218329fabed883496e83841c956e49f6b91f814566c5d81dba0040bff2e1cc814a1","ssdeep":"192:JFu2S2pmu2Sju2SYTu2SlNssNzNWNoWNE+5N28qGIwQDNINCmNX:JQ2SuB2SC2SR2SLsaJcZZfxqh5GbX","tlshash":"46e13f91041b540057835cd223ce7e31ee1f92007185d079ebfd9b6becebda692a831e","first_seen":"2026-10-08T04:27:18.060422Z","last_seen":"2026-10-08T04:27:18.060422Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}