{"report_id":"c373c71a-53e2-4b0c-bb1d-229754fd7331","version":6,"status":"done","tags":[],"date":"2026-03-06T12:12:34Z","url":{"schema":"http","addr":"www.bettydavisdooleyfoundation.org/","fqdn":"www.bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"title":"Betty Davis Dooley Foundation","dom":{"size":363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (363), with no line terminators","md5":"df223820833f076970876bf2d015536f","sha1":"a7e8bd3bb09e9bc25e006284f4a88b3a56613f80","sha256":"5c7964e0402e4e91d07e8ec1c7c7928138b867666a707ff086e2cf97df5207f8","sha512":"05d9edd970adf9bb6cd8c6061babf59a35fd6d0bae488d43face49178230712e60f8145111453552dffb67b1fc1bc1a58d932926319e53dedccb61d8805366db","ssdeep":"","tlshash":"00e0d8ea5c75c8346aa4168a30b2e29c162565a0b611d64441d5d87a5a11fd34c92998","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.bettydavisdooleyfoundation.org/","fqdn":"www.bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T12:12:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":6,"received_data":208666,"sent_data":3585,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bettydavisdooleyfoundation.org","ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-03-06T12:12:35.212531Z","last_seen":"2026-03-06T12:12:35.212531Z","alert_count":110,"request_count":55,"received_data":1286304,"sent_data":44221,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"www.bettydavisdooleyfoundation.org","ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-03-06T12:12:35.210404Z","last_seen":"2026-03-06T12:12:35.210404Z","alert_count":2,"request_count":1,"received_data":252174,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":12,"received_data":463079,"sent_data":6820,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","size":5677,"data":"","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-04-04T16:03:11.685325Z","times_seen":9374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/elementor-pro-frontend-js-before","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2381798dbe27e857ae9d653ccb7916b8","sha1":"30d304fd909cd296c085dab4e66668955521346b","sha256":"a47004b87ec43fbf785fed9e6e6511bbe27d0c3c1f0a0e80eb04ca0fd7ab3b70","sha512":"14a57f1cb3fe02d6ddaddc54ad72341dd8ca06832c4ecef794fb3ce1f057ef45615ce42efef79bc707d5c69ef4885385d70756d399e98e253e9c90bb6a568a95","ssdeep":"","tlshash":"5351c156de610d2847ae97f861c63e6f44940332e5c4b50c529af07041fbcdef06a2e7","size":2728,"data":"","first_seen":"2026-03-06T12:12:39.718389Z","last_seen":"2026-03-06T12:12:39.718389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T16:49:48.18061Z","times_seen":685734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-04T16:52:35.08005Z","times_seen":59966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3104bc60cbb4e41333b3c91445b82cf","sha1":"90e7c91b88296f0ae576de018bda9cf6f3c12d3f","sha256":"a0fb7b5ad02ac641113945d86a5ff43668f8a31a228abf27f0590d751f43c54a","sha512":"746ad208553f253bd1d88614da9e7bb8d0f3274fb71522a7dd41dc25cd3a02ee58dc3395a163838c7d73a8bbc3a3f1b586b00ba589cdc527d10f28448d21402b","ssdeep":"96:CJm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGfV/xZdUyKfKAtZ2JWEfPvkW2e:CJmSjqOf55/UEpUTW7vgoL91SEV/xZd/","tlshash":"77b1416272922977c58f815b77434a2df2322998740652ad7a796cef11f1ec033f1b34","size":5239,"data":"","first_seen":"2026-02-20T20:24:02.157981Z","last_seen":"2026-04-04T07:58:50.328629Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-04T16:52:05.626904Z","times_seen":62191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","size":1830,"data":"","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-04-04T16:55:20.775367Z","times_seen":11116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"588913c160a202cc059c17af3f353f08","sha1":"94fac16038136a3377d0c1e89916e985941ebdab","sha256":"254a5514220a6d7b67c0184d9c9d3411fa4dd38e860a88b5c275227a140f96cc","sha512":"d2c5c89684145ead710055038974a3f4ec731d620f7f32f1b977b234ce245dc53821e7ae5275a2fd0390291d323c513d0fef81a3d9f26ce6c7767e4899cdd788","ssdeep":"","tlshash":"c9d0a7aa1c758930a799058f31b7e394267275a07711d64081cacc3b6a22ed304b2998","size":236,"data":"","first_seen":"2026-03-06T12:12:39.719264Z","last_seen":"2026-03-06T12:12:39.719264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T16:49:48.167548Z","times_seen":639087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9af5e221cc1e3133092a28d80a7e4bc","sha1":"a3b0317f3bd98c65630eadaa905f751e3e35edca","sha256":"b38a033d171799f959b68453e15fb54f66d64b5a2fc31ff81bdc8de8ca4aa654","sha512":"594fe0822c32d660e6d1a23484310d98764124cf9f975a63c740d369e14b9517133ed65f617a7b20c295b37c6d8d5fe0a37529998f8e582c8575ea7de48c1a4b","ssdeep":"","tlshash":"fc0120a030a2b8b605af408774c7017c25102df2740a68b2b9cb84d16ab4f953342775","size":751,"data":"","first_seen":"2026-02-24T12:06:45.306896Z","last_seen":"2026-04-03T14:06:55.962163Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-04T16:49:22.477024Z","times_seen":176152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-04T16:48:48.491803Z","times_seen":72242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/wp-emoji-loader.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef86e1db9f04fbbd463d6a5b975cf927","sha1":"bd2d4385b11fe06a1ce1b26e28a4f9624a0e06d3","sha256":"f664d2737518b387fff408223acf4c44e27437736e60cb16ea8875c6cffcdf35","sha512":"af6221a2db3f50216bf286faed610cb0bc750feab8ed687a7a7817fe56744f4962b8042a93f712dc89789d3b014a214ddd52dc9e65236eb46e2549b3768f9168","ssdeep":"96:cvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Su:5N0LE0+1lfYsvSB","tlshash":"4991859ae7763cdfb2f900f2697a0d47eb614435d6c8d438c9aea3241cb5893c274a46","size":4322,"data":"","first_seen":"2026-03-06T12:12:39.72071Z","last_seen":"2026-03-06T12:12:39.72071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"633a92c50ae895af8480eac4e7a07c2c","sha1":"c4d0d883ea222445a36e1029d30b5a290a4f1615","sha256":"4dddc79b1fef51def75d51d67f68782fc37ca96b78d4bff16299b3ca016f28d3","sha512":"f34a23fc4bc3b9775b753fa535636bc08f8c82c2004ecaeec7fc07a99462a4ac129cc42b549d13fcec5ce89003da0a1062c1af69dfd5882852485e327e35ac84","ssdeep":"384:CzGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN74:CzR+EVxFm6cKikdHd7glQtHuGJswg/De","tlshash":"16b2d9063163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","size":24046,"data":"","first_seen":"2026-02-17T11:08:00.788736Z","last_seen":"2026-04-04T15:48:54.499061Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f49d00e6c39b6b8170aac3295bb011df","sha1":"380d06dc14eaed6b4a85ed51e4e7f5ca3ce71e02","sha256":"d6c394b0a726f4ed54bcbf354e983e3c6e778011b7b4e4b40bba740b54a502c3","sha512":"6e0880c03199be5602ec6ac9387b8007b1ace416eaca16486061dd1fcf8ff9aa8b2bd794539bbb9d5a8d15424d03f5ed01d18a5f51c371006cabf98c0b705727","ssdeep":"384:ClPfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sr:ClPfucUQ8HOfXXtaij86dYmJaX0b+iEM","tlshash":"ff9282a53161688b4a9e24bab893019cb70325bcb686704eb5fc08ef9774dc1733537b","size":19775,"data":"","first_seen":"2026-02-24T12:06:45.301473Z","last_seen":"2026-04-03T14:06:55.964494Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T16:49:58.255103Z","times_seen":292295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-04T16:49:22.307094Z","times_seen":108815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-i18n-js-after","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee15068464954176485665bfb025604","sha1":"79f7ce00bf86d02dd4e0c24ba4facb426760f32c","sha256":"01b2dd8733b559b3ae1be3075df6538b2490c243aa76ec18f45b451d8112c630","sha512":"34e352b4f720b853b57cbf5af50736d47843377f515e47e885cbd8d45dc89a9c78811332ff1618e931fc7205d5ac39638068938204358e35666bab0e135a0972","ssdeep":"","tlshash":"282112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1425,"data":"","first_seen":"2025-12-03T18:53:01.973916Z","last_seen":"2026-04-02T20:38:35.497324Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-04T16:55:20.811161Z","times_seen":18804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f7ac29094f085858922abe9e725da2","sha1":"2fc1d7394ffd5e8ab2a20fe418f448f4ac2a4d3c","sha256":"b6908ef9b3c3041757443dcf9369883e58ed5be1d3eae09f79fe54931f6d7292","sha512":"c6cd8ca7efdaada7a69b93432280e89cc7f44a920b2a5b308dee6459c448dbe83279ceb082d6e9b04a880e632361ddd79f77655d48b39cf4a3a42721732dd727","ssdeep":"384:Ry+iWx4ll1d2Dt2NaUvNd/B3aDVXhpeE1y8un1rhxcHcRP+bXD6:MFWx4H1wDGPd/1ILw1NxcHcRPT","tlshash":"dbb2d7c67adab1a18f75a438106f74dad5bb7f8070485504c620f6b4fca3399a0abf1d","size":24593,"data":"","first_seen":"2026-03-06T11:38:49.871704Z","last_seen":"2026-03-06T12:22:48.975657Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82bdbb8c68f7005071fa53867c50985d","sha1":"17491249a6ebb6897ff1c21eee1b4463a54ca7f7","sha256":"13a74d448663f3f9bc16da1c986dd30972218b9f6fd975a61a8e80c410fa5f0e","sha512":"a006cf67eef50432927c8a8329813b0df843c6b851c99042d696d9f9e7199b127b2dfac9c041c80ba4a024365ed03669ba103290bb23c943a655c8c3b51c82cf","ssdeep":"192:sgvhePaTNyWsPHlrf6S2wvu3HCQo4LqZy4biMPBWP/Y/id8AxcRigwC6yn0eAdlH:sgvhxs/lryS2wmXC4WHiMPBWP/Y/id8s","tlshash":"5e12c512301d616149cfcbef76060e2e552101e9f42d759c7478caef76b8b8297fa236","size":9761,"data":"","first_seen":"2026-02-02T19:58:20.395861Z","last_seen":"2026-04-04T16:42:28.636099Z","times_seen":796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-04T16:48:48.46504Z","times_seen":66971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d97f352a4c70eee0bd22e556cdb273f","sha1":"1de424539fb8cdb856241ea438ac07dc47992caa","sha256":"2c7e6d34bee3736c83ae575757404ebb0832637b09357702e331b3e1e8256e75","sha512":"e93c7771dcaa51d4ab34a5781a73602c9f67721c93ffa45d181020b58d18b7271c45fd31d74220cd6d9f788ce28157cccd2d8a9933f860022db7c328054aef81","ssdeep":"768:C7/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7o:CTtDD1+WE9A5yLcWJ9mBtIoERuWfRMBs","tlshash":"f313955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","size":44257,"data":"","first_seen":"2026-02-17T11:08:00.781275Z","last_seen":"2026-04-04T15:48:54.568687Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T16:49:48.120284Z","times_seen":131783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/elementor-frontend-js-before","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f64b66fd576ea348891ee3ec1c1bd47d","sha1":"34a7f05ef04c19abfe1c06cfa994fab58348651f","sha256":"25c8fb4249d6d63a56d47a41252dfefd23bd837b18bfdc6e64e861a4ccd06343","sha512":"afb31b4f7e90939657122927ae0187950abe15456ddde9ccfb25bd49393165fd907ccf233e5363d66268c104ea29fb07823672ac65828ee8b7ba4dabf7de1cc4","ssdeep":"48:S4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBtTQF/U7/ZqGRdxMkELbfxhyWWgNs:S5qPCuUUeXRJwJBSFM1RdEPUQs","tlshash":"3d919321f9456d7e87e38bb53923bf13687c0226d08079a4f4fd44bc05ba966320be87","size":4268,"data":"","first_seen":"2026-03-06T12:12:39.722276Z","last_seen":"2026-03-06T12:12:39.722276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af626068d1cf22bcda68ef891c4c0023","sha1":"549abae5ef085c46616c236f5475cd7d744c8ed0","sha256":"e8c5718a9e89c04aed87992f34c7f5d705895b4f84604d4fca4331a80067727e","sha512":"6c68a9e17e9e40cdba77cc410452f2ed366212ce82c3a8388f140639d140abab2728ee3153fdb194cc332177c30f98b471c4948d8b723087e137fd3634970f06","ssdeep":"96:CzfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:CzVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"7ed154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","size":6247,"data":"","first_seen":"2026-02-17T11:08:00.763077Z","last_seen":"2026-04-04T15:48:54.506769Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-04T16:49:22.163605Z","times_seen":107648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T16:48:48.531715Z","times_seen":218016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"28f2922553fb948451b05d2093f060c7","sha1":"3dde1e3b92b73e5f3c38be1e40a93e8ab9148689","sha256":"c7785d623400eb6b69ef7210c8499041802b5d079442894886bee62bb4e1cbc0","sha512":"1bf42e82a0ea58375cda4808de8484779df2c0ab325c62490043331aa58a16438540bc1a40e6b1c1bed441dcdb6fde1f47ffa31cfb1d188b8cddbf2785f89e30","ssdeep":"","tlshash":"c251b52179456d7e47e38b853923ff13687c022690807da4f4fd44bc05fa966320be87","size":2951,"data":"","first_seen":"2026-03-06T12:12:39.723264Z","last_seen":"2026-03-06T12:12:39.723264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 16:01:16 GMT\r\nexpires: Thu, 04 Mar 2027 16:01:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:50 GMT\r\ncontent-type: font/woff2\r\nage: 159055\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38804, version 1.0","md5":"2175449f9d4450ae6ffa92c12e38768c","sha1":"682cdaa40af625ceedaff11e83167ad78194cc1c","sha256":"54af24bd0f911f0fd7399d5445ea2023ff501d6a69f2d728f1213072f977ab14","sha512":"2dcc58920335757f867936e243a7f3315a8d2ea5a55c2f58412dab7361a9038d90c31e1bab6a95d0886e30c338b0a3337ca82c6e1e3f329583bc1b43e7569005","ssdeep":"768:ks9Jo7FMnoJCuKNFH68vNpT1eGJM0KtIfzaWG5Avamb5q9UcnRjw:L9Jo72nhtjvNpTlM0kIfzK5AvaWLcnRs","tlshash":"3803f11094d0b285d02d2fff9a2f48fde005cce11b6d9735abecb6f46641236a2080de","first_seen":"2025-06-05T03:25:00.901256Z","last_seen":"2026-04-04T15:53:11.750321Z","times_seen":2656,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":67,"dns":1,"connect":21,"send":0,"wait":36,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-04-04T15:57:11.956962Z","times_seen":9960,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":120,"dns":0,"connect":13,"send":0,"wait":36,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.6 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 554\r\ncf-ray: 9d81446748d2120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:45:08 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1830), with no line terminators","md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-04-04T16:55:20.775367Z","times_seen":11116,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2621\r\ncf-ray: 9d81446748e0120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-04-04T16:03:11.685325Z","times_seen":9374,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2948\r\ncf-ray: 9d8144675935120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":6247,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"af626068d1cf22bcda68ef891c4c0023","sha1":"549abae5ef085c46616c236f5475cd7d744c8ed0","sha256":"e8c5718a9e89c04aed87992f34c7f5d705895b4f84604d4fca4331a80067727e","sha512":"6c68a9e17e9e40cdba77cc410452f2ed366212ce82c3a8388f140639d140abab2728ee3153fdb194cc332177c30f98b471c4948d8b723087e137fd3634970f06","ssdeep":"96:CzfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:CzVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"7ed154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2026-02-17T11:08:00.763077Z","last_seen":"2026-04-04T15:48:54.506769Z","times_seen":275,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 140483\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T16:45:24.005391Z","times_seen":133262,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":13,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/favicon-300x300.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-300x300.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20328\r\ncf-ray: 9d81446ebad2120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:46:52 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49b13672e95559192a5524de17cb1445","sha1":"61bf9f634cc17e762e87c4a3fcb8104122737a5b","sha256":"e544d6ec0db51cc260bc9f18f63677b056f4fff08a40b9257b5c6b3c1d0a3e32","sha512":"d29ee7b5be06f47aaac5ea6628e41abab8e0c6a5fff12e8cdc59be510159c307de27fd59a5787cbf2801a0a33997b652cd2898c6e1845ac5a4036db425e8fa85","ssdeep":"384:FkcEUUTZ1XlVkxdtcXXvII6Im6mrESuk5wYyO:FVmzP0UXXvn6IIk8wYyO","tlshash":"1992e001e339256481faf2f271a14f96fac0131a57f70356cb6a11a307a71e5a43cbb7","first_seen":"2026-03-06T12:12:39.647922Z","last_seen":"2026-03-06T12:12:39.647922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.6","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.6 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1402\r\ncf-ray: 9d8144670f95120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:45:08 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-04-04T16:52:05.599127Z","times_seen":26678,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1126\r\ncf-ray: 9d8144670ff2120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-04-04T16:52:35.129686Z","times_seen":37166,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 830\r\ncf-ray: 9d814467080a120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6713,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6713), with no line terminators","md5":"f94a49c4961bc08d71abedf98d482d79","sha1":"1f71eca41def14e975ce1ba14313f635323a8d01","sha256":"cf502b45ef8bcae37a65822f78546f6cc7db74faf8f48850bf8a860262817fe6","sha512":"709ba29bb0c9d3e4ff5d505c9d40e51cc2aa069dec27809b17ea754d60f5aa30f7888d0a5aa7c96effaeb98b4bda0ecb0136f685532d073051c14691b2ab31a4","ssdeep":"192:lozzzlztzDTIeIUI8IxdEzWEznI1zkDmdz0zaz6zgsIXIBIhI6dJzLJzQIuz91rn:KnhBhXIwYY2+OhSnqmwsIBOt","tlshash":"e1d1a6757f0b6a358d6b2c5b1357a06f668080e9a182a342c04318035cfbfde7bb857d","first_seen":"2025-12-04T23:21:35.478119Z","last_seen":"2026-04-04T16:55:20.75107Z","times_seen":17853,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/css/modules/motion-fx.min.css?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/modules/motion-fx.min.css?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 310\r\ncf-ray: 9d814467083e120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (778), with no line terminators","md5":"b3bd8e89ef04b52ab3b0d57a15036500","sha1":"c12c35d0c0d39c245d598582030f7787492ce324","sha256":"830e206b42444c7bad7bf3ce729c00a11e0f4cb76b01f94f2d5d2c4578f7ee79","sha512":"909e9d6fc2faeb0f0c09462c43be0b069d9a38f8b1475605e5f2083bc5f1ff9c3449ad79dd962482b4cbd7c5716ab12317191fd8a06b06f0267d8a28ede9d406","ssdeep":"","tlshash":"6601085b3e076238508f530681f2ed0ca2398dcbaa07a19dfb19815b41ef9a82183e07","first_seen":"2025-09-16T03:42:31.452311Z","last_seen":"2026-04-04T16:42:47.55903Z","times_seen":6624,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-nested-accordion.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 967\r\ncf-ray: 9d8144670847120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5206), with no line terminators","md5":"7bfe541f48646070d5e901bcce90f45a","sha1":"701d4288ee57b2c22c602d122624303dbfb97a9a","sha256":"4ada91f83b55c0318229073b7d8c1a5439d8bab52a6b7199003b5a0a759f416f","sha512":"0b9fcc7ad05aad2b0b276b31ba74bc262952e6acec1ec9f24ffeb485309e666cc1d687e9488916ee6a45c62954904c3617902e95e4063c69dbf8cb8eb6f93c15","ssdeep":"96:zy7aME5lVHfU1xF0s52QkkhG7sY9yDryr5ZOtmosx/K4i64+W4WWz3WzdWzx/XWn:e7aMEvVHfU1xF0s5NkkhG7sY9yDrU5Ze","tlshash":"c2b1dec0780f426a242bee850fc65f3d11b014e1dedeb55ca9579d1973edba29ee0834","first_seen":"2026-02-02T19:58:20.421897Z","last_seen":"2026-04-04T16:42:28.689141Z","times_seen":815,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 02:17:46 GMT\r\nexpires: Fri, 05 Mar 2027 02:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 122065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T16:47:35.396763Z","times_seen":184093,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":71,"dns":1,"connect":8,"send":0,"wait":11,"receive":3,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9d8144673877120a-OSL\r\nlast-modified: Thu, 22 Aug 2024 22:36:20 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T16:49:48.18061Z","times_seen":685734,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Mar 2026 10:50:09 GMT\r\netag: W/\"69a80e61-4d7\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d81446748cb120a-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Sun, 08 Mar 2026 12:12:10 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T16:49:58.255103Z","times_seen":292295,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.6","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.6 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1829\r\ncf-ray: 9d8144670faa120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:45:08 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-04-04T16:52:05.581511Z","times_seen":26695,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/favicon-150x150.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/favicon-150x150.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8638\r\ncf-ray: 9d81446ebadd120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:46:52 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":8638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6f65001b88f72e6d8833befdb99a20d","sha1":"5ffc825fa7f9fe78a88bf1e6155a77f7014b80a5","sha256":"1969de28ebd50433db94e40153a3ef1c571bd4730ae6453a39b4147afa589add","sha512":"fda3f7bf073321fc3577c917ebe34210fef5f95c96391194e7b412b0fe02924353d7d13d69e6a759d48e234876c842beca06292efdb7b098ca45759d6acc9079","ssdeep":"192:80n1xM1KPoPcD61s1NaSwRR6yqxHFCDvmyOE6mSNNFu5WTFXPVenEnDw/:31xM1YrDaVqxHF/yOfmSfFu5kX9eEE/","tlshash":"d302b0906a9e7c7ba1bd29045dc7234fb0cdd0888d88a25def9b6249f36b7421d39285","first_seen":"2026-03-06T12:12:39.656505Z","last_seen":"2026-03-06T12:12:39.656505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:12.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000; cf_clearance=i0oNDZaQ2KtW4Bwu4intWaTOReSUSjYiI5Z45L1HTZ4-1772799131-1.2.1.1-GkKmMU4Tqg8Z5rqfGTgFH14C00lQtvo_r5nFRAj8vd1C.LIfCbTIMTszDcGihfOw2an.7I9DigZG2g8vOO4DRbjqnEQCCTPz9TOZKVDZT78CW1Qds_RFNS4_YNbFq_h5xQkVN3ZtG5ZS.POMeCkM89StqkLL6HrCs_icKXGzbRhP1Fvm.jQ7RfBTDp20zGfRwFBtu7DpgXQXDo.enmmc_KgUl_QJCf1_1gjtunGd7H8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 656\r\ncf-ray: 9d81446fdfe8120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-04T16:52:05.626904Z","times_seen":62191,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/elementor/css/post-10.css?ver=1772226672","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-10.css?ver=1772226672 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncf-ray: 9d814467084a120a-OSL\r\nlast-modified: Fri, 27 Feb 2026 21:11:12 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":97975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42338)","md5":"305934af15837d27caad82af7c334405","sha1":"08595fef5f7fc1d77bd8945fe5e327b9aab06cc9","sha256":"6f9393a139700f4015778cb39368ea8c2939755ce867d42fee3613086db8fa37","sha512":"3b573772968ce24b0fcc1ab10798144cb42839b3c8a3105d55a72ce85b443d729da4f7d1d2ecdb21ae9ab6ca82255fb4cfb6a8aa71f49a7f3200abe42bfe7335","ssdeep":"1536:nQLG8rzK4JoP3/JG474CtjSZGTNV7t3tNVyV9ct1mR0U9dSlTNpWodsbtxZJQm7T:nQLG8rzK4JoPs474CtjSZGTNV7t3tNVC","tlshash":"8aa357507d835129723f65ab9103badc74a05ccad17e37c2f862902bf4faea17790a1d","first_seen":"2026-03-06T12:12:39.659435Z","last_seen":"2026-03-06T12:12:39.659435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/elementor/css/post-198.css?ver=1772226672","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-198.css?ver=1772226672 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 3924\r\ncf-ray: 9d8144670851120a-OSL\r\nlast-modified: Fri, 27 Feb 2026 21:11:12 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21769,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21432)","md5":"7b9e7dd2d289e0acd39cc03b5fdb4a59","sha1":"1c68084492532f6fbb638b61741877ab130ee0df","sha256":"696573916b53f767a7f8820038c5ce34b5625bba77fc7266c1c5af706130c73b","sha512":"9b230ebe80d0c84d9f1dac9296eaab1df232131003da120f8435ec5dfcf8624b2e7d16f7dfe42f3415ba8b514a56a9a182ca87ce2f1c96f5671dad75b0ada389","ssdeep":"192:UoQ2L0mERBG046uJqJ4QnJW9xZuQIJN4l6I6XRnJ2/BBJ2yaNg14jQ6JF2T+ahKh:c2TJqJrJrJYJpyE6J0udWUJyJ2","tlshash":"1aa289d67c43822e767f215f4043b98c2218accee97d7bd2f8110523f6bad91b7a0695","first_seen":"2026-03-06T12:12:39.660818Z","last_seen":"2026-03-06T12:12:39.660818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/Logo.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Logo.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8718\r\ncf-ray: 9d8144673882120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:57:08 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":8718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e9508472c54d8184a16d17b4cb694ee","sha1":"6bba90ae9e55d1277e74e837caeb8d0eb6fd84fa","sha256":"9e4baf47bd0c952f06b755cca5803336585a382eceb22abb1edeb675312ed159","sha512":"21fccced78d491703cb8578f950bc5398cc0bd02439b010f5955eaa9b803ed995cec4833dcdd8fd8fd935a2cf476360be6dbba9cec640faa1cb541d92d9e500a","ssdeep":"192:NB0VujDsE6T6RCwxE+RRqSeOvxN01/EHk+7C1Zmd9s/rG5l:NB0VujWTWNvxXu+ASl","tlshash":"7802af9f7bc703c6b025b0f4f5b6f215458ce0d7f5680068a4b8a9543da802bb696ec7","first_seen":"2026-03-06T12:12:39.662237Z","last_seen":"2026-03-06T12:12:39.662237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/Betty-Davis-Dooley.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Betty-Davis-Dooley.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 172772\r\ncf-ray: 9d81446748af120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 23:09:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c937138e14ccdd5e1a3f4a58e6f755d3","sha1":"f949b1b866eaffe780f963341c06edc483d81836","sha256":"cdc96b7999d6baf24b3211ba2373cbc1187c2c819e3059f4b205941b9dce1626","sha512":"f944e67429950be312fc9de33433254723503a35346f8ca9eada123bdee8e60c6fff802cab8993e54bd5f9d37e246c09e084c628da755c23dfa12c7cbbb7d041","ssdeep":"3072:fAqa1wmREyzt17EcSVcqDgbg/J6zh8XEfL0F7aWIcCXkmPQ:okmREy517lqZY980fw3rCXrQ","tlshash":"55f312846b8201e7915478f32662b46781f4c4ec1b65f81e818e7acb583fdfcf345a99","first_seen":"2026-03-06T12:12:39.663606Z","last_seen":"2026-03-06T12:12:39.663606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 11:46:37 GMT\r\nexpires: Thu, 04 Mar 2027 11:46:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 174334\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-04-04T16:46:00.505251Z","times_seen":32019,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":45,"dns":1,"connect":8,"send":0,"wait":43,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 22:01:06 GMT\r\nexpires: Thu, 04 Mar 2027 22:01:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137465\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-04-04T16:55:20.865024Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-04-04T15:57:11.967544Z","times_seen":2549,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":92,"dns":0,"connect":8,"send":0,"wait":35,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 117\r\ncf-ray: 9d8144670815120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-04-04T16:42:28.651719Z","times_seen":28429,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 382\r\ncf-ray: 9d8144670843120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1657), with no line terminators","md5":"c5633b9e0526503125e387d5f42543ef","sha1":"92a9fa314349f364104e5ca5bd4f52fde0530165","sha256":"7738ac41dae333c277ec1132c7ffa496457af424a623cbf02b56fea00adaaf1a","sha512":"e1133cb93373e602894a12ee6baf278dcf3753780401d4c6d8ee90599a2eeb8a7faac76a4c4b409ef40bae967452eb9b80816a8259f168ba34020cfc20c024ab","ssdeep":"","tlshash":"843130c13c5b5457241f5b2f305f258d64a24cd8ab97e796e892a20706f9ce43732c5f","first_seen":"2025-12-04T23:21:35.463704Z","last_seen":"2026-04-04T16:42:28.662465Z","times_seen":3686,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 11:46:37 GMT\r\nexpires: Thu, 04 Mar 2027 11:46:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nage: 174334\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-04-04T16:46:00.505251Z","times_seen":32019,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":73,"dns":3,"connect":7,"send":0,"wait":42,"receive":3,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-length: 0\r\ncf-ray: 9d81446cea88120a-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24593,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d81446d4c33120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24593,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24593), with no line terminators","md5":"78f7ac29094f085858922abe9e725da2","sha1":"2fc1d7394ffd5e8ab2a20fe418f448f4ac2a4d3c","sha256":"b6908ef9b3c3041757443dcf9369883e58ed5be1d3eae09f79fe54931f6d7292","sha512":"c6cd8ca7efdaada7a69b93432280e89cc7f44a920b2a5b308dee6459c448dbe83279ceb082d6e9b04a880e632361ddd79f77655d48b39cf4a3a42721732dd727","ssdeep":"384:Ry+iWx4ll1d2Dt2NaUvNd/B3aDVXhpeE1y8un1rhxcHcRP+bXD6:MFWx4H1wDGPd/1ILw1NxcHcRPT","tlshash":"dbb2d7c67adab1a18f75a438106f74dad5bb7f8070485504c620f6b4fca3399a0abf1d","first_seen":"2026-03-06T11:38:49.871704Z","last_seen":"2026-03-06T12:22:48.975657Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/elementor/css/post-6.css?ver=1772226672","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1772226672 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 566\r\ncf-ray: 9d8144670fb8120a-OSL\r\nlast-modified: Fri, 27 Feb 2026 21:11:12 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1682), with no line terminators","md5":"c38269147f90b277ec5bda9be9912f71","sha1":"7e4e89ca42eb3437067d3bf75a233b52f1f52b84","sha256":"54ab22d72acc1bae75aae427dab116d51c3bfc774664d09a1f56006109da3187","sha512":"c5ca9f38d1b0d8cbcb272c5086573efa0c1b08d78b470224c73fe5e2e16367ee621097b1f3ee12cf27b97cc1724fc2f66ae55c0d7b5da8cffdcf825c38c609f0","ssdeep":"","tlshash":"9c318c15be63e021f07b052fd2c3b41c151cd45f919f9eeaf82d8749e9bf9462228647","first_seen":"2026-03-06T12:12:39.676327Z","last_seen":"2026-03-06T12:12:39.676327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/css/widget-nav-menu.min.css?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/widget-nav-menu.min.css?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 4457\r\ncf-ray: 9d8144670fde120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":27363,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"66dd5480c3b3e7764d7665704a07ea9f","sha1":"63825e8f46dbefa07ffb7279684b970bb2b7b9a8","sha256":"06fb30016451c9231c285905d811198479b13ac6df5670861f73c22e0011064a","sha512":"71c32092e602c949f8a2ec12952ec6882e4f383ee6a21e4ee8e190dcd4b50b8b0950f96fdb537c6d7e7b2f6f4a71dadfc46377a7c5bf254e08fd1680b6fb62ca","ssdeep":"768:CdrPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+jz:Cl","tlshash":"d7c27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5910f41d7d5c6bb7b22","first_seen":"2026-02-22T10:18:44.790427Z","last_seen":"2026-04-04T03:48:05.39335Z","times_seen":123,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 448\r\ncf-ray: 9d8144670820120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":4726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-04-04T15:51:04.229913Z","times_seen":5146,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFkD-vYSZviVYUb_rj3ij__anPXDTnogkk7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38804\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 16:01:16 GMT\r\nexpires: Thu, 04 Mar 2027 16:01:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:48:50 GMT\r\ncontent-type: font/woff2\r\nage: 159055\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38804,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38804, version 1.0","md5":"2175449f9d4450ae6ffa92c12e38768c","sha1":"682cdaa40af625ceedaff11e83167ad78194cc1c","sha256":"54af24bd0f911f0fd7399d5445ea2023ff501d6a69f2d728f1213072f977ab14","sha512":"2dcc58920335757f867936e243a7f3315a8d2ea5a55c2f58412dab7361a9038d90c31e1bab6a95d0886e30c338b0a3337ca82c6e1e3f329583bc1b43e7569005","ssdeep":"768:ks9Jo7FMnoJCuKNFH68vNpT1eGJM0KtIfzaWG5Avamb5q9UcnRjw:L9Jo72nhtjvNpTlM0kIfzK5AvaWLcnRs","tlshash":"3803f11094d0b285d02d2fff9a2f48fde005cce11b6d9735abecb6f46641236a2080de","first_seen":"2025-06-05T03:25:00.901256Z","last_seen":"2026-04-04T15:53:11.750321Z","times_seen":2656,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2319\r\ncf-ray: 9d814467593e120a-OSL\r\nlast-modified: Fri, 05 Dec 2025 21:45:40 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-04T16:49:22.163605Z","times_seen":107648,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 02:17:46 GMT\r\nexpires: Fri, 05 Mar 2027 02:17:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 122065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-04T16:47:35.430733Z","times_seen":135192,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 13257\r\ncf-ray: 9d8144675926120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-04T16:52:35.08005Z","times_seen":59966,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.6","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.6 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 2076\r\ncf-ray: 9d8144670f86120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:45:08 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-04-04T16:52:05.616122Z","times_seen":26625,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Lato:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e60d92d1a3ec9b0ecddb3b2f3818ffd","sha1":"517b66169afb17d5d0538ae8d559371698077511","sha256":"9aa57887b113c39cf22bae9d6289ec0c6624a0b274c2124555e81235df512597","sha512":"791f3208a2b56caa224bd13ccb1f89f5660be92fa92e8d0163a5c0a081f0738e2de67c9258a67f2616e968cfce980018d1c18aec1741b2f05540357d77d68895","ssdeep":"192:43pv33pUn/J3n/lOw3Oir/i3r/Ux/o3x/TpwOp7RIu71D5Mp76D:4353m/R/lFx7u7Up8pTHF","tlshash":"0802c092086ba508db930dc222da7e36ff0fa25064559935efff14c8bc97c6a5361b0c","first_seen":"2025-09-17T05:16:48.274798Z","last_seen":"2026-04-04T16:07:19.899945Z","times_seen":5230,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":81,"dns":0,"connect":27,"send":0,"wait":35,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 76336\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T16:49:48.149873Z","times_seen":62412,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":74,"dns":1,"connect":21,"send":0,"wait":34,"receive":8,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4063000748250278:1772796220:TdUhHWIFtJjIMT_4Qnarj7OdBpiv9lNJL1i7qPXoFJI/9d8144643901723c","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.4063000748250278:1772796220:TdUhHWIFtJjIMT_4Qnarj7OdBpiv9lNJL1i7qPXoFJI/9d8144643901723c HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12175\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12175,"data":"G8vpHs9roctlloVLiC37cNbLbJvbFbYpiC7poSbXpOLo0L4YBVbdpGLsC4bebRRbSV4qbVNoj0bcLokLAYzv9OOY6vb6ggi27bFyR1cbCjbvr7OVlWYibauWx16CmJ7bUP3pLvXrNshUQ8BbbwQyvSP4ibqyzqLI8pyya9bE$kVe1EJKSsqLjs5pbmPymCDy3cboQhxgVC5si5VD$Q0boFMb9BbEv+Mptg6rNGveAdyh7tXehIox89BbomVbbBN83zUqlzzb9JnUIMG9vibbQhCjtovboa0Gbavg$sbS8qi$v3Oc0sBb9gVSbBYX6gPdlrB1kMb9XOosMnacbbLMPz1sPgk9Ukomkbt4gp9-1SXbbshE9eFE4hXbYMlxuqUdv3J0kh0QirDusMJ5PuF6sPLsgRts6drbp1$obvvMo$ZHPbv+Q7lEEHE0Y9REQdvEueVnOVtG5b0YxX2b1YXU9J9gd4gppUsw6H7b+SFv83Umx8yPoZhr2W$28h$jJAiaQ4lI4rp9s47g9hsWRGYI0vbbntwNmz4ysudSPhwrLsPU$3wjbSmVy1VJI4WeNSJ3xCh$Y-V3jZSjy$majo$eWmJbtud47+FP1a0t+nttvuDy2yH24$fR07G0LMoBY7hxYiCcWPDQbrIJoJ4YJSQt88$mXeEBO$Bp-AO7LO85uyJRVy1tf08QDPEikhJn-n5vt7E+bY6PB8VayFsfbwwNn8yg$UQ0pZ8xI98aaQS9QdblEmLI$viS3JdavRJJVdvsHnts50NiS7Xo$bbfl2PuvlNipJi7hzr7PEaLbpnPyn7L9+S81kBoBootjB0usMLIuFoL$L8pqiugSvIXpGhQuqY7OYxHpuoqwLW6agL7k+OiikhcNZbqi7nUkO8nXrOix9i9rPXhcvLbHgvNuoe4BaUGNLoqwvhHObsE4pYclE4Svlx2wL8Xp1JOms9vpveXRe6vkCdosgPDXpiP8hubo229wPO94gLfX2MhzMh1Yq$oKphzotN1UsSWOx9DWPkdKhrm99GUX8iGlNzBG0oVrU2X4t7B9vR7EhUBMR+NIGq2d7hCu97dpXdUrLhExWbWMY2ijP$LG9rgPbgrMI5zcgPoMeM-vvJ9CI7CHqvJdE75At7buu7NMpYJ$sNPs7k897VbUeNixr6qqevqu$OPaLhz7ft4nctN5zCrNJViS7qgj9vHty1pQO4No7Ehz6dOtMNM9iSbhEqKzQph1Q6+r1QY9bFbY64av83JqRXbmZoql5t4O7Uh7z2obnPucXnMuwApQuizto2yO8LbQXuv9RS-x6feiqPqSb5NWt8L9iirhM6gPsHgEL94CcrWj$Gor+PldbxaYLkGNkWchXFbhrOK1aPqcvqkpcrw+OKpqQhbiBycgL2EywLevb27wrp9MOjSgLvcSYomz0mbby5o70bSJ7z9o9A708Eg9pSYc9ky7OxDIJK45GmN8UzfpvOqYL5uyvyIrggsgNK-008K-UrPKCgDSgOgGb2txS0tsDGOdUbWvxtDQZA2niSA8PQsOasfqyaLSlL7ZyDK5L9bYZWNGSV7bvNYAWcEbR7L9mzesbMZE5ZIwwfRhopZe1pGVveNUbVF9p718ObL7A9Br7b31qclB5Wp-wlo+SAKgq7mC+NbSPqYig2hND7YoISPcKxb-omol9LwLwk+JcfM+ueLv7ZhFLeUKk36FdoS1HJrcv1iVbGg8bznvlji4JkitiObpi2s2bwWccY9j083$+YqGNw$62fEOiORJw2AYGms1rUoxgAuA1YXCQLUkwqbRmso7C9iQpxbMb+bhYNnlqbNukGiAbl683ik6s45iRta$G7Ak4pPDXCtc9m+44bX6qR41gV7yPfozX-YLsf1elEr32ogXhh7mNNb3zWnh5v+7qb3hRt79$MbpjN4Qn3Bv7X8jEHbYNiS2cbP2Hs7hL4zRrQaUvbPbVQpgpJFLcv7mH4aCaWrnpi8Mk+pVzapC9gYh$Q-bvO4VegsWjVE8cqDVa6W3XRC$JxCv9iXIjXt7MiZ7-$sY5eIw$WUbtUPpYbEUgDgYgchF4MgoEdLNHdyH9x0UxgCMk6jDxBEiopLpILWmgU8vJ+Hg1JvPSwbP-W03qm6$LYjYGFLzGcvsxFoESPs10j7iah-ajGEmconP2ECUhPbYKKv$nzw$rzsR+9YwGgBPgFz7QB+q20NMp4a65Dima3Gp+1JWr2L8RnwLEhQvXVsWg9hOgI$sOPIbsty92G8AktUBMyMFyxbNpKSjBAcbLYe3mG4s$PcAXRq7QhpzmloC+cHCa3U1jcPiZ$3pXlsUia+Xm6R+Su9oygDH4ArnbEfoX8nh6HEk$lAbVQwws14gPr5-wo$8YM66rviwzpxYuBwuVeX2hsS9rmWR4Q$W2XavVKRBw$t+YC$NgV9K$QaP9wsUahmEHlgigFFYic7oZb$eacbvkt4liznzYGt6VFs9V7hdkIR0RbgMdlsGVPCKNRhro$-sEnR+o8QLwIZKw8J9YPuxV3RpXxe$9MoBxg9W9nEk6h7oN$t6GnKpOdt4NtXuWufh7Eaq93nkwLwNVb8Pygrh71db$eEpte1WUjiw5iovocoZdQSJKMURMJ3Q3SxKlFuroaQb9YSS0z2JpY4KoOkJrp+PRFD5jjthi6bPSgqW7rgQaulkh7DRjSz6CkgDk8a3k5wiVSEJhtFh7nl2+P41p3RFL1eI3JtNDrkSWNwDjvgX9Npf09X$84X4bLMvfDoKI31$PbLoiVXXzbEOrdNvsCYwSPnooLXx9u1pbUt29+FUa8XzAMXroPAj-qYkm$aSrOjrK$wdQLMYAY9b7Ko1+sjNLyodRk7lmbVWMX+oYb56Rl$uMy+qxB1XI-nHzaxJR7JsPEU+tadmn2YFopzutv4bP6kb7cIuwgDQntncdPYmHsNh0P8+FNNuhlL7n9-G+J99vD8kkwynHrSPw6ujU3CSe1NWinm5$Py+K5-GujCxm4XH2L7yGKtSoPztEfoNJWp99jPUvzbqtAF0UCeCfGqlJiBUYIMbx8redUxhkQBerDmKhOZ9SPpMQ$SSL1Uz5VvRrr2hz5vMSfb1Dmf0Qsy7qbReSD+$NnSscD7$MgZcqQLXDMRLfi6jFexbISBc-RO6UCKWQjqL776BQPCLNSAG8m1+xgPwUNYuGXtVXQhnrjJwE10+4UtVMJSm4Lr$BlnQ14jbU+0-5VshAzeew$DPSpnfAWsLPaLMHmpSwhmmAmN+h-$4tgGJo9KynXtgCbHRk7wjEgIbxBqigiu$cS1cb7aQwKBVO1cNxlKeaRc$L-ms0yWpDE+JLgv7DCzwLX0t6IB-2mmht8koE0tIzehMO-RCapzYWo8SdxxwGUjmd4ydCdo8mIDB816ZB-SgOX9gwXlNK+Np7VDUWLLiALbibsp3ViKztmmvp7FmOj55l+fUBqcsg5IBrvmFfaqjMp-q3U8ccgMbnicBclIav0fUQpniKanbHlG$b$KLG+Ujo5xSDgPBMUj8cjrFVbUcqpYbiv4jNhmamSY+D7G+QrHNKN0S5SR9YU6+xv4Sv9t4LFD+PJRgWgrhiNPJYrAsx7jlV+hqPSx7fN65thnJXsioJ9N5rvHpHbxeiwaBfg$vl$q$KoRbSgisn0H4f0UNXbGl47ypivhBycRBB$UgopZb3cNhx9iaqj5SF9pkll49fBd9o9sjgsLFh5Bkn7jmhNBht+9kxJYa+Ba+RcmvxBrsi4leqU7hMlcB5LRwAiVPcBcvNmxb$hujG5Gcd5FeiaywB4VUseq$3aEsfcsvc0oqPBWUJ5z0xkRF8Bg9NgRkC9gqXbskrvUjXUrLJXsB8BdX3Fo2Y$zia7Gcxb9bP2+mUX+jXSKLxkOk3wZkvbfocPmscSh$WvWXP0GkO4j8KN-SrhyoO$fNwFi2Zq00zlnlAbK5ABJwx59m1ggJnshghNc5Rjr5Vhhvzbr+GcF+LBqUqPtgI2iaD7mpuee9e+dbS+3BHi$au0w2n7X+4EFSvwRrbsMpu5F4srw0v+hvtlPFujUN2pqUNgm9i5FhNBfEZmxo4vx+ujra97obD2159ppElFthVbxk7hvhPFPBr5fcEN6bop5c3FPBB$xithRcE2B$6mlvE2XUVBaqpQgF2U+qhpL9Oii9llDeWh7QPQXbYbYq12b0hvEXip4PNg3oZ+7p3oAoOcK+4Quh9XwpbvLlN+MjNPSrxb6bfNfU6oNgp$e8B429ALVw4jcS+5xbe5HiLFh$hEOEqU4Pp779lvNByo080h9b4e2pvJNpfoCNUFNVVbZXEBMb1jpvDrRcRBXU3o6NMb5jn2LJHQMEcF4V82pgwVsQcSO7xbdb5VGFygLkpQjaGrVSbvJhXFKNQF7vhBfcvcpVLb9r$p-qfVSaukhml5VEi44CH4cB$$xb$BngD7SolvSFhVjmc7Wet5J4xVUw$EsE973NBhJhtCJgbj0kajoXFmt+9eABwV1BISNsnmONLFagLpfViQ7Yj9lvP289ov1+9p+EMobv9bO5rwY7g9t99SpYaXeBP97YWvKbS8niHXpY65H5GYJhDX3lYmRV8eGV+qdVcesCVPQc9pYah$2JRpziVPejxoVkGXWl-JcJaChYdBcY02Bmjj-qz$ne52D7qRIbybkpkQamuEoqPe4Jzc8E8kBlnJi5xhi4ZX$RqNGrikbJhkklGrcC2gvb4PWbDcKRN90$HbH5qRNeYUl2dbqCjEYUE5K0+ccmR5trUqtRg9ZXwVFsqvjrNjE2M+pJSVJmM9amsVujPSsvI4Ob64eBWhUeO76NmNQpWBnjXgf$z5b7ckyVre342RzJNgo+xw1eUqWaKMfjGsO4b9ZRkm57-SBbqBroSRrvp5cE$sQpk2ykhvRqBhrwRkFUujDRjwdQiw5L2vZpxb6S$pw9SwllLF7WAw4PmNSrBSrh72qU97RbwYPeUCvw9l87hqz$tllVP0S+7EQ00beMVheaEEtqyN97cUgh9bxXFwLF+7d7zb3YghHMkgLhn+q7yY8En7I5aQJMamcRm2pYXUfVvSSM3EDYIc$i47mEtRGrP5HljMtGqX$JbFfGjl9mVwVgZXgJppbFvMfCQWivjlP2P8k5kplGh$4NxjqMBUz+lQPhOXYUqP27w$zYho8rYUEGLRHEO4zMXSwcnmpaLh8Gphe7O4ipohHFKwH0XbQ5+cARx0wWhXzIxk0V9IRoZN8mZB8C7QMWGrh$0gjlfYEYh$4Mj2R0cBXFop9pgCMGN2i579cjIbLp4NqNfW97Mi+WOWVPQjzaVPYEWrhqXQiYuj97SXuYIXwcnbc2amECBmujPNPS8SXbvkYV558V82Mph2z0z$HrfNJWyo6iylYCsWRjH$BgzEd9ZXLFbmOrp+BX97jwvSWaRkgGl0eGhQBEoYe+z+47lMdbKS2NB0hVclBYQQfa4sPqiEHIKIfN$M8wArq$Z55pq$6I1UVMzi2cNXRogJgQRBWBSq70jVvBoMW7zJj0X4hFZIq7fP3PxEoE8g$vo9GbJwdrKJ9p-qlXajp5gXXkKQ79ycEIxNXXfQMwgEEY7Q1+qvzQaFrwu-G0cjz+tBkgBW8VNgddacUNDrbGQWItAiqPsdVYcBhE$pWoNhOR4PjrFmZN5hurWayNsmFhf5hqV2WatXfryByXeERc1IckQpeghuXlGbmkHMz+rCdblGp$VhN$elwEehoepYaBcEPEhqx7x7yNgjjlRBud9ceoJcwpp6U0-07YhvREJvujB$3WophgKJfUE2PS2vrUJL+u2-vbPd6iABruipSrfcbgdkq7ENrS2Fxk6u6N$vv$GIvEAshqfVf2Z7NC8t0GjIRoXU9dIGLV-GXG6GHGgmVdX7kp2pUjRRAe8VPuqoG9YMLWAFn5xw6ajB3wAw5VMVieNRJeSr4qLFUegeEsC+B$NG6aE29VGCVh8zXpEpkR5QAe0h6bqEuYXUWv9WpYYh$qMbRJ8N1kh-wcjlRkropgRk5druXV97pjk0wa3VeXfcRB3dWawk3ikkdpCrHVt9Rbz9pvewkomp4l7q7M+hb+nu4VxQ2dWj08OiHzdjxpvepY7kKvC-phAb2kpIpgHdqUZ5IYEYsMdk+c7hghJhwupPU2LRP+ycj2w+9tJuWz$pIz4z8C+GNp4dMpZRqY3GXGvIwJSJqY1RWaAdydRc$HLFDXkguYUeJL7Ht+QpotYbg-Ur2Q-QVQzYGMxH-dcSyHuYz$MtVIbMwagrcrH6wa4suBDhkpLFz$QddSL5FnYm0nLIESwRMdpetRW$x7LFS$omUmPpPzgMzijh$adV-6eBycD+Q$h99QnGkBd9gJnNfNK9PuY7yizQ+0EQwdqUV6n7vMM0fRDd4VVX2dcuYdKGVQdCn7VSVhwQOSHanXvznwgwFz7Rhe-VWvs0XmzV4VcRNt9G-KO9uBd2n-YBE+8qRcf-2$GJPpQuMpxIU9CGPp87F0ujmQGbnBZRa0hv1wWeDhHbj0yiGtxizNxM0SbvQIF-svSuBKfNAm8d-EQd-HgIY6HbzpyVIKumpN47O4ovLGbaDpmI8KkgfkJ6zRt55pdzFt0t3l5t-qPj1gO+UVc0RpsNMpbGRBftkg5d6tBf2$bz$jxGUKSJ8Iq1CdMrLCzIh$vINpUVWeB47gmwmsbhB28Fb-pIyRdbnmVKmk4Ps0bh0EE$tmW-Un-z7YVVPkZRC5zw5KUfUj1wCpRBagXb4sKroN2ubk6gVQuQbEES1gPujm534rDCUVKLBS17c+WQovE2zH-unokfGfe1FqEMYUJzA2KlGIAuz6+MkRL$i$a6ausmC9l1VuRjUddQcI0eFmUjDGoKz-MY1FWo7vL5opB-A6q7zgA$ace7WCIFVh9RmjLHlzPWfP+6M7RpnxIERoBQzJXCn5mY8FP8ZnqYXeEeLn0-z1wYoQGCDgeWlmqm-wBKPzWvlVgpB5V38MghcBJzNgbnCgch0RrwQc2NychHMYSdONmU2dpdv$4M0jURpYpMm37HDFNaba96w9yNkrq7bg24LRcuiRYafVQpbuGlgebh+JCnPXe8-Mq$C97HuYMI877uLhyuVjLpNBIfwK5Xe7df--ogHlB$ZnNFzm$YY6IkdAFsnNCf9OtUPV+kGU2d1jipGtaGc$MH+vK1y1ArVOY3RO-fPH$vGnfNHoddwpLRsvz4+4hyMBFd4Aq7tWwp9kAj3QPYGu55P8QdmA2eVCp+ggh6kweklvUjXBAisSeJ4nbP+JNUovp-oB1YKLobH3WM5HCWa7LFZVrlmQspwQfeo0-qqPZpwptcbhB-H1EK+3OFe3vhWMUsk32m0aKyMbxkvayhouUuBhgu7v2fUMfND+NCRfNsjaMCHVKVwaHnRBfV9jVhrgCh16J6ea46PK8mK6hq7mvmwaFYvOWhI9hQZXEG3DDDtyvbaGpN$nA335y3OUYYialxCkqPxkhZiwZQa9g297DUby6HU-xGEGwVpjUycgqAWUd3Szwp6XLkQMqUUI34I9rQ87$DONXwUPP2Jr2A-kc8s7m44mlbvGJLE2vv1JiAQir7PC+g8PL4pvEXi94KbNtJShfBNoBfu9ika7XvcCniXlhNv+AozddkiCpwauN4knXcv0r+1Q0lpLi4hV4jtU8oWxVL4QxwGDwD$1RFoybgbqEw$HliM7cLw4DroDSdWFoV7tBAJhNHloEkHIj+AtEyHpYFoubbcLbw8RLS$7godpLpHaGn6XpNVY9G3+SgW6sg$oiPcp3vgcuJs2RYbFCifOPH1p$vnb4sOUOVtNo4cEwap3LYKb0bN4hoVAhiERbS6ob0PMYbNYtxEtkt4J47k7GigkP8p5pr7lx$H4U1Pv7Pl7mrOiGY2dX8LCveFG14rmppUkBfMvrhO9vU7+9kYvdoXxgiWt9P1gUyiJOvzyX+pu7licJvN1XQl93lxb69R9t4NumK73LSPS$9p92kY7lKeJHBs1-ENY73dYcxkHRVCkICgLgv1j$zJpNY7W9l917wchGkPpx6RSjdHwi-kz7l86Cb0iM8JkB7uvBJ4USCopNR4Dm0hEQH4k+vL5V2tl95i0NDp1N3Li2SibN-$rCvKQHRSgsDX7keNLjHlkkSSYpkhpq4bsEw8DXtouMS3sCtXigLcXx7NNRHu2Svi4XxJOPtGmDXR7UXsvziM-o22Zo4PBlc7G2Ujt4kXpHowfjhH9og2sk4hco43bUsppjXSgSVigEFtdvxLRw7v9uxVSdb3q6cwhxHsSm6kEX1Sr8SVkXa7uE9b3Y3jqu9Sq2N9BN-u13pruhNIPlKUresemuR4d4GvjyOpGCpR4plL73vtwvlf4k7XkOh8XvbuK4pR9lcKJdLck1EQzXn7UJhS9muOoN2iLWJKJjF8OEJk2Cgpcl1VzmoRkt4S7jbt6YksVkjLFm1uRz1XGmk5LyjgxUHYH-779gxr1-i3trbw2rv$Lv8Ohvibv7$pDsGhva18PKr2N3PXJGUYWqqbExUcMLJ2V9kcP4ODtecG9YdiF2earhBLSQ614dwKv0lMNbKSzuv7ZPnI1Sh8sIsI248gLoWtAYIum7S8eNlcpSuYob8YBLl6lbzsyR878NZV0izN9CsOv1ieP7B3qu7GskESEIegeh9h9+bzJeX4CbtwpppEvinpYt6mny9Di48teiEFjSdP8EDNI7cpFtKe9I228jVYkEnsppSPBMKeYlUCUQkp7H8c71p18oj9+2aOY6lV148Xt6bFBtHguo3sCv8czihvYLtXm9VFEVJYSgaRJsKRkbb4Ab1QbotsU7bX2xglLp$Um6IBDrH3jKWIutvi7K9rQP27C7wIm+lP07ezAdmj9xpyQObcDmOHJ2o5I7Ydn+6FLEX+Er0iKgtzctyCyp$pBMO6bIn8IDbkjLzittrNeXyX09wp+pX9biMginikip8vmsilkbY7eswLbb9UD7d4ENvrtU-KJ2$DpHwHnXUv1wr9XXjvbiUndtg-c9CixbhiC91idsDNK01EN96u45pFCOot71atLmffXrhWHPHLljoo0HktLHFb1ISF5HxLSht$wbpVb5pnUGykht8RZ9qv+DQwWcif9lqnbbwDXeI$6kvQyLJLrjuNC9kn$4xDfIJePo3ROXtRr4gz1otss87WrdchS1w4DIbECpGwBUtE6suOc34rhhqYYPKXu5CvXjb7YCusua2hmta7wRV8lvOQGRXRIJc9tNp6$dL2dGnW9b97-XMhIaUX3Y1pkv71LmriC9c6vdG2rvQpbYbS6izsk58W7OeHB3e7h5Mcq4g6gXbczhNJL6UtU6eCzb7PF1tNeLoa9P8PqWvZNxp7PtIs8ehqhiON1+psbMX7LhLi$cjtR9OXdpeQQw9PbObxpYUoYt-Eeu$9hNzMcUt+Enpe73pNJ-PbsXG32dBLsRKfv2hI3t6nV01UjE7bYjR7Hv4pIVnpbrkj7Q8t47mcV1dRnXRpJJJEsbS-4nuAbzbeg0fvVkXmMUcrRpv8vhtS9ZbffhzpCSetVPLC2FSF93g5YBmyi4g1QE2Eu3M9f8SrjSE3O5N2mHa9rW7vN9tjCmyP7adFBFHosWsNCzr-0Dz6nRtQ4Pz2x0B4b6s5m0C9pD64Shf3Iu-vdrAs9Rsn3eUP414OYjdms6y8MCu47YOzAd3j9PC9rqNiKtlt0mQlopSpDC7ru1mohwpz0rDeBu0z-wdqJfjMoA4Yz-wVhvtSSUIpOmWb8q5vbC1wbZR6CflZ5+vbXtSzjbNo3gb2j$kZzdB28P9KnWMsdmvYNq5965My4Yz+v$YvHbC14tX2AVqp1qypyu4Ym4CM560dCi67FCAVNp5Bdb0LoR-DC-oJS17y+967oCnonxeyOEffVgPOcLfbPYBt3LHV5Dh7ipAd4pgoowM60MXHZ6lgcUIoqXMKSbErgWqHlrXd6pK10z8VPpVaYP6Phpd$cqv9XXpyY6ZR2Y5b35BLII1l2uY3ryUoOby78gGXjl+ehz1Nxegnbpo4kX8$-kIN3YYNSCb31rh9HhCuo3joiQ7xBg7RPo4BBincz-maYgdXVt8Il7V8xCZ4VEUiIU+sloCPNg+6gcSoFgLY17DE6HgF1e9e8prkcd21dzLg58WUZ7eyELoALQcUkLXrJ0xH1vnLiqRGp5jpw0gb99rjulrjpwGgIY2MdjYftOjwL5RRcU2XpyNvrJSR1rkmoHvvgBP+Rt47iwq2pmnHYRSmzQDclfRngxLNmsp$yOxR+9gR9rlpoholtBXDv9ra0grsf6W2SYzmIM9o3y4Yz7X9bvQr633u+GNpZmAgkn6P+p$NPMmqnbCoPb29iV3rkmOoQNMkX+2UZVYddg9jJtmYW7D6Qrvrk6bpqRcSxYzs8MeUaYigLRKo1KSs9oMdlFil6Ref0z28s+EOpCopNf7jMHZce931ls-bqP7lpahVY8MZtqMtRLDS-Yl+pkNCHmzaXES5bqXHkh$y01rQc7idOvhvkMxqE8kq7i7xZGi9cHLMyt1vJluSQgQF95m6MpNgYXHOGMXmDY$JlWD8ys+vGnMCv6cUhWa41LzM6c2CPwudShopNZpDtcosni5ghBvw3LghP2PXnCVJl2+DPbuheXgb3lPW6fHdhKmbC48EG67St4CzJW1m$LtyGnRSnLCUr-Gw+QMvQzwb3prIdJXYxr7qW+wkIDC1n+q$CMnlVOe+nH3RngCdw3ID$QG4GzSWX$I0XZX1MtP2R6wJd6iy6+u$iRlaPdEiy1xQbuRU$$B+Atx+zzgLu$mNiyg8XNsHRb$QM+UjDRS$sWbaljcZ3471$FbmgH2hwPyRhgjWGqudKw05MSnxCLrvKk5lDj$9ACQaQMDnMx+F$vY-aQMXbQ3MG$vYqa$tKb$o+NwDmsoqt7p011vwJYnaWVMpy6+8HYMI$pk+wsGMR$jWQo$Xh$PP+uNBS6wjkxF$PAmcHWyhe74FP8xQ$eY4aPWdN0wCqgdmpsZrlcGIhUguWZSZvEvn1Mg$VY0WEuDvQPAlwRYMgRuwPPyx-LRS1rQMdPIJMusRM9s0Ht0yLsUVUG7jFJr9$cf+gcCJjW6Lj44nW$8RHsFQdkQqMpwqGOs-9LXQqMNHsGOsQtLCPs+PwyGVjUtUCQohNwuMUUazMLSm+nsDWbhhHKa3CiXK4GEUmWBhQAMCHiIC7MWhFPaMzzKGS+CV6BlmFh2IR5JQMDRyVkSwVRvmfddR$GM3HXRgjFW6MlQk6HJWt+JndJPyh3gtRS+Guh$PaJRwIRKUAlxlPPtng5IxUCseWyFhIwHRaw-H+qHLQ+by25$57O2SjYAuRIBjK47U4ixhCZcubckwoilb-EdIDeh66lbA9ObSXCvdIwL7poQpgptNhQDSyqPOs-lhNKonl9Buq9u5df1h7gISjYNoo-AivDPvrsflAQ$+kGK-nkS2nbp6FRixEl73-l5M1gWcY8i+6o9vbbbB42AM2aJEq4ncvS0QY2yogvH70z1GxkL1pWlu-QwtEbyphia41XbqSJ7wXhNmarNbdpBtlftip4MctEXzhbboVLve1Ht8p4itNxLOCb4tzRH7LxMN4WbLp6tW2mvE8HiOhkM6KiB8XxD+HMF8bJNeN6bbHPbbh77EqbbiPEdU0npeJxw$QkKbzbtoEKlrYpbmhl0zPOHl2AaftdX05A67eiboaq7b0JqbKPbtrb05AhputAH9v-b0n+tb17teptdV0px793Xkh9cdob6bgBozWVa9dlsgLvVS+oLacbsBkUobYFbZ4sbNqwEgjY6FlbgE0ptfD8ocmfMhN5pbbH6hpJks0QpvLo9MfpF-zb6yxJSN9+7B-pg$aEwS6MJbSbyB-pY9ovg6ktQubf7xgiItPPfqxyr2Y91lpDubPbwMci$SutIfav+i6exhhWkSumkh-evEdgu4H4yith90gj1K+Laybn7LFtyIqaPkvoRPx1VMYBpjUsdlvi3dnvmNhfNJhiwayl1co+pnpx58oMN4IoL9Jbjezbe+bzAoXmN7BkbtbYNGOpK76cytbWoruhuhNigt3XGcy1hsPv8EhqlUOv42bK76NO$bLSLtiS9-0bim6Nb3NFk0t3$m$bNdNbFkEka$Aweuv8SQpbb2cyQNE7XzIQfejguPe8LfldZ5Z1hbrHpp1tvL9mj9br2JFkhLLpx2Grbbo5QkPbb"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9d81446e6966120a-OSL\r\ncf-chl-out-s: Fp0koMYT4xFLeRT+Bzk/ow==$qi5nEHh+4jSLh55F/YaICw==\r\nset-cookie: cf_clearance=i0oNDZaQ2KtW4Bwu4intWaTOReSUSjYiI5Z45L1HTZ4-1772799131-1.2.1.1-GkKmMU4Tqg8Z5rqfGTgFH14C00lQtvo_r5nFRAj8vd1C.LIfCbTIMTszDcGihfOw2an.7I9DigZG2g8vOO4DRbjqnEQCCTPz9TOZKVDZT78CW1Qds_RFNS4_YNbFq_h5xQkVN3ZtG5ZS.POMeCkM89StqkLL6HrCs_icKXGzbRhP1Fvm.jQ7RfBTDp20zGfRwFBtu7DpgXQXDo.enmmc_KgUl_QJCf1_1gjtunGd7H8; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=bettydavisdooleyfoundation.org; Expires=Sat, 06 Mar 2027 12:12:11 GMT\r\ntiming-allow-origin: https://bettydavisdooleyfoundation.org\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T12:12:10.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nlink: \u003chttps://bettydavisdooleyfoundation.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://bettydavisdooleyfoundation.org/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://bettydavisdooleyfoundation.org/\u003e; rel=shortlink\r\ncache-control: max-age=7200\r\nexpires: Fri, 06 Mar 2026 14:12:10 GMT\r\nvary: Accept-Encoding\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nlast-modified: Fri, 06 Mar 2026 12:12:10 GMT\r\ncf-cache-status: EXPIRED\r\nset-cookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; path=/; expires=Fri, 06-Mar-26 12:42:10 GMT; domain=.bettydavisdooleyfoundation.org; HttpOnly; Secure; SameSite=None\n_cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000; path=/; domain=.bettydavisdooleyfoundation.org; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9d8144643901723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"ZURB Foundation","description":"Zurb Foundation is used to prototype in the browser. Allows rapid creation of websites or applications while leveraging mobile and responsive technology. The front end framework is the collection of HTML, CSS, and Javascript containing design patterns.","website":"https://foundation.zurb.com","common_platform_enumeration":"","icon":"ZURB Foundation.png","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":251247,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"9717bd08b4ba903c05f8a8ad23be8fc4","sha1":"f65ac2032f3d86409d84ef67ab5ae3bc2922e396","sha256":"52f1eb31c1ed96c321d9918c3abb3f0af742bc94bbac749991b32f2ce7cef074","sha512":"0400f0b57ef10020d855972dfa0926fc6460a01f76fc5383d445aaa186af9e11213f940677110ae13ece2e767a2f65eb836d8a8a5a15097736334d3c4c2f3bb1","ssdeep":"3072:mE5fIgjW2OD4Leq6/LaD4GSqbLpD44cgm1MYJo+foColVM9I0SaL/Gp3ThOk:nIgikLeqcLLGSqbL24cgAMYJo+foCock","tlshash":"52341a9037aa127c711fa3ef8117751869976ef9e64095f4f3b31920e171ca83ee24e2","first_seen":"2026-03-06T12:12:39.682284Z","last_seen":"2026-03-06T12:12:39.682284Z","times_seen":1,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":31,"dns":0,"connect":2,"send":0,"wait":245,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncf-ray: 9d81446748e7120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-04-04T16:55:20.811161Z","times_seen":18804,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2014\r\ncf-ray: 9d8144675938120a-OSL\r\nlast-modified: Fri, 05 Dec 2025 21:45:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-04T16:49:22.307094Z","times_seen":108815,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5657\r\ncf-ray: 9d81446d1b5e120a-OSL\r\nlast-modified: Fri, 05 Dec 2025 21:45:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T16:49:48.120284Z","times_seen":131783,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:12.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/nested-accordion.294d40984397351fd0f5.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000; cf_clearance=i0oNDZaQ2KtW4Bwu4intWaTOReSUSjYiI5Z45L1HTZ4-1772799131-1.2.1.1-GkKmMU4Tqg8Z5rqfGTgFH14C00lQtvo_r5nFRAj8vd1C.LIfCbTIMTszDcGihfOw2an.7I9DigZG2g8vOO4DRbjqnEQCCTPz9TOZKVDZT78CW1Qds_RFNS4_YNbFq_h5xQkVN3ZtG5ZS.POMeCkM89StqkLL6HrCs_icKXGzbRhP1Fvm.jQ7RfBTDp20zGfRwFBtu7DpgXQXDo.enmmc_KgUl_QJCf1_1gjtunGd7H8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3622\r\ncf-ray: 9d8144707b78120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":9761,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9761), with no line terminators","md5":"82bdbb8c68f7005071fa53867c50985d","sha1":"17491249a6ebb6897ff1c21eee1b4463a54ca7f7","sha256":"13a74d448663f3f9bc16da1c986dd30972218b9f6fd975a61a8e80c410fa5f0e","sha512":"a006cf67eef50432927c8a8329813b0df843c6b851c99042d696d9f9e7199b127b2dfac9c041c80ba4a024365ed03669ba103290bb23c943a655c8c3b51c82cf","ssdeep":"192:sgvhePaTNyWsPHlrf6S2wvu3HCQo4LqZy4biMPBWP/Y/id8AxcRigwC6yn0eAdlH:sgvhxs/lryS2wmXC4WHiMPBWP/Y/id8s","tlshash":"5e12c512301d616149cfcbef76060e2e552101e9f42d759c7478caef76b8b8297fa236","first_seen":"2026-02-02T19:58:20.395861Z","last_seen":"2026-04-04T16:42:28.636099Z","times_seen":796,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor/style.css?ver=6.9.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/style.css?ver=6.9.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 659\r\ncf-ray: 9d8144670f5e120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:45:10 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (549)","md5":"1754e43e024571dcbdfe5f7f28a94d62","sha1":"5a50b024f6bda361702a7070f16d27bb616b03fc","sha256":"518156feb14c58c365a2797db4fd3fb66cadf90ba9df8d3f1e1088ea22fdadd3","sha512":"64d7174cf6bda2a8fca36fd96a3375814c10c59239841d4e150b726795c428df7ec465744c9e845064a51b94506b6eba7622b286bd5e3d1fde2cca7c353aabf5","ssdeep":"","tlshash":"cb21212fa6173133216b426a751731cee34fcbc054e844a4c54a86592576b6e03f8e4c","first_seen":"2026-01-23T14:42:36.970164Z","last_seen":"2026-04-04T00:37:31.962624Z","times_seen":220,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 807\r\ncf-ray: 9d814467082a120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-04-04T16:03:11.72718Z","times_seen":18518,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-04-04T13:37:59.204532Z","times_seen":2064,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":115,"dns":0,"connect":25,"send":0,"wait":45,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Instrument+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Instrument+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7748,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3124f2f5110271e3cc4d72b07123257c","sha1":"a30cefe615a028e65696ebe56248a085e0515f2d","sha256":"8abb5adcb98375e2ae9810f7d095e14b7ddc33f8653a7b27e243de329d78ada8","sha512":"8da79b7a9ccc5e05c5858b89d3b4bf183651d24a131d8e795cff710e84e2bfb4335ccdd33a5fde88a2450e97ab27b0450fd9d4d1b5f7b4ce10e5eeb568942606","ssdeep":"192:iiyziWZyzZWkyzkWTyzTy/lk/+Z/vi/wK:iNlSUrDQ3","tlshash":"a7f1dba1046fa6549f839dc123ee7e32ee1ea1607400d8259bfe2498fc9ed79437674c","first_seen":"2025-09-09T07:17:48.387315Z","last_seen":"2026-04-04T16:55:20.849789Z","times_seen":135,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":110,"dns":0,"connect":24,"send":0,"wait":32,"receive":0,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9396\r\ncf-ray: 9d8144675928120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":24109,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-04T16:48:48.46504Z","times_seen":66971,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3130\r\ncf-ray: 9d81446cfaa4120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-04T16:48:48.491803Z","times_seen":72242,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bettydavisdooleyfoundation.org/","fqdn":"www.bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T12:12:09.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:26:01 GMT","end":"Thu, 07 May 2026 13:25:57 GMT"},"fingerprint":{"sha1":"BF:A0:1C:F4:36:CC:F2:32:3E:54:04:67:1B:9E:6F:D0:1D:29:0B:DD","sha256":"75:64:7A:94:8A:A9:A8:B7:4D:4C:75:DB:5D:8B:01:44:A7:A3:FC:32:21:72:57:3B:35:54:DB:9E:11:3F:F0:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://bettydavisdooleyfoundation.org/\r\ncf-ray: 9d814462493b49c5-OSL\r\nx-redirect-by: WordPress\r\ncache-control: max-age=7200\r\nexpires: Fri, 06 Mar 2026 14:12:10 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=_Uv93kPLvAIW8yfhJ0cTjlCuKUm68n2yRn53vH4RcO0-1772799130-1.0.1.1-pr0o9mfvUOdNlt3vAiU47qGDerkRyNgMXg6puKNke27inwEGiAPDdCNmh06LrafDoG1hC.tIsMZNUfZ1oTp8aYy5WvH2HAuSaCazFwR6Lxo; path=/; expires=Fri, 06-Mar-26 12:42:10 GMT; domain=.www.bettydavisdooleyfoundation.org; HttpOnly; Secure; SameSite=None\n_cfuvid=TNAmpsUO5W8dlN.IG0YF4iAaTmP5LWm7mD4Y.n8T0Zc-1772799130226-0.0.1.1-604800000; path=/; domain=.www.bettydavisdooleyfoundation.org; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":251247,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":167,"dns":147,"connect":1,"send":0,"wait":262,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"www.bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 10145\r\ncf-ray: 9d8144670fb4120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-04-04T16:55:20.86315Z","times_seen":13219,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1460\r\ncf-ray: 9d8144670fed120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-04-04T16:42:47.55956Z","times_seen":17462,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/css/widget-form.min.css?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/widget-form.min.css?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1737\r\ncf-ray: 9d814467080d120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":6797,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6754)","md5":"d9a8f9588e65cf27018e17e03e8dffe1","sha1":"974508f91ada5b381131169b25c05b26e3270e58","sha256":"e553e977dda6409d6cab29f2a0a918195b528924054fcfb2ad9ca75a87211e05","sha512":"c625f4ada79ee9576993502bed33f19efc9971ed026b83cd85d54a8c6e5662dc4bf4a01b4ad071b5d17fe214e60d2ddfc079d844ad4ca1b2e8bc41edc035171b","ssdeep":"96:CInuedCc+P7p6YWHZENaFqZERQZENapmzYTWCqz6P1TZM3AKA/AujMWJpS5vF9I0:CzQEcME+EcdV4C5LT4jv","tlshash":"fae177f1bc22852b5927b8f9c5d524cc02886aa08bc1c58b9c7c6458c3feaf1537678f","first_seen":"2026-02-25T12:58:02.814421Z","last_seen":"2026-04-03T14:06:55.99967Z","times_seen":78,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 160\r\ncf-ray: 9d8144670fe4120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-04-04T16:48:48.536531Z","times_seen":56979,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 79\r\ncf-ray: 9d8144670812120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a006a019fa982ad49f20d7bbeb9523db","sha1":"6a547c9bbab84d6cdba37f24c9926065ef76abc3","sha256":"d9c370831c74b1850d70f5b1c99453d6cda21e5099428a3f21c43bd96c3acb5d","sha512":"4f0ffd920100618ad627d6b3c2dc95ff6fc362db3e358b74331136e65d49063e8fa38b6d2f25f0d0ea01ce47ac1a299f2b48667899892e961a874166d6d93495","ssdeep":"","tlshash":"d3a0029dcb84566742eb05f33818e9419a324cf5f8f332e964e8488886ddb9c2742555","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-04-04T16:55:20.792377Z","times_seen":30339,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8508\r\ncf-ray: 9d8144675942120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":24046,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003)","md5":"633a92c50ae895af8480eac4e7a07c2c","sha1":"c4d0d883ea222445a36e1029d30b5a290a4f1615","sha256":"4dddc79b1fef51def75d51d67f68782fc37ca96b78d4bff16299b3ca016f28d3","sha512":"f34a23fc4bc3b9775b753fa535636bc08f8c82c2004ecaeec7fc07a99462a4ac129cc42b549d13fcec5ce89003da0a1062c1af69dfd5882852485e327e35ac84","ssdeep":"384:CzGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN74:CzR+EVxFm6cKikdHd7glQtHuGJswg/De","tlshash":"16b2d9063163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2026-02-17T11:08:00.788736Z","last_seen":"2026-04-04T15:48:54.499061Z","times_seen":274,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.35.0","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.35.0 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14229\r\ncf-ray: 9d8144675947120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":44257,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214)","md5":"6d97f352a4c70eee0bd22e556cdb273f","sha1":"1de424539fb8cdb856241ea438ac07dc47992caa","sha256":"2c7e6d34bee3736c83ae575757404ebb0832637b09357702e331b3e1e8256e75","sha512":"e93c7771dcaa51d4ab34a5781a73602c9f67721c93ffa45d181020b58d18b7271c45fd31d74220cd6d9f788ce28157cccd2d8a9933f860022db7c328054aef81","ssdeep":"768:C7/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7o:CTtDD1+WE9A5yLcWJ9mBtIoERuWfRMBs","tlshash":"f313955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2026-02-17T11:08:00.781275Z","last_seen":"2026-04-04T15:48:54.568687Z","times_seen":273,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 06:22:29 GMT\r\nexpires: Fri, 05 Mar 2027 06:22:29 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:15 GMT\r\ncontent-type: font/woff2\r\nage: 107382\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51640,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51640, version 1.0","md5":"4a1dec4fe55af205131962c81c7d9e43","sha1":"00dae6552691229718117b97f7bfcf5f932acb9f","sha256":"4a2b0c886b2ea2e178108084a03404fe2d66db2baf7f5815e9067b96810d5827","sha512":"07b19c81887797b349f76dd091ac52fb9ba9706f037fc4793f044d43b88152ccf1717b60f00de0136275ae568060bdef7b300b95398c5bcdb802bfa46dace300","ssdeep":"768:ch5FogfQO8LcFb1nCp2TfvacieFgTghN7skf4NMGBP33QcNBbYJmSLK8bVE1KBai:czFoCmmbxAGbingrExPQcNCJ/dKo3l","tlshash":"42330235d30d2c5eb982acb01e6b32fde01493552e1aab36ac45759682858e5fe3e4c3","first_seen":"2025-05-29T18:38:05.678236Z","last_seen":"2026-04-04T15:09:41.046764Z","times_seen":2999,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":36,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2109\r\ncf-ray: 9d81446d7cf0120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":5239,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5196)","md5":"e3104bc60cbb4e41333b3c91445b82cf","sha1":"90e7c91b88296f0ae576de018bda9cf6f3c12d3f","sha256":"a0fb7b5ad02ac641113945d86a5ff43668f8a31a228abf27f0590d751f43c54a","sha512":"746ad208553f253bd1d88614da9e7bb8d0f3274fb71522a7dd41dc25cd3a02ee58dc3395a163838c7d73a8bbc3a3f1b586b00ba589cdc527d10f28448d21402b","ssdeep":"96:CJm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGfV/xZdUyKfKAtZ2JWEfPvkW2e:CJmSjqOf55/UEpUTW7vgoL91SEV/xZd/","tlshash":"77b1416272922977c58f815b77434a2df2322998740652ad7a796cef11f1ec033f1b34","first_seen":"2026-02-20T20:24:02.157981Z","last_seen":"2026-04-04T07:58:50.328629Z","times_seen":158,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:12.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/form.71055747203b48a65a24.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000; cf_clearance=i0oNDZaQ2KtW4Bwu4intWaTOReSUSjYiI5Z45L1HTZ4-1772799131-1.2.1.1-GkKmMU4Tqg8Z5rqfGTgFH14C00lQtvo_r5nFRAj8vd1C.LIfCbTIMTszDcGihfOw2an.7I9DigZG2g8vOO4DRbjqnEQCCTPz9TOZKVDZT78CW1Qds_RFNS4_YNbFq_h5xQkVN3ZtG5ZS.POMeCkM89StqkLL6HrCs_icKXGzbRhP1Fvm.jQ7RfBTDp20zGfRwFBtu7DpgXQXDo.enmmc_KgUl_QJCf1_1gjtunGd7H8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6836\r\ncf-ray: 9d8144709c09120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":19775,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19732)","md5":"f49d00e6c39b6b8170aac3295bb011df","sha1":"380d06dc14eaed6b4a85ed51e4e7f5ca3ce71e02","sha256":"d6c394b0a726f4ed54bcbf354e983e3c6e778011b7b4e4b40bba740b54a502c3","sha512":"6e0880c03199be5602ec6ac9387b8007b1ace416eaca16486061dd1fcf8ff9aa8b2bd794539bbb9d5a8d15424d03f5ed01d18a5f51c371006cabf98c0b705727","ssdeep":"384:ClPfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sr:ClPfucUQ8HOfXXtaij86dYmJaX0b+iEM","tlshash":"ff9282a53161688b4a9e24bab893019cb70325bcb686704eb5fc08ef9774dc1733537b","first_seen":"2026-02-24T12:06:45.301473Z","last_seen":"2026-04-03T14:06:55.964494Z","times_seen":73,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/themes/hello-elementor-child/style.css?ver=6.9.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor-child/style.css?ver=6.9.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 409\r\ncf-ray: 9d8144670f78120a-OSL\r\nlast-modified: Sat, 06 Dec 2025 03:33:40 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (554)","md5":"396113ab93af4333be1ad685e7b2144e","sha1":"8ffa5786a4fb8fa79d1291fa31a1be8bd013e6f5","sha256":"9fee234da7f95b886a6260a825b17be4929689831826883aeef6525872a8655c","sha512":"7c77941a6b760f2e1749b99d98ef969e9bb5c8758095ae5a28995531e80031170739fbb5a5635f38a75d46c4f300ecdaae8cc408d157a1509a7ece4269d21d90","ssdeep":"","tlshash":"a901f43ff2123332515f892a5a2881ced31acad4a5e44034749d46093b35b165bfdfc8","first_seen":"2025-09-21T02:50:31.009704Z","last_seen":"2026-03-06T12:12:39.710941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 135\r\ncf-ray: 9d8144670fd0120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:47:22 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-04-04T16:52:35.11715Z","times_seen":54295,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Playfair+Display:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Playfair+Display:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 12:12:10 GMT\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19734,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1eb9240d7f74f3827dcce4a328d39e22","sha1":"2e570a706fd48c9c68f62a3a560ed01015c26193","sha256":"f36247c80cd0de94f14a7484ed408a9b2fcb8c6b7e524d286d18745b89f8ebda","sha512":"2ea4c89d649185d0ffc91d36b1d259b1f28e102712268ed473bf6f769b8a522643d500e6c23cd5b7d4cc721e2f4f9f29ce67974b3f28a4d56017c2185105f60b","ssdeep":"384:JJq2SMq2qq2+q2cJP2SMP2qP2+P2cJ02SM02q02+02cJp2SMp2qp2+p2cJ+2SM+8:2XaKHS/vMRkUBcZJGbueLWTDJaOw/0vH","tlshash":"7392cea20567a2109a474cc227cfbf269d6e71607081977caffe1dcc6c9fd269264b0d","first_seen":"2025-09-12T09:49:51.475296Z","last_seen":"2026-04-04T16:00:40.384698Z","times_seen":1621,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":89,"dns":0,"connect":9,"send":0,"wait":36,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/instrumentsans/v4/pxiTypc9vsFDm051Uf6KVwgkfoSxQ0GsQv8ToedPibnr0SZe1Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30092\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 22:01:06 GMT\r\nexpires: Thu, 04 Mar 2027 22:01:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 137465\r\nlast-modified: Thu, 04 Sep 2025 17:26:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30092, version 1.0","md5":"fa41c43a3d8e68fafc0ec15acca8b6fd","sha1":"adbdfd9a78699a96a9705fbeb3470c2c653dedf0","sha256":"2ee17598a98d8a59e4df8152d015bec9ab8e4d5672cc0ab42bef806b568e3971","sha512":"936da7cff6f59919a72f564c6f1d3b78e1a3be000fb1ca712abea3266687846d53c25dcf1d1b78221c985d4e96dda91ced26a221d85e4521e3d661c71affa216","ssdeep":"768:eHpJRc2xEL2BUo6ulIYw1wXomue+I4oOf8oSY6fg:gp62Uo6kuOYmuTaOfwYmg","tlshash":"ccd2f18a71f9a1f874695de0b8ee9b54bf8ee3221ae7745610d10781d6e13083bbcc35","first_seen":"2025-06-04T20:20:25.58114Z","last_seen":"2026-04-04T16:55:20.865024Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/plugins/pro-elements/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:12.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000; cf_clearance=i0oNDZaQ2KtW4Bwu4intWaTOReSUSjYiI5Z45L1HTZ4-1772799131-1.2.1.1-GkKmMU4Tqg8Z5rqfGTgFH14C00lQtvo_r5nFRAj8vd1C.LIfCbTIMTszDcGihfOw2an.7I9DigZG2g8vOO4DRbjqnEQCCTPz9TOZKVDZT78CW1Qds_RFNS4_YNbFq_h5xQkVN3ZtG5ZS.POMeCkM89StqkLL6HrCs_icKXGzbRhP1Fvm.jQ7RfBTDp20zGfRwFBtu7DpgXQXDo.enmmc_KgUl_QJCf1_1gjtunGd7H8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:12 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 446\r\ncf-ray: 9d8144709c14120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 22:49:02 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:12 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (708)","md5":"e9af5e221cc1e3133092a28d80a7e4bc","sha1":"a3b0317f3bd98c65630eadaa905f751e3e35edca","sha256":"b38a033d171799f959b68453e15fb54f66d64b5a2fc31ff81bdc8de8ca4aa654","sha512":"594fe0822c32d660e6d1a23484310d98764124cf9f975a63c740d369e14b9517133ed65f617a7b20c295b37c6d8d5fe0a37529998f8e582c8575ea7de48c1a4b","ssdeep":"","tlshash":"fc0120a030a2b8b605af408774c7017c25102df2740a68b2b9cb84d16ab4f953342775","first_seen":"2026-02-24T12:06:45.306896Z","last_seen":"2026-04-03T14:06:55.962163Z","times_seen":73,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/elementor/css/post-21.css?ver=1772226672","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-21.css?ver=1772226672 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 1578\r\ncf-ray: 9d814467084e120a-OSL\r\nlast-modified: Fri, 27 Feb 2026 21:11:12 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2918)","md5":"493bbd2dd603d38d1d3cdde9d6174347","sha1":"c7415fc35b7b8905e6a1d08c3c5471265b73547e","sha256":"5086874eb0ac7e030023bc4766b3707948cb97855ea06fdc68cf898470edd9d5","sha512":"2e298dfcca40d4d22e8ca19a9a740accb5abd2747b37c17012124e1a6d00154cd386f206a129e7175c880a4e8c950fa0963995d0dc69e30b64664583e52a5a4c","ssdeep":"192:T0ElmADsUh0M+nfjItQVkIjwtIwQ1wjqHDx6a:sNn39p","tlshash":"28f14783fd93412e322fa09f5167e56d26241ccd923d36e2f664500be9b5ea07be1f01","first_seen":"2026-03-06T12:12:39.713986Z","last_seen":"2026-03-06T12:12:39.713986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5422\r\ncf-ray: 9d8144673880120a-OSL\r\nlast-modified: Thu, 22 Aug 2024 22:36:20 GMT\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T16:49:48.167548Z","times_seen":639087,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/Betty-Davis-Dooley-img2.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Betty-Davis-Dooley-img2.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23726\r\ncf-ray: 9d81446748c4120a-OSL\r\nlast-modified: Wed, 18 Feb 2026 00:30:06 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 614x614, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"01fe31bb744163a5f79b7770525d2766","sha1":"211be6eee7eaa0106297a02514aa6471621e052f","sha256":"d9ad4d36018a58192bbdc08addd8b6d114bd992d6e4ff4002d1df9dca9d5f0d3","sha512":"3b290e94fd065a2687662a1d4ed698a32075698de894c7b8adaaa7b13f5b08501b5fb15719d05b3a68434e392155e56660a2b51b55a6460e5e322821244a6daa","ssdeep":"384:dyzEDhXOx2NO/xaemlSQnd0xLUXiLLffW4tlTcjH7fFGAw9KYUNaiGwcrH67B5ss:EzalOpxmlxWUSfWG6H7dGynIr25zR","tlshash":"52b2e1f5074bc6a92b07b4756f23a83da54beb1d5c23a12da40406a2bdb01877ddbf70","first_seen":"2026-03-06T12:12:39.715853Z","last_seen":"2026-03-06T12:12:39.715853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-content/uploads/2026/02/hero-bg.webp","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/hero-bg.webp HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/wp-content/uploads/elementor/css/post-10.css?ver=1772226672\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 55516\r\ncf-ray: 9d81446aa8c3120a-OSL\r\nlast-modified: Tue, 17 Feb 2026 23:12:58 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:11 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":55516,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x836, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"019f5694d653710e70245ef0df8c6a21","sha1":"cb2d277e6324b0cb246d92b53871c1b9ca20e691","sha256":"a32d0558c503f9fec5af2d625d733f478725945ea128b3a9e34b7810644ea092","sha512":"76458f5c36146b3f443277004f4aa9ebc231b06f12324d9ad57862adab5862f080f15d05090449c3b5ce4469b7a21aa9fb46942781a14ed22202887b9947e094","ssdeep":"1536:n9r9O6TsN62u2IRFJ97eyDQIfMEWbyfylE8:n9ro6TsNGNRHtD7ePE8","tlshash":"6c4302f64423883a6163e431816f8d897f8c1bfda779469142fd4e27ab54ae1f70b508","first_seen":"2026-03-06T12:12:39.716829Z","last_seen":"2026-03-06T12:12:39.716829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:11.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bettydavisdooleyfoundation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 21:10:48 GMT\r\nexpires: Thu, 04 Mar 2027 21:10:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 140483\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T16:45:24.005391Z","times_seen":133262,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":29,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bettydavisdooleyfoundation.org/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"bettydavisdooleyfoundation.org","domain":"bettydavisdooleyfoundation.org","tld":"org"},"ip":{"addr":"66.235.200.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bettydavisdooleyfoundation.org/","date":"2026-03-06T12:12:10.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bettydavisdooleyfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 12:25:57 GMT","end":"Thu, 07 May 2026 13:25:49 GMT"},"fingerprint":{"sha1":"D6:15:7B:E1:FB:F5:94:5B:8A:A6:07:C3:3E:B6:2F:93:9A:57:5F:9A","sha256":"17:C2:C7:4C:56:45:4F:37:D8:19:7A:25:2C:00:69:05:0C:0B:54:69:41:12:16:AF:DB:1C:97:BB:21:36:D6:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: bettydavisdooleyfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bettydavisdooleyfoundation.org/\r\nCookie: __cf_bm=G49wWZR27nNLCFU7hDMH3FFB3dLiIlJ475m6doLbYiw-1772799130-1.0.1.1-j.h0lRcZuYSyJhAh4JyqGWKObFVuH51eiRhf3zEwmesA6vWfIbVsbZccDPWm_cvKg3Iz9ul.6x.9Cf0QdFkrnHJP9hqmxUgwPOmKjC_BJqI; _cfuvid=PbwH7GAjV7Rr_XcOUQ_AMLa1RwVtj1OYYzNSyuXfH1g-1772799130518-0.0.1.1-604800000\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 12:12:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8375\r\ncf-ray: 9d81446748f4120a-OSL\r\nlast-modified: Tue, 22 Apr 2025 13:57:46 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 07 Mar 2026 12:12:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T16:48:48.531715Z","times_seen":218016,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"bettydavisdooleyfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}