{"report_id":"2fe24b8f-638b-4448-b79b-01f4364996a1","version":6,"status":"done","tags":[],"date":"2026-01-30T10:11:32Z","url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"title":"Moonbirds Airdrop","dom":{"size":173438,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16899)","md5":"b06f9ed83117c53d3ebc3d41b4317f3c","sha1":"2b2fa62882feb3fd3d63ded6fd61cebb7b49150e","sha256":"9aca701a39b56e38704e0a94724f7080cb4d83e30c2282f75894181330129e8a","sha512":"a4050edf9348150ade7b3295901daf248506638cb5faf3d3aacb2e5554d08b3722352ae77caec19378591b1cb502a9acba7768dfca3a28bc4462c4ad1f1964e7","ssdeep":"3072:iyau3ESjN6qOtDZau3ESjN6qOtD37woH4:iyaaESj0ptDZaaESj0ptDNY","tlshash":"7904c557165f2166540c3ef74bd62d0ee508f1a38a138bc8f0de1aecdbafa5d898215c","dom_hash":"domhashc1384c72a516c5513b6b2726c34c4ae9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T10:11:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-27T13:04:05.607822Z","alert_count":6,"request_count":3,"received_data":659270,"sent_data":1604,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-01-28T16:11:13.330802Z","alert_count":0,"request_count":1,"received_data":16874,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-25T22:51:24.521582Z","alert_count":0,"request_count":1,"received_data":773,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-01-25T21:41:49.555987Z","alert_count":0,"request_count":1,"received_data":695,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"birbchecker.lol","ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-01-30T09:45:55.008569Z","last_seen":"2026-01-30T09:45:55.008569Z","alert_count":0,"request_count":11,"received_data":675712,"sent_data":5872,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-01-28T22:17:03.403683Z","alert_count":0,"request_count":2,"received_data":1464,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d1a2c4f480ffdfd81ec59b6066062582","sha1":"c7f481db7ebb4a9af0f88d357c014735310dc5b3","sha256":"b1aa496e9a1a68ff4e574df79718cb6032178d6d825c048bdbf136aa4efc0465","sha512":"fbc803bcfe9aa6d538d100c3f084d16d7be017365c879548f74da1750b5bd0a626d337da6f35313461bfef8293a67200c8ae666158c02df2fd59111c87e78113","ssdeep":"12288:WgW385m0nuyi1LAz0cMquy0aDwU7ofoedMWG9oof5B2Y:WSczuunK","tlshash":"2a94210295c293a14273d3aa4f13b05ddad899f902456d63fb90aec6b438934f4f2f76","size":435663,"data":"","first_seen":"2025-12-27T20:50:26.092645Z","last_seen":"2026-02-01T17:18:58.555423Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/assets/e.js?6","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","size":13546,"data":"","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","size":442978,"data":"","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"230a091930a82c5ae47e29610ee98ceb","sha1":"6376b33e5123bf09a271789a272103f957c8f38d","sha256":"4dc501d66cd78903b81b1a53459d0432939728c537bbe9ffab55ab81521cb352","sha512":"aafc914b9309be3d1801bf9ee1226bcc35e15baf70f28543a9ad1e094b1ca82f90b6359eac253b2539cd4469c52c4faeeb8029af9c4c02e7ba0d0c8ebf9bb8f0","ssdeep":"","tlshash":"6a30000000000000000000000000000000000003000000003000000003000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-06T05:05:18.987871Z","times_seen":9884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f3dd66014231344968f5cf97e5ccd92","sha1":"25c15b682c445c74143b0d073ea584a6632c4f4b","sha256":"26ac24d62e38da2a60d0da6f508fe20f6ddb5c1ceb73ad3029ebbe85079e85aa","sha512":"4fc781195d4d97603c01c839651818c2d1527af9460f1a2915960c43db3f0f1978988320ee26bfb2f3cc3a166a844b3b553222ab121f54c4eb510cd97f74d721","ssdeep":"192:i1eK+AxQTYTCfB4QrfObUYNwzG37VqNVakoWuqxw+n:GXUSRaVhuiw+","tlshash":"f4f1a429b1d13035800b70672ad7ca2d753ea64b5b164c523b0d42b6cf25dac79ebfb4","size":7911,"data":"","first_seen":"2026-01-29T16:31:30.451806Z","last_seen":"2026-01-30T19:03:01.267773Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29496131\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-04T13:17:02.933183Z","times_seen":2551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"birbchecker.lol/claim","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T10:11:10.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /claim HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: uclick=gxojci3y; expires=Sat, 31 Jan 2026 10:11:10 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=gxojci3y-gxojci3y-fe-fe-i4-17-vr-c1bd09; expires=Sat, 31 Jan 2026 10:11:10 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclick=gxojci3y; expires=Sat, 31 Jan 2026 10:11:10 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50; expires=Sat, 31 Jan 2026 10:11:10 GMT; Max-Age=86400; path=/; secure; SameSite=none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjewcCbK8LB1TH8iE6xGbmRuDnfskGk%2FhV5UT1lCWiQa9ceEHwh3qzSZeNT7t9upZ53Qbt5rlo6%2B3hkFU1zNYcMAz0Ni90rvoQMyG5Q%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c602f04fd0156af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167514,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16901)","md5":"b490df660ef80ba4882be3a4db457156","sha1":"7237fe729b2d3d9d9ed767e317a5e6533337a28d","sha256":"b68e42dff4c6aa3a073c6fb6357e04c39195a3248a2616e5113f6a43186280d2","sha512":"24cb3b98dd2b8bb23dde1d160933445f97063f5335074f34135873dcb7e37b34a917b5fa8d54baece0b7c35bfaf4da7c8a9de686b2b557c88ea5fd9ba676855d","ssdeep":"3072:A6au3EHjI6sftmcau3EHjI6sftm7UwbHr:A6aaEHjTCtmcaaEHjTCtmdL","tlshash":"96f3d557165f2166580c3ebb4bd22d0ed508f1e38a138bc8f0de19ecd7afa5d898225c","first_seen":"2026-01-30T06:26:32.480258Z","last_seen":"2026-01-30T19:03:01.25926Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":47,"dns":34,"connect":1,"send":0,"wait":164,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/click.php?event8=1","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /click.php?event8=1 HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmdTEBEy0Mo3XyZsf%2BNwEGPHob0h04ESNO64m1IoPTf5nmlVqPfknv35P%2FT8FWkClLQ4WP1dUtxXMTvB9SiIlyE%2By%2Bq2bkZxRdDz1ZE69g%3D%3D\"}]}\r\ncf-ray: 9c602f0b8cb4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/%7Blogo%7D","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /landers/_airdrop/%7Blogo%7D HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/claim\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lbNxxn%2FoL6BnpNE5kZRB1JKeqA0ScRKB5EArq92M6h1IbLc3zAmgZogUcrpc6GIafVrDPQQuH7KiAjgtiLaEPtGLC6y8XRV%2FN2dZyeoWQ%3D%3D\"}]}\r\ncf-ray: 9c602f0c5cbdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:12.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbchecker.lol/\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 30 Jan 2026 10:11:12 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9c602f109b7156c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":27,"dns":5,"connect":1,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:12.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 10:11:12 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 86\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c602f11ac4e56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dd0748d02448551fba5ac2debc605c0c","sha1":"0acdaae3741ebc5d9515948b5169056ef73a2226","sha256":"2cb47b89359257e7a72569abd52df40569ef8603a668e548e4a694a335952afd","sha512":"825b99b277b9af570edbf93d6fea163626152f0a14349dcc3726eba44f4268d6230cd67e85d53b49a7b02523a9ad6c1030f737ffec3c465386fd08dc30ca1f1c","ssdeep":"","tlshash":"36e07d803d490bbeaed48e17ca1521a9d7c118585b004a8723df1d1571ca59ee00b5bb","first_seen":"2026-01-30T10:11:34.942558Z","last_seen":"2026-01-30T10:11:34.942558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:13.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbchecker.lol/\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 30 Jan 2026 10:11:13 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/30/2026 10:11:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2a4095d54713ab0d85c9304ce6caffa8\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":12,"dns":1,"connect":2,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/click.php?event6=1","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /click.php?event6=1 HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2B%2BSKOL8XqDQtbk5HIQtkgwUpJGJxpClbEZNljuwVdkrVNQcYNf7HlAxpC%2BnGf4jIS5b7LkeaF9JQiGsM17Ue%2Fub4itjXBsZgFippCo0nA%3D%3D\"}]}\r\ncf-ray: 9c602f0a8c96b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29496131%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29496131%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/claim\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82G9dpNDVxPxvH7DqAbRGTEMbxv9gB5lqvAZl4KSka%2B42RDh%2BcPhrfqaPtYjRp1kQcbx%2B8xnXh%2F7VFCpfFrU6qi4SszOrBvbaEfXeS4S3g%3D%3D\"}]}\r\ncf-ray: 9c602f0b7cb3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/assets/e.js?6","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:10.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /landers/_airdrop/assets/e.js?6 HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/claim\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 28 Jan 2026 08:01:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/e.js\r\ncontent-encoding: br\r\nage: 2688\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6979c243-34ea\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5hpE2IiaFBr89HO18NMpOUusCbjeHdGrVNwBoYL9K5FToLLVAwM6U6nL%2FuvL359Cqu3q3mObCWSOBahI268HU%2FEwNV5hjwX8QwE55XNhQ%3D%3D\"}]}\r\ncf-ray: 9c602f072bedb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13546), with no line terminators","md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:10.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /landers/_airdrop/assets/elegant-spinner.min.js HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/claim\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 25 Dec 2025 05:45:56 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/elegant-spinner.min.js\r\ncontent-encoding: br\r\nage: 2688\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"694ccf94-6c262\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3QvvlxOIrbdF6PL7rePYpeFwjGm0TN3LAI5avBDU1OBhGuwVn5xrkmYJ%2FMMfVxKn5PWIzw4552deG4sTjcel6zyZq6qpG6XgPuad650%2Bg%3D%3D\"}]}\r\ncf-ray: 9c602f072beeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/secureproxy?e=ping_proxy","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzmOpv6A50qPROFCO0cneTrLWysnbULuqcxvzDlbQnNLKkxOgOeSZCxARF7u3dMbrPXIyWRKjc6eApb0JrhlVFerbTiFzb0SjvVZhBxlWA%3D%3D\"}]}\r\ncf-ray: 9c602f0a6c92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/YqhV6q8Q/New-Project.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"45.43.142.101","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 06:59:00 GMT","end":"Sun, 15 Mar 2026 06:58:59 GMT"},"fingerprint":{"sha1":"C3:A1:A1:CF:B5:C2:F8:46:61:8F:2F:50:69:51:66:5C:B7:40:74:B0","sha256":"0D:77:24:2B:B5:24:E5:20:5F:99:9A:4F:51:93:65:79:E2:FF:1E:BA:9E:BF:E4:28:BA:34:F3:C4:83:0C:CF:21"}}},"request":{"raw":"GET /YqhV6q8Q/New-Project.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 16507\r\nlast-modified: Wed, 28 Jan 2026 09:39:57 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":16507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"616354eb51b1c657d0f5054fde15e401","sha1":"2f263258b227d05d39188d250758dd7a32fc918d","sha256":"f2ff53763ce236e500c4837702e99ad688a55ed7b14a5e4723cb656b873d93c1","sha512":"6842f6c39bcc5d75f6d71bd0a35511deec4b560435ff8cfb73be2f6de2ce7062c24d98677475feb309a77769c52b31a1aa736a8638af582b4a2c24a6093435f7","ssdeep":"384:jkIpBBBBBBBhiAD7zjaHI/YbYY6vtCqW74IOJVmYnIAjxBw4ViBBBBBBBM:4IpBBBBBBBdao/FtCqW8IEVhnIAjxBws","tlshash":"d372c0f34be1d9640149354cbf31dd202f24da761823b9727aa0ea6daff92709b22153","first_seen":"2026-01-29T16:31:30.4482Z","last_seen":"2026-01-30T19:03:01.263601Z","times_seen":5,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":53,"dns":1,"connect":21,"send":0,"wait":22,"receive":20,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 03:43:41 GMT","end":"Tue, 28 Apr 2026 03:43:40 GMT"},"fingerprint":{"sha1":"6C:0D:40:92:59:E5:2E:A0:CA:4A:E5:0F:8E:6E:29:51:9D:B8:99:E4","sha256":"92:26:45:38:46:B3:CC:84:2B:1F:69:1C:B6:DF:39:25:92:BD:77:47:1B:3A:E4:90:3F:61:37:38:69:B2:7E:4E"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbchecker.lol/\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 30 Jan 2026 10:11:12 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSEeL%2Fv%2F2lxs1c2WhN9YMN0seHHRx0lY5XSf3mhyxL5%2FeJW%2BOpWyXJ0PCCHIVw%2F%2Fis5GDa2wacZYa2aSbMu%2FtckOAi3xIYkzcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c602f102b4bb4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":23,"dns":4,"connect":2,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29496131\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:12.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/boxen.amd.min.js?t=29496131\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 10:11:12 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=boxen.amd.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 10:11:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b861b209e723ddb50ba5b75a93f7da75\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-04T13:17:02.933183Z","times_seen":2551,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":46,"dns":36,"connect":1,"send":0,"wait":240,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:13.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/\r\ncontent-type: application/json\r\nContent-Length: 2207\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2207,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 10:11:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"e1-4rDJpUwsR6Iwwu3Brw5qMn/uvy8\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769767933341\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/30/2026 10:11:13\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 89fbba44c7a07fc6d91cfc46fb50bc53\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"48f799b76261f25f1ed729a11f778572","sha1":"e2b0c9a54c2c47a230c2edc1af0e6a327feebf2f","sha256":"360a8d8f9d4a689aadc4a2a0c54b7f2321c5760f19a10313a1adf747ecb45abb","sha512":"5e52ffbca9d00a7e92dd57bc99825585fe5c6c38344b468ea99045ebb40893f90f8fcdc2f465001a55e8108ab044683982cf75d361ae6058ce3c08a9204248ce","ssdeep":"","tlshash":"68d097221828f6aa8409eccea011484cbaa20edc6620803304211e0cfe2b0a112c58e0","first_seen":"2026-01-30T10:11:34.952244Z","last_seen":"2026-01-30T10:11:34.952244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=3hfey8bikv4tqvu3hnlyewklwhtb7xvklteuyw7uqgxm","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /tokens/v2/search?query=3hfey8bikv4tqvu3hnlyewklwhtb7xvklteuyw7uqgxm HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/\r\nOrigin: https://birbchecker.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\nserver: cloudflare\r\ncf-ray: 9c602f0aca5d56a2-OSL\r\naccess-control-allow-origin: https://birbchecker.lol\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gSYUuxWp7oU3zwFLOQz7HbRBa9cWr9YyUF4HnPmZEedvR7tSujvTcA==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-06T07:12:57.568034Z","times_seen":289923,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":31,"dns":23,"connect":1,"send":0,"wait":83,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/click.php?event2=1","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:11.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /click.php?event2=1 HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWMR6azlzThOK3sfvyzKXKfHzpBnT9YXP%2F2oGzvLQ5NdiZMYcKuiq0WYh6rHWGL3RB5wq9XP1YyyAVI2cyHlknkREBEuQk1WzMbSNEhOww%3D%3D\"}]}\r\ncf-ray: 9c602f0b2ca7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:10.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 30 Jan 2026 10:11:10 GMT\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-06T06:17:35.156692Z","times_seen":29306,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":137,"dns":1,"connect":28,"send":0,"wait":46,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/landers/_airdrop/style.css","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:10.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /landers/_airdrop/style.css HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbchecker.lol/claim\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 30 Dec 2025 03:17:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 2688\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69534457-ad11\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDRDhbNe2aNqFkB4V8qAqubx73%2F%2BhkyzFPDUEmnT6yAT9xh84X1yMNPSTMJh6uqkGLpVmO8rVTI8N1WX8dWcGolwZ%2FbYlCw7734fZsMa%2Bw%3D%3D\"}]}\r\ncf-ray: 9c602f072becb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44305,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6441ed9401d9fc6b87caadc9a82a5a12","sha1":"257096a5c4270b3e89a4ce0e5e43f3e80195c494","sha256":"f10aa91801c62f2eac54158cf9e47971899d170c87051d00e1edff4e790c81fd","sha512":"e966b92872674b7ab772698dbfae2960749bed38a88d43438cb2ec6ea74e36a8797229cbdb5302743d4bc1e3c28a8863d7a9b5824c4f6fb68d48c018a9d5ea6a","ssdeep":"768:NxqNbIVNl/fmjLQk8zM7vTXVkbDBCunyVnGOFSSDDk1dWoab+S:vzM7vTXnYS/ks","tlshash":"4513115a6aa325097817e4682fbb1758336cd043850fcd793fcd729c8f8a1d969e278c","first_seen":"2025-12-31T18:39:38.407406Z","last_seen":"2026-02-01T17:18:58.554583Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbchecker.lol/click.php?event1=1\u0026load=1\u0026domain=birbchecker.lol\u0026sub=\u0026wallet=","fqdn":"birbchecker.lol","domain":"birbchecker.lol","tld":"lol"},"ip":{"addr":"172.67.181.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbchecker.lol/claim","date":"2026-01-30T10:11:10.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbchecker.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 08:11:49 GMT","end":"Thu, 30 Apr 2026 09:09:23 GMT"},"fingerprint":{"sha1":"FE:17:4B:75:0E:CA:91:04:47:F2:79:14:A1:E0:E7:08:B3:F6:B6:58","sha256":"27:DB:90:60:14:9B:78:10:A2:A1:18:D3:33:B2:7A:98:09:4B:AF:A6:79:55:20:81:6F:C7:E5:C3:83:4E:E9:03"}}},"request":{"raw":"GET /click.php?event1=1\u0026load=1\u0026domain=birbchecker.lol\u0026sub=\u0026wallet= HTTP/1.1\r\nHost: birbchecker.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbchecker.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=gxojci3y; uclickhash=gxojci3y-gxoj520-i4-ci-gm-j6-dv-cffb50\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 30 Jan 2026 10:11:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvMElrOkaSZsRsBZ0qfwsBe552XHhNI1uVKH7ySZ7QMK53NOd%2BTo8wNGzp7vj2oPBEKy%2F686fYF%2F4XgQ0kKjurCt87sKfFbKq1bOvxC7Vg%3D%3D\"}]}\r\ncf-ray: 9c602f08bc4ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T07:09:43.766629Z","times_seen":16169314,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}