{"report_id":"9e5d5d5c-7466-45ec-b69c-a81e8ce2e5ff","version":6,"status":"done","tags":[],"date":"2025-11-22T13:43:09Z","url":{"schema":"http","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"172.67.193.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"title":"conscious.periodcostume.top","dom":{"size":49697,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24207)","md5":"a153c7aa0db5ef176bc0e49ea083d018","sha1":"b72db05dac72e01d3bd78661b40aaf9c2f2c6d4e","sha256":"1f0032aea9025df29a9a48caa7329c034bb6a24985a20c3966802ba67797982e","sha512":"262f6e4caf30747650ec478ff9b66079124157bc227dbcafaebcc0c1c8e0ebfbee025362604bf6bfe2561e3a2e6bc24739b5895a9f7940aa599987df2b454c84","ssdeep":"768:2ORn2GtB3NSxMW7ynXLhfZ8LW/DrB7dobMli+NrK7Cc3N5nTooYde3WMLugLScA2:2ORnPBQx90ueZa5+3LlMYUvE1eJ7","tlshash":"ea234bb283a4243e5577c1767ae9e78d326a813ac7035591a1b6873c83c2e1506fbfcc","dom_hash":"domhash74031de89769bf7f0a6d9228f6c0aeb4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"172.67.193.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-27T13:43:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"conscious.periodcostume.top","ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-21","domain_rank":0,"first_seen":"2025-11-22T13:43:10.631632Z","last_seen":"2025-11-22T13:43:10.631632Z","alert_count":14,"request_count":7,"received_data":173076,"sent_data":4077,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-11-16T22:15:08.370842Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.lineicons.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-11-01","domain_rank":350883,"first_seen":"2018-09-10T03:25:20Z","last_seen":"2025-11-18T13:55:17.453286Z","alert_count":0,"request_count":2,"received_data":172128,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-16T22:24:12.204838Z","alert_count":0,"request_count":1,"received_data":6293,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"securepubads.g.doubleclick.net","ip":{"addr":"142.250.74.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1996-01-16","domain_rank":1262,"first_seen":"2012-07-29T20:47:35Z","last_seen":"2025-11-18T17:08:24.997469Z","alert_count":0,"request_count":2,"received_data":729605,"sent_data":925,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.periodcostume.ngadimin.id","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-01","domain_rank":0,"first_seen":"2025-10-29T16:26:32.87126Z","last_seen":"2025-10-29T16:26:32.87126Z","alert_count":0,"request_count":6,"received_data":337928,"sent_data":3221,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-content/litespeed/js/24/a7acc8a28ff7ef872f0d3cf9da076773.js?ver=76773","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bbade7a5f308398e4dd5772eb35c179","sha1":"9c50afd6742ed5f5edf25d905877a1a0090bea4b","sha256":"b003f20cbc35a63e7b5a3781231a0b34861612223cb1709d03ddd4c287477f74","sha512":"f64ae312ccb774ecd2984abd40be538e069b7032c2ecaa635726ad934c9d4e031ed69a9e82d9abb6ce40885894f072da0d937ade19cbb915f2a810a19a203307","ssdeep":"192:K5nV2DkJPTYWxr0qUi2coMoPo2oS2oSaxRoxoSp1ro/okogHo6RLKp:Esg6Nc3kJo8xRY1rozHLxS","tlshash":"c7f1e9987674b0ff05fa41f9873fb95d70b2d155a40b80002829e8f6b5e4a6b052fef9","size":7578,"data":"","first_seen":"2024-10-20T03:43:26.517922Z","last_seen":"2025-11-30T14:03:03.618555Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-includes/js/jquery/jquery.min.js","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-09T02:38:08.713781Z","times_seen":696743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d74e975265d771b1a4c83bab5bb7779","sha1":"97ba5eba75093c5d90d6b867699c8b6d92f0c676","sha256":"9eb83fde535fa64d2e21a66227d1e59556437a477c992b14a1cb9a21c59febf8","sha512":"a6f41ea90f6b2b8725f90a805744d0f3cbda6d59c3d41c9cb5fa790dd29d158a65a63d417ccbba325aaa1497cb06b8e2fcb1c5caa9c7fa23b6c858e7a2ef67a0","ssdeep":"","tlshash":"45f05ce27f4c652287a0e1e957af63291d77f0d36802a4c99304fce50e5c68a026eddf","size":459,"data":"","first_seen":"2025-11-22T13:43:14.915577Z","last_seen":"2025-11-22T13:43:14.915577Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-09T02:39:22.08227Z","times_seen":331079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-content/litespeed/js/24/08595efd98f04758596aacb48b8b9c39.js?ver=b9c39","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39ce5b77944f4d3d7f23927d43aded6","sha1":"893af47086a109962c5a66c1b8e7a52b5270f14d","sha256":"b9cbd2403f25aae47be61ae686fc76eeda465d8dcb3777ac648263544c27b535","sha512":"a9ca80f9b3771f8f1a6af956771943672c62527f5d27e932e0109a18d4d7041d11387850961d6e116307eb1834ae362b589cf349f5c9e3af1fbfba065068ea32","ssdeep":"192:RrUDc4B6C+AuV4S+LPHNY8USmaQilNrE6tuVbjWch5YnW6oyuZpxbUGXoi0Vo/g4:+DEC+Aw4S+LPHNY8USmaQiluHVXWch28","tlshash":"e5f130257224102b48de05f9283ba3067163f1317743a84a652f809dfc68c6f79f3afa","size":7912,"data":"","first_seen":"2024-10-20T03:43:26.928565Z","last_seen":"2025-11-30T14:03:03.621401Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26ca7935993d35e1362cb84ad880b62f","sha1":"5f866ab98fc23d1e001329b715d26be3e47b02d6","sha256":"6cd4f18ae411310727b104639f1237c3ced50deb4c14ea056acb53a6470daf24","sha512":"01f082fc98fdd8e882ff408589becbeefbc93c173522e0b0c23dd1fec20a89d30765501da4e78d65270cd38e8103581d35c1961af78fd7a5934dc1f207087cb8","ssdeep":"","tlshash":"21e02674a60a782aa821e0600f5ffb63b5d9a1c0f30e24c2628ce458e84cc1360eddc7","size":338,"data":"","first_seen":"2023-03-07T01:24:27Z","last_seen":"2026-04-08T20:23:19.528781Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6c12b1d3adeaf27276f131ccfc712d2","sha1":"e37a6667105c569910d8b9c578724514383968c7","sha256":"406a14ff4a6835dbe4cdfcc469d0ce6656d42f83493bac905cf7893351fa550d","sha512":"e1d210a12c9a88c7ddf6658cd93b68248ceb0b261c51ea905f3ba92d7f06f333cdd84a26df544ce9dd99b4aadf3c24afadff849285a7e07cc32ffc1658a224e8","ssdeep":"","tlshash":"a4b0120c045a36ca58d2c8f78f0e004261d28676204616fd86fc46251c06ba30286bc9","size":101,"data":"","first_seen":"2025-11-22T13:43:14.920705Z","last_seen":"2025-11-22T13:43:14.920705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.74.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3b11265bd7fb362b2855007a6a613df","sha1":"97c776f4b9c677b020e6414d32b6aaafbf603a11","sha256":"edf4bb6c4b9505aeb8d9ab9b53e114e2582c92841de84cf3f07bb10c214844ac","sha512":"fcf69adb6d15cf86e1fbb5fc538373c3fb6952943a09db2117c95374168700831dd72e3aa69f6709df40e831f7462ddbe5046eca2e7ea94531fe5973e6f5741e","ssdeep":"1536:b9nl/5Fex3Zx+lH+EJ/rfoywaWBKhE1YMCHCP:H/5Ajx+llrfoYWBKCjP","tlshash":"bda3a4ccb5e2bcb2cb66b9a1406f020bb13e6873e448c8b4a1c9ddd06e345694576f7d","size":105832,"data":"","first_seen":"2025-11-22T13:43:14.913696Z","last_seen":"2025-11-22T13:43:14.913696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"546e195488b3c7758a0caaf2423e4bff","sha1":"6010ee75710ed9ba0922902249b8cad84034114e","sha256":"98c9481a6f51d481804a8e2ade90b92346b28bc5dbbd0aec0f8bc2225e8d723e","sha512":"8a49355b7dc7d0abbe23f420cf5467bba8bc2c7876c1e5a3b78c5bd2ea285c8075255e2b61cfd5900c7380dbd5a4befae1c8c0a6c8ae750b27672b34fbfad132","ssdeep":"","tlshash":"80c0120c978c829f60ece4a4181f15d830ccd06755960407590d547de7651eb70d9fed","size":185,"data":"","first_seen":"2023-03-13T00:34:36Z","last_seen":"2026-03-30T20:26:48.283812Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffd84a286fa4d09ae71002d135d86972","sha1":"87dc78c7e9b0602709640b200355403cad696709","sha256":"105a74415a4f5a53e78f1fce1f98bee01c803ad80c51eb063bb53ec48d571df0","sha512":"7fbc8cb9fa41dc4abaf4ada0b8d378bb0e1283fe958852bba9cba4f17cb1cea580cbb96e8f9223e7da1baaab3730a67ecf09aa6a284b5ef460a71f46dd00008f","ssdeep":"","tlshash":"e8510e33a3871eb7e036e29197cd10f40f768c620be42566518e4f6819ceb8c90e5ad3","size":2513,"data":"","first_seen":"2025-10-29T16:26:39.917859Z","last_seen":"2025-12-25T13:46:35.291382Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-includes/js/jquery/1763685180/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-09T02:38:08.822771Z","times_seen":648837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e64ef0f5b99627c17875bcb7fe541b5","sha1":"c21e0028542dc1320fe0d93a45ca5402afc3604c","sha256":"9fbbfded4d16c6f23094d88521292fe38f90be7b96b77a2f507383e1453229af","sha512":"c6041bd0435c24997fabda177053dbcb71e76f2a9b88aca81fb78a32d4686e19d1f842b23f55b7ac72baa1fc9ca9e9722c0580c1ed393896c281f582f57b925f","ssdeep":"192:5OmmeJWsc+SQaYkmUfNExVnyW/Km9eFoyDbYB3yaJXIjDE1fXz6QyMF0:5OmmkplaYkJfay/YVyaijDE1fDyMF0","tlshash":"73f16fc3f75d493614ff60b256fea284727d42bb490028617928e92c12b0e8915fffe9","size":7672,"data":"","first_seen":"2025-10-06T13:46:22.453616Z","last_seen":"2026-03-29T20:03:46.548014Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202511120101/pubads_impl.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.74.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e0737368a4ea732d516acddf7612f56","sha1":"133fd8f7ed43f4e449593f3c2141fc5f78a833ab","sha256":"6a6929a82c3850f9f3ffef5a46cab9ba58ce13985d87e456a39032a84f82a765","sha512":"9d215b82e77a06246a45d6a6dcda53c315a80d71746fd614155ea46fa6a6ecc962202029e091b680b1878701ebfe04c2b44467c17680f7a84d969c528c542fda","ssdeep":"12288:IaImfB4JKbtbx4Vr+PJULqw81xlaz+e7nC2bL44OwA:xtb+gaz+ebbLrOt","tlshash":"77d4e6dd72e374a1a263f9b4803f100bb13aa866b04c8c6cb65ad9d1aeb450d4177f7d","size":622204,"data":"","first_seen":"2025-11-20T10:58:30.125253Z","last_seen":"2026-01-10T15:43:51.71811Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4436a1a199e384ef7b86aa3e0259d20","sha1":"99e8103ef42eef199987252b526eb7c96a490315","sha256":"0e5ddfb8bfcce2c397b496502b1b46e95edf4a32772d4001b067be1cbdea552e","sha512":"b0ced0c23713c0a428dc4ec6e5edcf8b7c74ff731d9cef62df61f42e5ec5fbb9b623c27f04d05c1457777190a924b3ec91e819c5c83d3840ea8751f7dfc2c081","ssdeep":"","tlshash":"bed02b24e17a7dc873a611f8ae4a0966d08d75f49146b42c358e21365c1d817255009d","size":269,"data":"","first_seen":"2025-11-22T13:43:14.925774Z","last_seen":"2025-11-22T13:43:14.925774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d271e792c28df1888915eb56a0d395b8","sha1":"f23a061a39a39f3c8c044b2a496723ba46be6a85","sha256":"46b01dea9e8b67723924e024615168786a8c7b4ef709480f96ced9677d928907","sha512":"ae6bfbfd87b6f9e8b5349dd0ef58d4f4c037cedb67fdcf68dae4bdabf4144b401c2427f8db0bdd260a3345446a7d0d1c0b4eaa7bc2e2d6445a49cde7be25885e","ssdeep":"","tlshash":"ebb0120a14a7ef45030e200005d3145a904033c2c8c8f4031928c459d21ec826410fbf","size":99,"data":"","first_seen":"2025-10-29T16:26:39.926908Z","last_seen":"2026-03-29T20:03:46.55043Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c92e8a437d52a3e2388f00fd52a69f9","sha1":"1b25b6abf6e5a38db62f9a993c86fe26729c0f09","sha256":"2af478968cfdba350d71cea6da37a73a0105a5b34eefb670d31b68e76233e051","sha512":"79b5653ff6dccaba6786412797c1072c3b33900a5495a48e11bfb4fd0919249ab48c698b80937f61aabfc2d06029084ea3c97b39f632d9d83fef495d3f1d5101","ssdeep":"","tlshash":"ead09538d22c608b0116c8f00e2ffa62f1d0ca40eb003dc30500c24ef08cc42b6e8ce1","size":241,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-04-08T21:18:01.654853Z","times_seen":6411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa4be4d4db22516319b99e0a25ea2408","sha1":"ee84931668058ddaf04949730d69811fd88c5c46","sha256":"adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14","sha512":"316a764e282d7546f3234863e3527a45eabc4593374a5640c10dfc29a5dee93159e427cdaf65e3d492307950435cb8d304db5ebe18c26b2a8a7b9ed14d6438cb","ssdeep":"96:lncwF39Hqqq0ROssCxuhIMB3MxRBx7Pyy41bYdEtpXsWgFEsqKfW1r2oUIUMo2TN:V9tHlquOPCxEOfx7P/EUqKfqr2oMMoGN","tlshash":"5bb1420cb169b42f2567b036113f130fb237a06778958499f5b8d9d9dabc81e1433a7d","size":5501,"data":"","first_seen":"2023-03-07T01:30:37Z","last_seen":"2026-04-07T01:15:35.00127Z","times_seen":662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.lineicons.com/1.0.1/LineIcons.min.css","fqdn":"cdn.lineicons.com","domain":"lineicons.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lineicons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 09:52:41 GMT","end":"Sun, 08 Feb 2026 10:50:57 GMT"},"fingerprint":{"sha1":"80:9E:38:78:F2:D8:F8:6E:E5:B4:F3:15:63:00:D7:B6:8D:47:49:85","sha256":"F9:55:71:BB:F1:04:AA:EC:98:35:20:87:D4:D2:D4:D8:8B:0F:24:5A:6A:D6:2A:44:B3:79:F5:87:FE:F6:39:F7"}}},"request":{"raw":"GET /1.0.1/LineIcons.min.css HTTP/1.1\r\nHost: cdn.lineicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncdn-pullzone: 151693\r\ncdn-uid: 36ceba7b-4d1e-4f78-994c-440cf0a28887\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=259200\r\ncontent-encoding: br\r\netag: \"64adc227-5684\"\r\nlast-modified: Tue, 11 Jul 2023 20:57:11 GMT\r\ncdn-storageserver: DE-1131\r\ncdn-fileserver: 644\r\ncdn-proxyver: 1.38\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/15/2025 11:13:51\r\ncdn-edgestorageid: 1049\r\ncdn-requestid: 1b99486ba947f9437ce4ea07d77974fc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nage: 118386\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FSTpnlENVBEF5gVpU7hRJj%2BGNzAO6F%2F1T8QYEayC5oEby9cZ0kR6Sj1OFWA%2FmPMLE%2F8DXrB4PJWrsPtt1la5%2BUrumRPfDVIygq19L3VbPw%3D%3D\"}]}\r\ncf-ray: 9a28da2508a356c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22148,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22148), with no line terminators","md5":"73368bb7757134492941536c04d00ef7","sha1":"83fd36596e539ea05335017edd5a2f7bdc323b65","sha256":"77ffaf1d3ff7b9b64c8e2d1531d2f5839a7a1078b2483d0b5f21dfbd5b89fe65","sha512":"d566c944f8244f00886d84efe42e3fee939bec7030fd2d1bcd2a6346f55674f8d8c1d301b9eddb9a345496979cc3f1e5af4d6426b02289dad1ed09f2b8fef18a","ssdeep":"384:n3NiQdfmdHfcY6iaH9xBcMkAzKC1xH4b0kSIegulsZND091OjJrjrPvcevJy9Oo5:7X8NJLxyW8","tlshash":"14a281abd87a08c477b2c403c388e75a2499f571e55a0c5af19fb00f1ee176912d8fb9","first_seen":"2023-07-02T13:45:39Z","last_seen":"2026-04-07T20:20:15.370922Z","times_seen":67,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":46,"dns":21,"connect":1,"send":0,"wait":8,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/vanilla-lazyload@10.19.0/dist/lazyload.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 10.19.0\r\nx-jsd-version-type: version\r\netag: W/\"157d-7oSTFmgFjdrwSUlzDWmBH9iMXEY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\nage: 1574702\r\nx-served-by: cache-fra-eddf8230166-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2173\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5459)","md5":"aa4be4d4db22516319b99e0a25ea2408","sha1":"ee84931668058ddaf04949730d69811fd88c5c46","sha256":"adf03f7ab87622faa77b4d12f97ff80466377950b805021a07a8c11804ceac14","sha512":"316a764e282d7546f3234863e3527a45eabc4593374a5640c10dfc29a5dee93159e427cdaf65e3d492307950435cb8d304db5ebe18c26b2a8a7b9ed14d6438cb","ssdeep":"96:lncwF39Hqqq0ROssCxuhIMB3MxRBx7Pyy41bYdEtpXsWgFEsqKfW1r2oUIUMo2TN:V9tHlquOPCxEOfx7P/EUqKfqr2oMMoGN","tlshash":"5bb1420cb169b42f2567b036113f130fb237a06778958499f5b8d9d9dabc81e1433a7d","first_seen":"2023-03-07T01:30:37Z","last_seen":"2026-04-07T01:15:35.00127Z","times_seen":662,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":64,"dns":1,"connect":29,"send":0,"wait":28,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202511120101/pubads_impl.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.74.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"C0:F5:0B:B2:9F:24:0D:F9:6A:61:1F:9D:69:05:63:8B:6A:B6:E7:2F","sha256":"CD:FD:09:AA:1F:93:CB:C9:FA:1A:4E:F3:E5:2B:EC:91:C7:58:C6:05:E5:55:1E:0D:E1:E3:F7:09:AC:76:74:35"}}},"request":{"raw":"GET /pagead/managed/js/gpt/m202511120101/pubads_impl.js HTTP/1.1\r\nHost: securepubads.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 196693\r\nx-xss-protection: 0\r\ndate: Sat, 22 Nov 2025 00:09:51 GMT\r\nexpires: Sun, 22 Nov 2026 00:09:51 GMT\r\ncache-control: public, immutable, max-age=31536000\r\netag: 6518253978845184816\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 48776\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":622204,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65201)","md5":"1e0737368a4ea732d516acddf7612f56","sha1":"133fd8f7ed43f4e449593f3c2141fc5f78a833ab","sha256":"6a6929a82c3850f9f3ffef5a46cab9ba58ce13985d87e456a39032a84f82a765","sha512":"9d215b82e77a06246a45d6a6dcda53c315a80d71746fd614155ea46fa6a6ecc962202029e091b680b1878701ebfe04c2b44467c17680f7a84d969c528c542fda","ssdeep":"12288:IaImfB4JKbtbx4Vr+PJULqw81xlaz+e7nC2bL44OwA:xtb+gaz+ebbLrOt","tlshash":"77d4e6dd72e374a1a263f9b4803f100bb13aa866b04c8c6cb65ad9d1aeb450d4177f7d","first_seen":"2025-11-20T10:58:30.125253Z","last_seen":"2026-01-10T15:43:51.71811Z","times_seen":169,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/conscious/wp-content/uploads/2025/10/1760683320/mulcare-insurance-agency-allstate-insurance_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /conscious/wp-content/uploads/2025/10/1760683320/mulcare-insurance-agency-allstate-insurance_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34386\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZeHMMlpTeVsywp5bSg9muM4h0mRW1NYEbz%2F4yQcNGQY3RX4V3HRQJPsPsJpcwaJVXuMm%2F%2FpE4efXFapKuCpGB87Zw66CHSUHCNAOpiI6LYebIqOk2eJj6NJgA%3D%3D\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2015bc812a234f4c64ea5080b5f61852\"\r\nlast-modified: Fri, 17 Oct 2025 06:42:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9a28da27187e5695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2015bc812a234f4c64ea5080b5f61852","sha1":"62adbbf9154ff70d9491837e35413ab8ea44a28d","sha256":"a938351273228294d21a7fe8733642d0ced9902145f3561e5c3deecc254b4384","sha512":"a3889e7e032bbe2cfe8347ff1ffec2b7ab9957830c2062e5f4cde164f0055795a3179f9fabb853b785d945da31e1c6eb5a7bb54d46976d75330af7dc1897f6d7","ssdeep":"768:pGSrKE9qPYeoxpsZBlhAlssagm57Pg3d+wQ2hqdpZCc:pz7xpsfl+1A743wmkjEc","tlshash":"9af2f13487358581cd73c86a149eac2885de38427249ef245ed2ae4d5444eb9caffece","first_seen":"2025-10-29T16:26:39.90585Z","last_seen":"2025-12-25T13:46:35.278787Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/conscious/wp-content/uploads/2025/10/1760683320/allstate-car-and-home-insurance-quote_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /conscious/wp-content/uploads/2025/10/1760683320/allstate-car-and-home-insurance-quote_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89288\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EP9LDo9YGJlPEEBJFKC%2BRrS5aIuQS5oCrguZcHwOaLwMsweM51bIx735P3d3HTtFj0A75DOVymb%2B9gUQGI%2FwZoUKKpUVAoDjAqTpX%2FmWz9vqEI0uOyq84a8vg%3D%3D\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"102250f43c4059ebddb9d2fdf770b72b\"\r\nlast-modified: Fri, 17 Oct 2025 06:42:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9a28da2718815695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x864, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"102250f43c4059ebddb9d2fdf770b72b","sha1":"7589896d340b5497f727f67cfd893d0e410dca1e","sha256":"7776cae2a00980d8889e3a57028e5430b0582538375f573ad4379f10b2753a14","sha512":"eb46a4b73705692a85d1dfb2d9c8fc78289b0f6f7b5c87cd69b656ebaf7b7cd33b464d2e379d70dadb9a9dd7a3e2d1b333454967f5d32ca1e8a0d67d07157019","ssdeep":"1536:wsdVz0Wi9BWcTQiGpBOHgM/rp/G5lx1Cyds8w3sryIZ/nW4mkWvGibXdb:wkVoN9vEiGG39KEiryIrlWvJx","tlshash":"259312924b98a942c2d49de8b35138fe42db37e2e32749a267d1f2fd625ccc05741ed1","first_seen":"2025-10-29T16:26:39.893745Z","last_seen":"2025-12-25T13:46:35.270587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/conscious/wp-content/uploads/2025/10/1760683320/does-allstate-have-good-home-insurance_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /conscious/wp-content/uploads/2025/10/1760683320/does-allstate-have-good-home-insurance_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89288\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPEWOjSq%2B4xhbmURRShkyofwrluZ0Kb%2BemkuIqTB2zSjuSMB4g6p%2FIfvmQheLyMMg6ulvSZBxeR%2F%2FYG2BG%2B3BOmfP60r6OHDuXPv603FyF3Bh8yj3g4huGGuiw%3D%3D\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"102250f43c4059ebddb9d2fdf770b72b\"\r\nlast-modified: Fri, 17 Oct 2025 06:42:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9a28da2718875695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x864, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"102250f43c4059ebddb9d2fdf770b72b","sha1":"7589896d340b5497f727f67cfd893d0e410dca1e","sha256":"7776cae2a00980d8889e3a57028e5430b0582538375f573ad4379f10b2753a14","sha512":"eb46a4b73705692a85d1dfb2d9c8fc78289b0f6f7b5c87cd69b656ebaf7b7cd33b464d2e379d70dadb9a9dd7a3e2d1b333454967f5d32ca1e8a0d67d07157019","ssdeep":"1536:wsdVz0Wi9BWcTQiGpBOHgM/rp/G5lx1Cyds8w3sryIZ/nW4mkWvGibXdb:wkVoN9vEiGG39KEiryIrlWvJx","tlshash":"259312924b98a942c2d49de8b35138fe42db37e2e32749a267d1f2fd625ccc05741ed1","first_seen":"2025-10-29T16:26:39.893745Z","last_seen":"2025-12-25T13:46:35.270587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/conscious/wp-content/uploads/2025/10/1760683320/ryan-davis-allstate-insurance_0.png.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /conscious/wp-content/uploads/2025/10/1760683320/ryan-davis-allstate-insurance_0.png.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17738\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5W%2FIGLHcmY8aifXoygALIFtlNZOjHN0hjkJZd93ijWGC0L5FNTchulvGIimCii%2Bkjiqp6tfqkNtM13rMMAm5kV6nsNYTdKhY7C%2BMUOjm3NeLMsDCZbnuumomw%3D%3D\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"3f1f9141ab7af2f9be162bd817a87eda\"\r\nlast-modified: Fri, 17 Oct 2025 06:42:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\ncf-ray: 9a28da27288b5695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 205x320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3f1f9141ab7af2f9be162bd817a87eda","sha1":"89184402f8d874c2b52e40227eda99c3d075c735","sha256":"ef34d9fd30c2e46202c31c2a28df243420e67c0e823763ef664760c531de4afa","sha512":"1be0871956a55ff7a6253b655ec57643d8ef3535342208ef6f42cad28c8d73f0ceffb55fc333ec8dbbf9bf455238a34ac6680c3b62ef174dda25c5226afbda26","ssdeep":"384:uQ2eXnueLa6UceTNUOMfjQxMAiHI11tqIL/YO4/ggce5oK8oWI++rsdy6GC:zR+geTSOqjQxeW4IS/gg/5o/a+kX6GC","tlshash":"f782d06595a976473de67bdf3937931652c5808a33b3419329ddb8c216c005cde01fe7","first_seen":"2025-10-29T16:26:39.907987Z","last_seen":"2025-12-25T13:46:35.282119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/wp-includes/js/jquery/1763685180/jquery-migrate.min.js?ver=3.4.1","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /wp-includes/js/jquery/1763685180/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0WCr8r0VG7WrHS8txQzd%2Fdyco0LxvBKoGo9iawEedvGhhlZyACilgg5OdCqScrLDgl1%2FgHloMkAwKGZQa3ocFrQXqICZdyQh8XU%2FstdGYaHOQ8hh%2BTr9A0ayA%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: max-age=31536000\r\nlast-modified: Fri, 21 Nov 2025 00:33:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 128\r\netag: W/\"9ffeb32e2d9efbf8f70caabded242267\"\r\ncontent-encoding: br\r\ncf-ray: 9a28da246e505695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-09T02:38:08.822771Z","times_seen":648837,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":77,"dns":64,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-content/litespeed/css/24/d745bf8e0f9b131c0ba2cbc184942c6a.css?ver=42c6a","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET /wp-content/litespeed/css/24/d745bf8e0f9b131c0ba2cbc184942c6a.css?ver=42c6a HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 22 Nov 2025 12:38:49 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6921aed9-841\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VM46r2wj9P8nhT9B9yrfdQueqxOnsYRuAR%2Bl%2FcWPBg8scWmHIro%2FXprmc25cbtc%2FfWbBnYsZHUpKb0u3u5MuG%2FwupgkzIC8vYjAU%2FUrLRwrlPdJdCQuNciAQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a28da23de22b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2113,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2113), with no line terminators","md5":"031f651aad5f18cd31bbb7f28b4635d5","sha1":"d3cca185a168e3b7d6b2897fa57d142bd394b3e5","sha256":"0c0eb73c12355c6f822cb24a3aba66a6b144d6a25dd02ef244736d36938f95c5","sha512":"df645dae2ffd5b6cc899e39a3db0b64490719d90bc60aa06b252993c53f41e5bc269bb128ebeee638304895748756505b93937a3e1fc3b98c9ccb972da1ca2c8","ssdeep":"","tlshash":"bd4114879a93330b5036e92d47dda3a3d93676474fca5be64cc86c60afdac40213d9a4","first_seen":"2023-08-13T00:26:45Z","last_seen":"2026-04-08T03:09:57.985605Z","times_seen":278,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-includes/js/jquery/jquery.min.js","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 00:29:47 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"691fb27b-15601\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRpyPmm0WpNYaMpvEGP2F9Jxa4LiLnbP20Ip6xYgX1bjDWd06EafyGHmNKhiZ9CojPBwg463ldBYNawuyBlZ4xPe9F9KJAeNWxB8aB4ACYwXciU%2FTcXqEV1zog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a28da23de24b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-09T02:38:08.713781Z","times_seen":696743,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://conscious.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9a28da2419d523eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-09T02:39:22.08227Z","times_seen":331079,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":2,"connect":1,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-22T13:42:46.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-dns-prefetch-control: on\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IM6ILwkxOBr5twrPMx2HpYzv0gAFN%2BeU8sSlWBa5yQiDBzwq7LZOOayDuvsOkR2ynO%2BRa2dLtDGZLKHAWepnCKRLK5BJNrKj0jPWDBGsmA1a2%2Fhoq9VzI4gOGw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=245\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; Path=/\nSITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d; HttpOnly; Path=/; Max-Age=259200000\r\ncf-ray: 9a28da20bd58c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":46808,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (24204)","md5":"c5c8330932f87ae10e8fb5a96e7a5a73","sha1":"89e117b22b05a1c2013d463c646444a91648509b","sha256":"cb632ebdda6431d94a567dbbfd9cb508562c0d4bf740ebfb333347316c43d431","sha512":"93ac9042bb67001fb156f314f0961e499aa20a588742d6b61825f2f61ce51b075e07ef31c5a681eb0e1fabe94112ecf3b6e82895679292c322fbcfa9e545643e","ssdeep":"768:rzI4KGtB3NSxMW7ynXLhfZ8LW/DrB7dobMli+NrK7Cc3N5nTooYde3WMLugLScAY:rzI4zBQx90ueZa5+80lMYUvE1eC4","tlshash":"95232ab283a4243e5177c1b66ae9e78d32a9803ad7035591a576d73c83c2e1506fbfcc","first_seen":"2025-11-22T13:43:14.905036Z","last_seen":"2025-11-22T13:43:14.905036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":303,"dns":283,"connect":1,"send":0,"wait":259,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-content/litespeed/js/24/a7acc8a28ff7ef872f0d3cf9da076773.js?ver=76773","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET /wp-content/litespeed/js/24/a7acc8a28ff7ef872f0d3cf9da076773.js?ver=76773 HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 22 Nov 2025 12:38:49 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6921aed9-1d9a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgXS8SaiN6PPW%2FJK2X8yqC3JxwP7wPwqMkmQLxdp%2B0td7rHxxkLukZGdC34JGH9UahQoXhbIQOabEL4SgQXcZMq1huukW5AvDJCx%2FyyG3fYQrCZgTgvMhVTG%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a28da23ee26b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7576)","md5":"1bbade7a5f308398e4dd5772eb35c179","sha1":"9c50afd6742ed5f5edf25d905877a1a0090bea4b","sha256":"b003f20cbc35a63e7b5a3781231a0b34861612223cb1709d03ddd4c287477f74","sha512":"f64ae312ccb774ecd2984abd40be538e069b7032c2ecaa635726ad934c9d4e031ed69a9e82d9abb6ce40885894f072da0d937ade19cbb915f2a810a19a203307","ssdeep":"192:K5nV2DkJPTYWxr0qUi2coMoPo2oS2oSaxRoxoSp1ro/okogHo6RLKp:Esg6Nc3kJo8xRY1rozHLxS","tlshash":"c7f1e9987674b0ff05fa41f9873fb95d70b2d155a40b80002829e8f6b5e4a6b052fef9","first_seen":"2024-10-20T03:43:26.517922Z","last_seen":"2025-11-30T14:03:03.618555Z","times_seen":8,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/wp-content/litespeed/js/24/08595efd98f04758596aacb48b8b9c39.js?ver=b9c39","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET /wp-content/litespeed/js/24/08595efd98f04758596aacb48b8b9c39.js?ver=b9c39 HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 22 Nov 2025 12:38:49 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6921aed9-1ee8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLDlcLQOrveVwO8ZWm0Cb6MO%2BEi19mLGfkGXmUrfg7WcbPkKi3OwkrlB9TiTa0eiYoa5qj8jRT4zar1lK4Vhqz8UuiuRvGTLAAKDKYUWdCCoHhuEVSxKc2ZPTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a28da23ee2ab1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7912,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7910)","md5":"d39ce5b77944f4d3d7f23927d43aded6","sha1":"893af47086a109962c5a66c1b8e7a52b5270f14d","sha256":"b9cbd2403f25aae47be61ae686fc76eeda465d8dcb3777ac648263544c27b535","sha512":"a9ca80f9b3771f8f1a6af956771943672c62527f5d27e932e0109a18d4d7041d11387850961d6e116307eb1834ae362b589cf349f5c9e3af1fbfba065068ea32","ssdeep":"192:RrUDc4B6C+AuV4S+LPHNY8USmaQilNrE6tuVbjWch5YnW6oyuZpxbUGXoi0Vo/g4:+DEC+Aw4S+LPHNY8USmaQiluHVXWch28","tlshash":"e5f130257224102b48de05f9283ba3067163f1317743a84a652f809dfc68c6f79f3afa","first_seen":"2024-10-20T03:43:26.928565Z","last_seen":"2025-11-30T14:03:03.621401Z","times_seen":8,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/favicon.ico","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 21 Nov 2025 00:29:24 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"691fb264-3c2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ILgkZZMJisC99RdfzZF983PaHASY26hL8vPtV2%2BpFL9sAwlnR9ndVH4ouI1NyO4TZzvlqqRQtUvdQve3P8B1cTiafu7KIIsh0z9SXRbBR6DzSA7%2B5YJodDEmQ%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9a28da26ae66b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"52ed9f1ad27a1af3771bc93bbc59fffc","sha1":"80933ef4cb1c33f099f5b37bdbbbfc1b8e50e5d5","sha256":"627356ae5766af12bc1bd67259f482a491c228837f3a5b6ab415f72b997495a0","sha512":"1e876380c8bca506c8c3c746c365fa5a057c81161a0ff08d46f978f78e8a94349a1053ab651e40498ab6f854b6322df44fe0317365d2068c960fbd32421fb516","ssdeep":"96:oYUau/fy60f1czcXeN1pKDh+K3BQXE+9wb/b:oYDutzcuPWxQXxeb","tlshash":"9f623edbfb990f0cdc10663c112628a155ebaf9561de26596c8ff6460bff90301fa60a","first_seen":"2025-11-22T13:43:14.90748Z","last_seen":"2026-03-29T20:03:46.534837Z","times_seen":13,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.periodcostume.ngadimin.id/conscious/wp-content/uploads/2025/10/1760683320/allstate-home-insurance-reddit_0.jpg.webp","fqdn":"cdn.periodcostume.ngadimin.id","domain":"ngadimin.id","tld":"id"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"de3afc56.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 13:16:13 GMT","end":"Wed, 14 Jan 2026 14:16:05 GMT"},"fingerprint":{"sha1":"AC:9D:E6:B1:3C:67:72:86:E8:0C:3A:B5:7F:4A:97:2D:26:1F:D4:CE","sha256":"AF:24:20:F6:6D:38:D2:3F:B4:5A:10:5C:73:9D:85:D9:FD:41:BC:17:B9:AE:72:C6:06:55:6E:B9:A6:89:B7:EE"}}},"request":{"raw":"GET /conscious/wp-content/uploads/2025/10/1760683320/allstate-home-insurance-reddit_0.jpg.webp HTTP/1.1\r\nHost: cdn.periodcostume.ngadimin.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 89288\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DEZ6epChz9%2BWkijnQRPC%2F3K9a%2BCImLiiDpIKDkT7FhaLwJkg0m1LHZPdILpSOvcMPD6XD0WWdCK10ubSAzfg1ad7dqf88tuNcu%2Bj8PnvqG9V7dF1N03L1wfbgQ%3D%3D\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"102250f43c4059ebddb9d2fdf770b72b\"\r\nlast-modified: Fri, 17 Oct 2025 06:42:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=31536000\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9a28da2718855695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x864, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"102250f43c4059ebddb9d2fdf770b72b","sha1":"7589896d340b5497f727f67cfd893d0e410dca1e","sha256":"7776cae2a00980d8889e3a57028e5430b0582538375f573ad4379f10b2753a14","sha512":"eb46a4b73705692a85d1dfb2d9c8fc78289b0f6f7b5c87cd69b656ebaf7b7cd33b464d2e379d70dadb9a9dd7a3e2d1b333454967f5d32ca1e8a0d67d07157019","ssdeep":"1536:wsdVz0Wi9BWcTQiGpBOHgM/rp/G5lx1Cyds8w3sryIZ/nW4mkWvGibXdb:wkVoN9vEiGG39KEiryIrlWvJx","tlshash":"259312924b98a942c2d49de8b35138fe42db37e2e32749a267d1f2fd625ccc05741ed1","first_seen":"2025-10-29T16:26:39.893745Z","last_seen":"2025-12-25T13:46:35.270587Z","times_seen":3,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"conscious.periodcostume.top/cdn-cgi/rum?","fqdn":"conscious.periodcostume.top","domain":"periodcostume.top","tld":"top"},"ip":{"addr":"104.21.76.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:48.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"periodcostume.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 04:36:33 GMT","end":"Sun, 11 Jan 2026 05:24:12 GMT"},"fingerprint":{"sha1":"C4:A4:1B:F8:56:D3:1D:B6:E2:7D:8B:09:AC:74:98:B6:1E:81:F7:F8","sha256":"0A:B6:02:FF:2D:13:76:DF:06:FB:C2:EC:A7:CD:EE:5F:5D:FF:5B:3B:3D:DA:B5:5E:96:ED:19:72:65:6F:35:8C"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: conscious.periodcostume.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1048\r\nOrigin: https://conscious.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nCookie: PHPSESSID=0b58b9ea653f192512efb9d385c889ab; SITE_TOTAL_ID=f9e87f0a50b26f23406c05cac0f4c06d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1048,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1018,\"startTime\":1763818966829,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"71c26533-f7e7-43dd-a0a5-ef4049e41f5a\",\"location\":\"https://conscious.periodcostume.top/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1004,\"domContentLoadedEventStart\":1012,\"domContentLoadedEventEnd\":1017,\"domComplete\":1636,\"loadEventStart\":1637,\"loadEventEnd\":1637,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":24,\"domainLookupStart\":25,\"domainLookupEnd\":307,\"connectStart\":308,\"connectEnd\":328,\"secureConnectionStart\":310,\"requestStart\":328,\"responseStart\":586,\"responseEnd\":588,\"transferSize\":13574,\"encodedBodySize\":12517,\"decodedBodySize\":46808,\"name\":\"https://conscious.periodcostume.top/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1637},\"siteToken\":\"98b02fb221b3446494afe09a328b6631\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://conscious.periodcostume.top\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMw2FzbAbUwMEPJG0%2FdSMIXC05%2F6bVLgLX5ZbTM23kMUW38vHIZ0lcdKJq1nfFeEU43frR7xQXhL%2BhA0bbMDHgNCiVCyTXgkehWoY4%2BqWAdrWLoEHsXvpG3obg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a28da290ea8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T02:38:17.241927Z","times_seen":13523349,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-22","alert":"Sinkholed","trigger":"conscious.periodcostume.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"142.250.74.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"C0:F5:0B:B2:9F:24:0D:F9:6A:61:1F:9D:69:05:63:8B:6A:B6:E7:2F","sha256":"CD:FD:09:AA:1F:93:CB:C9:FA:1A:4E:F3:E5:2B:EC:91:C7:58:C6:05:E5:55:1E:0D:E1:E3:F7:09:AC:76:74:35"}}},"request":{"raw":"GET /tag/js/gpt.js HTTP/1.1\r\nHost: securepubads.g.doubleclick.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://conscious.periodcostume.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml\", CP=\"CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 22 Nov 2025 13:42:47 GMT\r\nexpires: Sat, 22 Nov 2025 13:42:47 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 630 / 20414 / m202511120101 / config-hash: 14247479607061606112\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 33714\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105832,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (34711)","md5":"e3b11265bd7fb362b2855007a6a613df","sha1":"97c776f4b9c677b020e6414d32b6aaafbf603a11","sha256":"edf4bb6c4b9505aeb8d9ab9b53e114e2582c92841de84cf3f07bb10c214844ac","sha512":"fcf69adb6d15cf86e1fbb5fc538373c3fb6952943a09db2117c95374168700831dd72e3aa69f6709df40e831f7462ddbe5046eca2e7ea94531fe5973e6f5741e","ssdeep":"1536:b9nl/5Fex3Zx+lH+EJ/rfoywaWBKhE1YMCHCP:H/5Ajx+llrfoYWBKCjP","tlshash":"bda3a4ccb5e2bcb2cb66b9a1406f020bb13e6873e448c8b4a1c9ddd06e345694576f7d","first_seen":"2025-11-22T13:43:14.913696Z","last_seen":"2025-11-22T13:43:14.913696Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":128,"dns":10,"connect":7,"send":0,"wait":26,"receive":8,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.lineicons.com/1.0.1/fonts/LineIcons.ttf?y2l643","fqdn":"cdn.lineicons.com","domain":"lineicons.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://conscious.periodcostume.top/","date":"2025-11-22T13:42:47.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lineicons.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 09:52:41 GMT","end":"Sun, 08 Feb 2026 10:50:57 GMT"},"fingerprint":{"sha1":"80:9E:38:78:F2:D8:F8:6E:E5:B4:F3:15:63:00:D7:B6:8D:47:49:85","sha256":"F9:55:71:BB:F1:04:AA:EC:98:35:20:87:D4:D2:D4:D8:8B:0F:24:5A:6A:D6:2A:44:B3:79:F5:87:FE:F6:39:F7"}}},"request":{"raw":"GET /1.0.1/fonts/LineIcons.ttf?y2l643 HTTP/1.1\r\nHost: cdn.lineicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://conscious.periodcostume.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.lineicons.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 22 Nov 2025 13:42:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 147216\r\nserver: cloudflare\r\ncdn-pullzone: 151693\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=259200\r\netag: \"64ac87f7-23f10\"\r\nlast-modified: Mon, 10 Jul 2023 22:36:39 GMT\r\ncdn-storageserver: DE-1019\r\ncdn-fileserver: 660\r\ncdn-proxyver: 1.38\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/15/2025 11:14:14\r\ncdn-edgestorageid: 756\r\ncdn-requestid: 0545d28c939989b8a412ded42b22c6ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zp37x69A7WVVVEZze53FtJW2mknoa7q5iOaHnQ9MILPALrUB%2FCZJ5shcCrmbcVKpZ2NdX3RrZG16sbIoRp2oV1VWKI1aiY8rf7R6qTzKaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a28da25fc0c56b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147216,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 26 names, Macintosh","md5":"6e9fb56e13ffdf56a053e86545cafe3e","sha1":"d34c70ec8e08d1a178551e7a59eb853c7b79e33f","sha256":"21266db9afe52863719a3921728d4ca557e955d790ce012281cad27fd66f6d9c","sha512":"c927c0d0987ddeeb0f38adc1c50b37309301062aa5b5d845f7fd87faf00f8754e98b99a8a6ebf1d7c2ee3ebd58c8169187f5cddae50fc3fc53a7e218cbfa92cf","ssdeep":"3072:2Gt+cTFQtkyCoTA1NUlTfAq5LBl7IAo1pXT7IZPxcrSBC8y2+Raq9CFCB/Px3xr6:2Gt+cZQtkyC8UsTfAq5LBl7IDT7IRar0","tlshash":"a0e37d2b938bdf6fd126acab1c10a1624edbd131836f6657b6c51c46c50acf40ca87de","first_seen":"2023-04-16T06:20:24Z","last_seen":"2026-04-08T06:01:26.883115Z","times_seen":320,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":146,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}