{"report_id":"5f72bae4-44a6-460f-b72e-e0e3c0fc0d1e","version":6,"status":"done","tags":[],"date":"2026-02-19T09:24:37Z","url":{"schema":"http","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"172.67.193.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"title":"Ambition.Periodcostume.top – All About Loans","dom":{"size":64609,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24189)","md5":"46bb9caf7e739c9409d9f03a020cc057","sha1":"ad7c8f35eb65a0cff0bf37636a0a0073cdfc4252","sha256":"4b77480a545f8855cb2f5987896ffda20099e6308026eb489a3ef267c16a06da","sha512":"c2f5647011e518ace53990c712d0db580efa287a169d3462a8fe8afc8ef315a9f87344254247bfb85ed29d443156180f45f27fc4f0ae370e30a799d37e0937d2","ssdeep":"1536:MXQ4BXxhMOeZa5unFYRlMYUvE1eXe2otrf7:34BBJOzXe2U","tlshash":"22534bb2e254203a777f927a91e9a34d3179c126ca0356a2f0b5e37c87d1e6506b3f4c","dom_hash":"domhash61f7a5d7e3deba417d0ac68628fa6012","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"172.67.193.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T09:24:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-15T22:33:11.747224Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ambition.periodcostume.top","ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-21","domain_rank":0,"first_seen":"2026-02-19T09:24:38.496Z","last_seen":"2026-02-19T09:24:38.496Z","alert_count":6,"request_count":6,"received_data":191522,"sent_data":3201,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.periodcostume.ngadimin.id","ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-01","domain_rank":0,"first_seen":"2025-10-29T16:26:32.87126Z","last_seen":"2025-12-25T13:46:31.636606Z","alert_count":0,"request_count":6,"received_data":2230964,"sent_data":3184,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.lineicons.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-11-01","domain_rank":350883,"first_seen":"2018-09-10T03:25:20Z","last_seen":"2026-02-17T09:42:45.8768Z","alert_count":0,"request_count":2,"received_data":172069,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":1,"received_data":6293,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ambition.periodcostume.top/sandbox%20eval%20code","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-04-05T07:44:08.791783Z","times_seen":135309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/advanced-ads-advanced-js-js-extra","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"85e939e5825d88f18ff4b2c81d863325","sha1":"bc99d4a0dc8ded128be68af5422c12efbaf32aa7","sha256":"0c5d3e32aaeaeb36a336041c225ce1bf752e199bc7a3f513c9527b0044c171e0","sha512":"97017b1862ff4b4f0d46625c8fb62a434998ad4f39808fcf7c56b91cc9b98c904536397818b7de58d62af99da628c18e85709853533bca32ba913bc936d69d0d","ssdeep":"","tlshash":"78c08ca9009b2ac654a29ce38a0b012350c28966d1421ebd86bc41584021a9202d1ad9","size":150,"data":"","first_seen":"2026-02-19T09:24:41.544293Z","last_seen":"2026-02-19T09:24:41.544293Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-includes/js/jquery/1768350240/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T07:47:13.409885Z","times_seen":640294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0637d54a8a7b919dde7cc7020330f1ff","sha1":"de698803471a89285b695f726320ad61dd24ea46","sha256":"fabac58304b06ac6ebe7f9b4b08e5f2e4f6f42df31a6c5aa2dd90858c49efce1","sha512":"d011f9f5dc919f0b27cfc291fe5736c987911f43c343dc588f5577560b3bfec54667bbdf5b3bff6104f93469479272a6fae3d4dd2d45771d90f25ad9e8e0c63f","ssdeep":"","tlshash":"dbf02eb57f4c55218791e1e9479f63151937e0926c0264c5d304fce50e59589025ed9f","size":458,"data":"","first_seen":"2026-02-19T09:24:41.545902Z","last_seen":"2026-02-19T09:24:41.545902Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-content/litespeed/js/27/45df3a0bbdf862a80af7e640311f18fe.js?ver=0e6a5","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"45df3a0bbdf862a80af7e640311f18fe","sha1":"a96ba6ee70fd44da8e61d95dd01de3a8c34f5eed","sha256":"3266f16c04a9f5021cbd9c143deb3b05b767340f9b1f5b654b3eb161b5aa5669","sha512":"f94b5bcfebbe687512b975eef714556ceac82c0e28956f85d03d403db4fce436588daf2f93396ef55f27369281191c0228bb212858d1e0ff2f4b892aec6b07c2","ssdeep":"384:Esg6Nc3kJo8xRY1rozHLxFDEC+Aw4S+LPHNY8USmaQiluHVXWch2nrRuZjbUGX3N:E+4q9xw4S+TNY8USmaQiYXWch2YVbUGN","tlshash":"ff62c8587234707b48ee00f9593fa20a7063f12175079846642fd4a9fca8d2f25b7afe","size":15490,"data":"","first_seen":"2025-12-21T07:10:24.267595Z","last_seen":"2026-03-29T20:03:46.524928Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa4be4d4db22516319b99e0a25ea2408","sha1":"ee84931668058ddaf04949730d69811fd88c5c46","sha256":"adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14","sha512":"316a764e282d7546f3234863e3527a45eabc4593374a5640c10dfc29a5dee93159e427cdaf65e3d492307950435cb8d304db5ebe18c26b2a8a7b9ed14d6438cb","ssdeep":"96:lncwF39Hqqq0ROssCxuhIMB3MxRBx7Pyy41bYdEtpXsWgFEsqKfW1r2oUIUMo2TN:V9tHlquOPCxEOfx7P/EUqKfqr2oMMoGN","tlshash":"5bb1420cb169b42f2567b036113f130fb237a06778958499f5b8d9d9dabc81e1433a7d","size":5501,"data":"","first_seen":"2023-03-07T01:30:37Z","last_seen":"2026-03-31T20:04:02.281688Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26ca7935993d35e1362cb84ad880b62f","sha1":"5f866ab98fc23d1e001329b715d26be3e47b02d6","sha256":"6cd4f18ae411310727b104639f1237c3ced50deb4c14ea056acb53a6470daf24","sha512":"01f082fc98fdd8e882ff408589becbeefbc93c173522e0b0c23dd1fec20a89d30765501da4e78d65270cd38e8103581d35c1961af78fd7a5934dc1f207087cb8","ssdeep":"","tlshash":"21e02674a60a782aa821e0600f5ffb63b5d9a1c0f30e24c2628ce458e84cc1360eddc7","size":338,"data":"","first_seen":"2023-03-07T01:24:27Z","last_seen":"2026-04-05T07:49:18.393188Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/advanced-ads-pro%2Ffront-js-extra","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01ae87296c4ab383fd0d51a5b77e6a28","sha1":"60a716d02d80d6c0f23ac171c3f8c059ce25f7c1","sha256":"eca305f78727afbf1fa9da0fb4a21b19b7158cb0f3b240afcf0e606195a8490a","sha512":"b30c18a6a153c384bb498cf39154800d194ff37dfb075d865629fd68c94a7d0ef206872b7ca7ce1c85554ef96b1a2bd8e0ddd809fdaae9eb5cd442e59b03cad9","ssdeep":"","tlshash":"8ef07234e03b7cc9b38360f44e86022310ccb0f0c549b43ce18ba129a42881b2260a85","size":560,"data":"","first_seen":"2026-02-19T09:24:41.549017Z","last_seen":"2026-02-19T09:24:41.549017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8611c465a33b608e844e79fd5172790","sha1":"c8e6e8d627ca8c5e54b3ea3b04c51d15abc46d7e","sha256":"703e4d8736d073c8bee6b45a0a16587ca8239f05a35ec8da869ce790d24b4f99","sha512":"0d74f1153a82a151d92157c6f316d8a2aa454022609e9b87a2184abe49725a3cd74c0a9a58cb9444ff80e0d9c8d1c815ac8811cc65538e0ef4061cbe19a7bbd7","ssdeep":"","tlshash":"29c08ca9009b2ac654a29ce38a0b012350c28965d1421ebd86bc41584021a9202d1ad9","size":149,"data":"","first_seen":"2026-02-19T09:24:41.551225Z","last_seen":"2026-02-19T09:24:41.551225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"546e195488b3c7758a0caaf2423e4bff","sha1":"6010ee75710ed9ba0922902249b8cad84034114e","sha256":"98c9481a6f51d481804a8e2ade90b92346b28bc5dbbd0aec0f8bc2225e8d723e","sha512":"8a49355b7dc7d0abbe23f420cf5467bba8bc2c7876c1e5a3b78c5bd2ea285c8075255e2b61cfd5900c7380dbd5a4befae1c8c0a6c8ae750b27672b34fbfad132","ssdeep":"","tlshash":"80c0120c978c829f60ece4a4181f15d830ccd06755960407590d547de7651eb70d9fed","size":185,"data":"","first_seen":"2023-03-13T00:34:36Z","last_seen":"2026-03-30T20:26:48.283812Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T07:47:01.85962Z","times_seen":330341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f21e437564d3dfb6941632d89ca03659","sha1":"1c3b640a1373c1ee172a324ccf34c85331f8cee6","sha256":"c88eb33e884bf6f76d66380abdee75a38a96dc5bcc2b5c8be83b07c9ca066f61","sha512":"6f95dd062adac6b4a5bff241dcb5101a073389a9aebdd0484b169282b44c0d7b6b39dd07b72099d958b14cb7ceff9b3675dd2b451bb96d55dcbfcf97d13ff20e","ssdeep":"","tlshash":"f351e033e3871eb3e036e69197cd11f40f768c621be42566508e4e6819ceb8c90e5ad2","size":2486,"data":"","first_seen":"2026-02-19T09:24:41.554541Z","last_seen":"2026-02-19T09:24:41.554541Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-includes/js/jquery/jquery.min.js","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-05T07:47:13.425018Z","times_seen":687131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e64ef0f5b99627c17875bcb7fe541b5","sha1":"c21e0028542dc1320fe0d93a45ca5402afc3604c","sha256":"9fbbfded4d16c6f23094d88521292fe38f90be7b96b77a2f507383e1453229af","sha512":"c6041bd0435c24997fabda177053dbcb71e76f2a9b88aca81fb78a32d4686e19d1f842b23f55b7ac72baa1fc9ca9e9722c0580c1ed393896c281f582f57b925f","ssdeep":"192:5OmmeJWsc+SQaYkmUfNExVnyW/Km9eFoyDbYB3yaJXIjDE1fXz6QyMF0:5OmmkplaYkJfay/YVyaijDE1fDyMF0","tlshash":"73f16fc3f75d493614ff60b256fea284727d42bb490028617928e92c12b0e8915fffe9","size":7672,"data":"","first_seen":"2025-10-06T13:46:22.453616Z","last_seen":"2026-03-29T20:03:46.548014Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-04-05T07:50:54.283453Z","times_seen":124705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb09040de1e36049114a1f4e6dd35f5c","sha1":"8d36f99b17d88a7f6dac59fc7a02edd92a7f9662","sha256":"ff3d0e8b3eeb7ba127f9a3fa28f85a045e502f1b3740740c8464ee70d65588e1","sha512":"201541d8f902329cb2292e114d960971b9e42f39d0cce7fa9d3baa2112dc1f5501610fbe85045f26c2e8d9c85b87ab59c20ff479f3a42025b8aefe2e16e5e050","ssdeep":"96:+KFg7knwgeLreaIlGZvBsn45pZ2MPCsLhq0ajxHihB:+ztLNIlqBsn41JjWiv","tlshash":"e891a7b53305e1ba02eb5736b1bdd30177f5128a24179020a87d8dd5ba2ece612a7e1f","size":4624,"data":"","first_seen":"2024-08-16T03:01:36Z","last_seen":"2026-04-05T06:49:24.256214Z","times_seen":4024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"985cb04736fedaedc2bd24fa158b87a7","sha1":"9ed236d1c089782e2fd79a783b3562a515767959","sha256":"629497148ede3876670684740973e5514b683a7c0e9214a74cab68883860a723","sha512":"7a8b461614bdd0d700a595263e5bdf2da98dc78a7ea3021b84cbc7ef7c1465788067ab4ac456c4773ad9e967ee411932570513f69f73ac9a217b6f12839bcf43","ssdeep":"","tlshash":"b6d07234e03b7cc8b38360e44e86022310cca0f08549b43ce18aa129a42881b2260985","size":282,"data":"","first_seen":"2026-02-19T09:24:41.558954Z","last_seen":"2026-02-19T09:24:41.558954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d271e792c28df1888915eb56a0d395b8","sha1":"f23a061a39a39f3c8c044b2a496723ba46be6a85","sha256":"46b01dea9e8b67723924e024615168786a8c7b4ef709480f96ced9677d928907","sha512":"ae6bfbfd87b6f9e8b5349dd0ef58d4f4c037cedb67fdcf68dae4bdabf4144b401c2427f8db0bdd260a3345446a7d0d1c0b4eaa7bc2e2d6445a49cde7be25885e","ssdeep":"","tlshash":"ebb0120a14a7ef45030e200005d3145a904033c2c8c8f4031928c459d21ec826410fbf","size":99,"data":"","first_seen":"2025-10-29T16:26:39.926908Z","last_seen":"2026-03-29T20:03:46.55043Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ambition.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d04b5bf1d1835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-05T07:47:01.85962Z","times_seen":330341,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":20,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"GET /wp-content/plugins/litespeed-cache/assets/js/instant_click.min.js HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nCookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 17 Dec 2025 01:22:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1482\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\netag: \r\nage: 6319\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axXZ%2Fe4Aga0JxQvJw46o0PmSYEbYJyCVFxbTKXOuHr7Tgf23iyi4wsc57ca%2BF069PoWDl2ZRfSJYw9ar2VRfxUCbGNVSXvh4y3euFStUNm75kWSI4XUFrqRw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d04b5befa42481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4624,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4623)","md5":"fb09040de1e36049114a1f4e6dd35f5c","sha1":"8d36f99b17d88a7f6dac59fc7a02edd92a7f9662","sha256":"ff3d0e8b3eeb7ba127f9a3fa28f85a045e502f1b3740740c8464ee70d65588e1","sha512":"201541d8f902329cb2292e114d960971b9e42f39d0cce7fa9d3baa2112dc1f5501610fbe85045f26c2e8d9c85b87ab59c20ff479f3a42025b8aefe2e16e5e050","ssdeep":"96:+KFg7knwgeLreaIlGZvBsn45pZ2MPCsLhq0ajxHihB:+ztLNIlqBsn41JjWiv","tlshash":"e891a7b53305e1ba02eb5736b1bdd30177f5128a24179020a87d8dd5ba2ece612a7e1f","first_seen":"2024-08-16T03:01:36Z","last_seen":"2026-04-05T06:49:24.256214Z","times_seen":4024,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-content/litespeed/js/27/45df3a0bbdf862a80af7e640311f18fe.js?ver=0e6a5","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"GET /wp-content/litespeed/js/27/45df3a0bbdf862a80af7e640311f18fe.js?ver=0e6a5 HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nCookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 01 Feb 2026 02:59:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4648\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\nage: 6569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZZPn2LC0nJaUI03HWVPZVHihnYJ6KxKvESGmJNlnxDMlhqiTBJeMcIJDRUVoui1830gWe56s6VWOOdIhvxaT5N8vJyZoAHClFuGOex7QxAKCoEU37zoxsdz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d04b5befa46481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15490,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7911)","md5":"45df3a0bbdf862a80af7e640311f18fe","sha1":"a96ba6ee70fd44da8e61d95dd01de3a8c34f5eed","sha256":"3266f16c04a9f5021cbd9c143deb3b05b767340f9b1f5b654b3eb161b5aa5669","sha512":"f94b5bcfebbe687512b975eef714556ceac82c0e28956f85d03d403db4fce436588daf2f93396ef55f27369281191c0228bb212858d1e0ff2f4b892aec6b07c2","ssdeep":"384:Esg6Nc3kJo8xRY1rozHLxFDEC+Aw4S+LPHNY8USmaQiluHVXWch2nrRuZjbUGX3N:E+4q9xw4S+TNY8USmaQiYXWch2YVbUGN","tlshash":"ff62c8587234707b48ee00f9593fa20a7063f12175079846642fd4a9fca8d2f25b7afe","first_seen":"2025-12-21T07:10:24.267595Z","last_seen":"2026-03-29T20:03:46.524928Z","times_seen":11,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-content/uploads/sites/27/2025/10/1763693280/best-credit-union-to-refinance-student-loans_0.png","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /wp-content/uploads/sites/27/2025/10/1763693280/best-credit-union-to-refinance-student-loans_0.png HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 1399680\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uxqcb7wq3%2FwSdWSGPBdA%2F6M4C2NpNnm2JAz9OoiF9skl%2BQr5zXUbhypksBupZabf8%2FvOYqRd%2FvI63S4QZ3La1D7CiIibpSHrhQpzYFCAjiGkXEePezciNAFvAgH%2F\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"36ef8568d2624795487ff127666b4194\"\r\nlast-modified: Fri, 21 Nov 2025 02:48:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9d04b5c20c6f76a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1201 x 1800, 8-bit/color RGB, non-interlaced","md5":"005d5d2d2d0c5b60b0318b51a8ae3780","sha1":"09c551efa29fe2db4cc831d84ef7fa4d65290621","sha256":"0b6a37334013118377607613fc35c4c7b9d51a4d7c81412c3a5e09bfe6eb639e","sha512":"8585770be2dd9d07bad8fe9c0fe1cce1bfc3e7bc7ede2d79f184a8d8cfd5f9a6ffbca6eae704625621f4cd91c92e3f1a0993d468e516663aee12491a3dc9f7bd","ssdeep":"24576:i+wJMdOdOC6hSk9F/rhtpQmlKrgCTLMLfwkTA+xFXNMJzVBQb8:aI1UOhjlgDTLMLfnd4","tlshash":"3725336f5955b22326cd397d4d675e6ee009464ef7ea3bfaf2613ce0e0885432417138","first_seen":"2026-02-19T09:24:41.521815Z","last_seen":"2026-02-19T09:24:41.521815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/cdn-cgi/rum?","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1039\r\nOrigin: https://ambition.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nCookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1039,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":780,\"startTime\":1771493052743,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"be1f04b3-3263-4bac-9e77-f22b1e6ca037\",\"location\":\"https://ambition.periodcostume.top/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":770,\"domContentLoadedEventStart\":778,\"domContentLoadedEventEnd\":782,\"domComplete\":1226,\"loadEventStart\":1226,\"loadEventEnd\":1227,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":36,\"domainLookupStart\":39,\"domainLookupEnd\":72,\"connectStart\":72,\"connectEnd\":104,\"secureConnectionStart\":83,\"requestStart\":104,\"responseStart\":363,\"responseEnd\":364,\"transferSize\":18216,\"encodedBodySize\":17098,\"decodedBodySize\":63491,\"name\":\"https://ambition.periodcostume.top/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1227},\"siteToken\":\"98b02fb221b3446494afe09a328b6631\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://ambition.periodcostume.top\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAHSXCm1pmu2sRP15h%2FcGt%2Bginwwb1pEHgZnzNgi%2BxJ8wB9yLEfmQjsQWDb6YfjiFjoCpNTV%2FZ60uJ%2F6JTuLla24RTUt6Zoa5RPZB1Klqz5Yq%2F8nBgEqOPiW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d04b5c36b31481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T09:24:12.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-dns-prefetch-control: on\r\nx-litespeed-cache-control: no-cache\r\nx-litespeed-tag: 54027_home,54027_URL.6666cd76f96956469e7be39d750cc7d9,54027_F,54027_,54027_MIN.45df3a0bbdf862a80af7e640311f18fe.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt0ZnS3qe2JNwhHjAcZEwZ4Yn3cvtmX%2BCbmdZlUZLj%2F5BNFHksdzvREeVuO31v4lZuSmHDp1jSbPZsO6TtN%2BTCZXfAA41YU48PyEE5zFalT%2BuQcfZYnoFenk\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=238\r\ncontent-encoding: br\r\ncf-ray: 9d04b5bc4ebe767a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":63491,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24186)","md5":"1b7d085122ad054ac4d22a744f865000","sha1":"dba3d174304e61b594245b611132f9315134cdf1","sha256":"230bff4892c5d66cc193b648364f52f0ebeb665d0843f0d77a8f7fbbe4d4d923","sha512":"6cdb970816bf8af57b5aae45c66deedadc76e55ebdfeb5b8cc8fcfa234718c1431b8e2df3c75aa3c50699001475ac69ca01f2111339e82e5077ae49447eed3fc","ssdeep":"1536:ZXg4BXxhMOeZa5ueFYOlMYUvE1eXe2otrs3:G4BBMBzXe2x","tlshash":"b8533bb2e350203a763f927a95eaa34d31798026ca035562f0b5f37c87d2e6506b7f4d","first_seen":"2026-02-19T09:24:41.525412Z","last_seen":"2026-02-19T09:24:41.525412Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":65,"dns":34,"connect":8,"send":0,"wait":260,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-includes/js/jquery/1768350240/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /wp-includes/js/jquery/1768350240/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzGqPyZIAd%2FBc%2BubevlvBcFdrg%2BKE4rIqur6Hd%2FRJArtHRxg6Rt%2BZTNrjQ4%2BC5jsdlswWIGNoDMW63rUOaRPF%2Fm6Vy8qmkvmGS5JSng0tlMG3HCJ6jky5%2FBAULh7\"}]}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=31536000\r\nlast-modified: Wed, 14 Jan 2026 00:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"9ffeb32e2d9efbf8f70caabded242267\"\r\ncontent-encoding: br\r\ncf-ray: 9d04b5bf9e0b76a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-05T07:47:13.409885Z","times_seen":640294,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":107,"dns":80,"connect":8,"send":0,"wait":60,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/wp-includes/js/jquery/jquery.min.js","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nCookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 29 Nov 2025 08:50:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\netag: \r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BcS4uMU8gqDPVi7TvXuNMi0bwxq9in3krTbmgl2uiMzXtmeB7ijmJSMbW08IcHZ1JdLqnCHhil5hRwV1J1J69TTiCwloiugubyVcy3PX75fyuBHYuZJtpPV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d04b5beda3e481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-05T07:47:13.425018Z","times_seen":687131,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ambition.periodcostume.top/favicon.ico","fqdn":"ambition.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 11:10:54 GMT","end":"Sat, 09 May 2026 12:08:30 GMT"},"fingerprint":{"sha1":"81:24:E4:5E:9C:11:63:97:0E:90:57:D0:D0:62:32:0E:07:C4:5B:53","sha256":"D0:99:A3:49:DF:46:05:97:5F:92:36:F3:7A:30:E3:81:AB:75:E7:BE:2A:8D:D0:CD:0D:4A:98:7C:D3:8D:C7:DC"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ambition.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nCookie: PHPSESSID=01874a8309ab1078bfe24c2dc2c38379\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 10:45:27 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 29 Nov 2025 08:50:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1930\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\netag: \r\nage: 427125\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wtbXpzyLoYfhe%2BLxwDs9BSbYdQRBapUBdg51JuQkpfru65BnB9z4IpPLzJzpsEfNfn4WrGjj1OUqsNeZDHzd7hv%2BpqWzTUV2ggkhN8cPV6agdvzZEgB2Yb8y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9d04b5c0fa95481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"52ed9f1ad27a1af3771bc93bbc59fffc","sha1":"80933ef4cb1c33f099f5b37bdbbbfc1b8e50e5d5","sha256":"627356ae5766af12bc1bd67259f482a491c228837f3a5b6ab415f72b997495a0","sha512":"1e876380c8bca506c8c3c746c365fa5a057c81161a0ff08d46f978f78e8a94349a1053ab651e40498ab6f854b6322df44fe0317365d2068c960fbd32421fb516","ssdeep":"96:oYUau/fy60f1czcXeN1pKDh+K3BQXE+9wb/b:oYDutzcuPWxQXxeb","tlshash":"9f623edbfb990f0cdc10663c112628a155ebaf9561de26596c8ff6460bff90301fa60a","first_seen":"2025-11-22T13:43:14.90748Z","last_seen":"2026-03-29T20:03:46.534837Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-19","alert":"Sinkholed","trigger":"ambition.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-content/uploads/sites/27/2025/10/1763693280/business-term-loans-online_0.png","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /wp-content/uploads/sites/27/2025/10/1763693280/business-term-loans-online_0.png HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 91284\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XtscUdRZogGdpYQ4Jf8FcLzDYP3URPWYJ0cjjfrIVeT%2B9otwjpmrsJtP7wjNlV%2BP6WGMRrNa%2BN0vtOV7GXvXRr15r32bwrsZvt1gkjzOZhl4zKw%2FisCx53ImaVOB\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2ada0da6c5aef77808a3741bd30fdde3\"\r\nlast-modified: Fri, 21 Nov 2025 02:48:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9d04b5c20c6a76a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 757 x 416, 8-bit/color RGB, non-interlaced","md5":"2ada0da6c5aef77808a3741bd30fdde3","sha1":"f1de0b4f846c341207b09c44fdedb96f96c00774","sha256":"e6f065e2e353be0adda2c4d841e313a2634cb49d05f489e8067bd135b2615541","sha512":"5e9093b6e2f2249eb9f61a20fa3ccb913a1a081cbae1cfcb44a8f74c016880020a3fa9483ead427719dcb1fcfb09b67c228a95fd07e9b5cccdf2f42c8e70b881","ssdeep":"1536:+JeaIBN1rC9dE6+h2hI1X1MeIffzNrCTV7+uUK+fLOlFTmgX5WBMeyEpti0aP6:QSrqT+b1XnuzNHuJ+fLO3a4wNT","tlshash":"9a9302667cdfbc52a2996081518f74f173e50076de2784bf3b87738bab29b2539c6410","first_seen":"2026-02-19T09:24:41.530636Z","last_seen":"2026-02-19T09:24:41.530636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/ambition/wp-content/uploads/2025/10/1760681460/i-need-a-business-loan-now_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /ambition/wp-content/uploads/2025/10/1760681460/i-need-a-business-loan-now_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56010\r\naccept-ranges: bytes\r\netag: \"567f1cf7f4e6784a1e4c16f78bb2ceca\"\r\nlast-modified: Fri, 17 Oct 2025 06:11:22 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9sM6GNurEf2bI4tj7f7BDVUHmGl2yIOoqTe0eqHT7O0e2lWzIEdLjTLLvFL63P0n%2Bg9RGTwwKd%2FriMZPSKD7RwlpC%2FU30upZQuwQ2n0QI%2B6hypeC8kBZJ063jgz\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d04b5c20c8476a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56010,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1548x750, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"567f1cf7f4e6784a1e4c16f78bb2ceca","sha1":"b204c27d94ded81a051042e03343dac1af163421","sha256":"c08650fadcdf6d21d578568eeaef9c66c65b77198fdbfcd46bbe7694649ad979","sha512":"895117c7f16f26f0402d91ee6a9d0ed6926d58c8397f7f75cef253b7b31fffd572d24b47f76cb1b0d2714d937e1adc601ac6f8ab3e4bb72367618651c16614ea","ssdeep":"1536:fhTsatKOf2piChLjETSxjX/cT7zmAdlnABoqDYnAGO/+4k:fhTsaXChLRxDmJxO+AGO/Rk","tlshash":"f343f1c862b228ffef9692fe6cbd5cd399852518321131c55cc01aafe3546d83cad9c9","first_seen":"2026-02-19T09:24:41.533695Z","last_seen":"2026-02-19T09:24:41.533695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lineicons.com/1.0.1/LineIcons.min.css","fqdn":"cdn.lineicons.com","domain":"lineicons.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lineicons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:23:46 GMT","end":"Wed, 08 Apr 2026 12:22:32 GMT"},"fingerprint":{"sha1":"46:6C:21:39:C5:A7:F2:6F:2B:E6:FF:25:00:71:87:F7:87:F7:B6:AE","sha256":"DB:E9:72:94:79:25:51:96:7D:32:35:5D:EA:24:C5:35:41:54:D3:10:DE:A4:C6:E4:6D:D3:03:BF:0D:EF:FE:CE"}}},"request":{"raw":"GET /1.0.1/LineIcons.min.css HTTP/1.1\r\nHost: cdn.lineicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncdn-pullzone: 151693\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=259200\r\ncontent-encoding: br\r\netag: \"64adc227-5684\"\r\nlast-modified: Tue, 11 Jul 2023 20:57:11 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 644\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/14/2026 05:14:26\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: 6b9224d665ea946be81f6e6cfc47d591\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 237294\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbAfGgdaogSM9fEDRPwlSavsWHxcESmqzUFRhdnSeTPeJgUJwoQaJXd%2BA7fE2%2BvaQ41VCv0iJ13jY11Qww8BnEFJom73icirtjfRMM1IEmB7\"}]}\r\ncf-ray: 9d04b5c08ae24eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22148,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22148), with no line terminators","md5":"73368bb7757134492941536c04d00ef7","sha1":"83fd36596e539ea05335017edd5a2f7bdc323b65","sha256":"77ffaf1d3ff7b9b64c8e2d1531d2f5839a7a1078b2483d0b5f21dfbd5b89fe65","sha512":"d566c944f8244f00886d84efe42e3fee939bec7030fd2d1bcd2a6346f55674f8d8c1d301b9eddb9a345496979cc3f1e5af4d6426b02289dad1ed09f2b8fef18a","ssdeep":"384:n3NiQdfmdHfcY6iaH9xBcMkAzKC1xH4b0kSIegulsZND091OjJrjrPvcevJy9Oo5:7X8NJLxyW8","tlshash":"14a281abd87a08c477b2c403c388e75a2499f571e55a0c5af19fb00f1ee176912d8fb9","first_seen":"2023-07-02T13:45:39Z","last_seen":"2026-03-29T20:03:46.52645Z","times_seen":66,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":43,"dns":13,"connect":8,"send":0,"wait":14,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lineicons.com/1.0.1/fonts/LineIcons.ttf?y2l643","fqdn":"cdn.lineicons.com","domain":"lineicons.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lineicons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:23:46 GMT","end":"Wed, 08 Apr 2026 12:22:32 GMT"},"fingerprint":{"sha1":"46:6C:21:39:C5:A7:F2:6F:2B:E6:FF:25:00:71:87:F7:87:F7:B6:AE","sha256":"DB:E9:72:94:79:25:51:96:7D:32:35:5D:EA:24:C5:35:41:54:D3:10:DE:A4:C6:E4:6D:D3:03:BF:0D:EF:FE:CE"}}},"request":{"raw":"GET /1.0.1/fonts/LineIcons.ttf?y2l643 HTTP/1.1\r\nHost: cdn.lineicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ambition.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.lineicons.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 147216\r\nserver: cloudflare\r\ncdn-pullzone: 151693\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=259200\r\netag: \"64ac87f7-23f10\"\r\nlast-modified: Mon, 10 Jul 2023 22:36:39 GMT\r\ncdn-storageserver: DE-755\r\ncdn-fileserver: 660\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/14/2026 05:16:00\r\ncdn-edgestorageid: 722\r\ncdn-requestid: 6b499722fc950aa56fe44d7174f1846b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6U3CZPheDtX7AZGsXVgpEoq2%2BJ2EwoV67GyxPyloSuzLWoNUp3RWsekfCfpdubQZ3e9SP%2BA%2Bxp0XdT9Hkx7kJH91nsnuuCd%2BHfnbE61dZw1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d04b5c1d89b3e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147216,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 26 names, Macintosh","md5":"6e9fb56e13ffdf56a053e86545cafe3e","sha1":"d34c70ec8e08d1a178551e7a59eb853c7b79e33f","sha256":"21266db9afe52863719a3921728d4ca557e955d790ce012281cad27fd66f6d9c","sha512":"c927c0d0987ddeeb0f38adc1c50b37309301062aa5b5d845f7fd87faf00f8754e98b99a8a6ebf1d7c2ee3ebd58c8169187f5cddae50fc3fc53a7e218cbfa92cf","ssdeep":"3072:2Gt+cTFQtkyCoTA1NUlTfAq5LBl7IAo1pXT7IZPxcrSBC8y2+Raq9CFCB/Px3xr6:2Gt+cZQtkyC8UsTfAq5LBl7IDT7IRar0","tlshash":"a0e37d2b938bdf6fd126acab1c10a1624edbd131836f6657b6c51c46c50acf40ca87de","first_seen":"2023-04-16T06:20:24Z","last_seen":"2026-04-04T20:41:10.922522Z","times_seen":315,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":26,"dns":1,"connect":0,"send":0,"wait":176,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 10.19.0\r\nx-jsd-version-type: version\r\netag: W/\"157d-7oSTFmgFjdrwSUlzDWmBH9iMXEY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\nage: 1679479\r\nx-served-by: cache-fra-eddf8230166-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2173\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5459)","md5":"aa4be4d4db22516319b99e0a25ea2408","sha1":"ee84931668058ddaf04949730d69811fd88c5c46","sha256":"adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14","sha512":"316a764e282d7546f3234863e3527a45eabc4593374a5640c10dfc29a5dee93159e427cdaf65e3d492307950435cb8d304db5ebe18c26b2a8a7b9ed14d6438cb","ssdeep":"96:lncwF39Hqqq0ROssCxuhIMB3MxRBx7Pyy41bYdEtpXsWgFEsqKfW1r2oUIUMo2TN:V9tHlquOPCxEOfx7P/EUqKfqr2oMMoGN","tlshash":"5bb1420cb169b42f2567b036113f130fb237a06778958499f5b8d9d9dabc81e1433a7d","first_seen":"2023-03-07T01:30:37Z","last_seen":"2026-03-31T20:04:02.281688Z","times_seen":659,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":13,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/ambition/wp-content/uploads/2025/10/1760681460/will-refinancing-student-loans-hurt-credit_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /ambition/wp-content/uploads/2025/10/1760681460/will-refinancing-student-loans-hurt-credit_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: image/webp\r\ncontent-length: 202912\r\naccept-ranges: bytes\r\netag: \"188aeba334c0ffd9ac9ae620effa6baf\"\r\nlast-modified: Fri, 17 Oct 2025 06:11:26 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XSiASXrKAeOF8uZm27XS2%2BVVlJGkiKzdGhahHgDcMsDTbZ%2Fp0QrKqlc9PFspofAw%2BjPlSfVqKlfNLEwm6W%2Bh6yzNtpvNtqXh7MGMNgAJirRg%2BJXexDYQIgWuJxra\"}]}\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d04b5c20c7476a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202912,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"188aeba334c0ffd9ac9ae620effa6baf","sha1":"82da333eabbc5db3b92c3dbef3f36c50389db091","sha256":"ab64417f1ae36cb34c22755de17f3b6550c24e74cfee3510a692143697e5f51a","sha512":"6c3eedfdbd7ed4248356539532fe8989e102cdd33e94ec66db8dadbef40feb19f88f7ff57db7418ed9bd961821659857ef37a5fb6219f4e72056c6f68c681000","ssdeep":"6144:+0GuimgFx6KPoXdqSXpLqy+ww8ZlSJCY0unzQZjtC5Zr8Z:+0YmSx7wFZLb+wVlnpuzQZjQ5Zr8Z","tlshash":"3e1412125ffc0ac9eabc7251e7bd8a02c595871bb7b1366eba38b7d05ec148d3a15042","first_seen":"2025-10-06T13:46:22.41417Z","last_seen":"2026-02-19T09:24:41.538674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-content/uploads/sites/27/2025/10/1763693280/earnest-student-loans-reddit_0.png","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"172.67.202.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ambition.periodcostume.top/","date":"2026-02-19T09:24:13.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 16:17:33 GMT","end":"Tue, 12 May 2026 17:17:30 GMT"},"fingerprint":{"sha1":"7E:D4:21:B4:09:15:A7:51:8C:40:CD:11:64:4A:E9:BE:B1:25:F4:A2","sha256":"CA:09:F6:9E:B4:B5:A4:57:FF:4B:4F:F1:8C:AD:94:EB:38:48:0E:71:F3:FF:EC:B3:FA:99:83:E7:40:6B:3B:E6"}}},"request":{"raw":"GET /wp-content/uploads/sites/27/2025/10/1763693280/earnest-student-loans-reddit_0.png HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ambition.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 09:24:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 463205\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9glZcFxypH3ROIPS3Qsrm3zmXQRijVRhXS45eRvMtMXwENi3gm63%2Byq7%2Fpz14rnD9c4wjx31MM1OP1jxwBzC%2FYJYmhZVCL%2Fa49E%2BpRYFeswZ9%2BURU4LKXsTi1mqd\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"62ac2b15c55d96db6e8b9cf9f23be948\"\r\nlast-modified: Fri, 21 Nov 2025 02:48:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9d04b5c21c8d76a9-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2400 x 1260, 8-bit/color RGBA, non-interlaced","md5":"62ac2b15c55d96db6e8b9cf9f23be948","sha1":"354e39c1def8d10ca9ce5e23d5be4aab8d6413f3","sha256":"3bfb8d07d6a0915fb2fed2c84e2d44f7001a6591c21be70d493c9deb0ee7929e","sha512":"37627335502a039e80078cdba1bcadd27156a55481c566ba44051f6b6c1e9d6c1c5db2e341c3975598ecee036463a09af1d334de32a59fb81fbd9f8965cd6fca","ssdeep":"6144:MMHJoA3Rlxu8wTpPgdtGfioIWHBw9LCfpxiPmiXxyr4z5Ci6f0PXHPjsuXoipC2:MNAh6NTpotGHLe9Lquhhb5CiHvHboCC2","tlshash":"b4a412ae8bf3c89dcedb50b3916d0f575777604b04c62e89e18db08c7692e78798508e","first_seen":"2026-02-19T09:24:41.541443Z","last_seen":"2026-02-19T09:24:41.541443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
