Yes I agree that some kind of tracking is expected, but I am curious on how Prospect One got into the equation. As far as remember I have not installed any wp-slimstat commercial plugins. But we do have used slimstat for many years. So I cat say for sure if wp-slimstat has always been one single download (did I have to add som geo related stuff at some time?)
I wrote to the author of Blacklight and he readily replied:
The tool has a (slightly hidden) download feature for the inspection archive, I looked through it for your website, the script doing the fingerprinting is https://cdn.jsdelivr.net/wp/wp-slimstat/tags/4.8.8.1/wp-slimstat.min.js. I have attached the inspection report to this email which you can further inspect. And if you are interested in learning more about what we are testing for we define it in our methodology. You can see the raw inspection result at the following path after extracting the zip – raw/inspection.json. For more information about the inspection results archive you can look here
zip file here if anyone is interrested
There is no mention of prospect anywhere in the raw data from my site nor if I do a raw grep -iR Prospect * on the www folders on my webserver. So at this time I suspect that slimstats tracking have been incorrectly associated with Prospect One – although that does not fit if you do not have the same text when scanning your site.
I am still puzzled
