Request initiator chain contains old CDN

It’s possible the script is coming from the database. If you have access to WP CLI, you can use the db search command to search for occurrences in the database, and then the search-replace command to update the occurrences.

You’ll likely also want to consider searching for https://https://, as that appears to be occurring in the script’s URL.