{"report_id":"f3960520-63b7-4ac6-9f2a-b27ec1b2369d","version":6,"status":"done","tags":[],"date":"2026-01-29T16:31:25Z","url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"104.21.40.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"title":"Moonbirds Airdrop","dom":{"size":173438,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16899)","md5":"064c06eb64acc8410ec01edc88d231f7","sha1":"fe3dd66f51683e0ce23dff845aebe743bcda3369","sha256":"fe1504b67ed9c79f6e9676fc4bd484828b0558929fc66c827eabe18875affb28","sha512":"dc77abccf0b5f1657b0b1859ecb2cc1d488c7841d5f62c3f16080cdafeeaecda26a92b70ce76d6ffba447fad3878972d5111b4643720b8217563ffb29508543f","ssdeep":"3072:Syau3ESjN6qOtDZau3ESjN6qOtD3KwoHw:SyaaESj0ptDZaaESj0ptD0Q","tlshash":"0804c557165f2166540c3ef74bd62d0ee508f1a38a138bc8f0de1aecdbafa5d898215c","dom_hash":"domhashc1384c72a516c5513b6b2726c34c4ae9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"104.21.40.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-05T16:31:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"corsproxy.io","ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2026-01-25T22:51:24.521582Z","alert_count":0,"request_count":1,"received_data":765,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-01-25T21:41:49.555987Z","alert_count":0,"request_count":1,"received_data":692,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-22T11:51:07.746032Z","last_seen":"2026-01-27T13:04:05.607822Z","alert_count":6,"request_count":3,"received_data":659264,"sent_data":1589,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"birbmeme.lol","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-01-29T16:29:50.923132Z","last_seen":"2026-01-29T16:29:50.923132Z","alert_count":0,"request_count":11,"received_data":675633,"sent_data":5816,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"solana.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":0,"first_seen":"2025-10-03T14:04:26.693295Z","last_seen":"2026-01-28T22:17:03.403683Z","alert_count":0,"request_count":2,"received_data":1463,"sent_data":1007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.82","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-01-28T16:11:13.330802Z","alert_count":0,"request_count":1,"received_data":16870,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"230a091930a82c5ae47e29610ee98ceb","sha1":"6376b33e5123bf09a271789a272103f957c8f38d","sha256":"4dc501d66cd78903b81b1a53459d0432939728c537bbe9ffab55ab81521cb352","sha512":"aafc914b9309be3d1801bf9ee1226bcc35e15baf70f28543a9ad1e094b1ca82f90b6359eac253b2539cd4469c52c4faeeb8029af9c4c02e7ba0d0c8ebf9bb8f0","ssdeep":"","tlshash":"6a30000000000000000000000000000000000003000000003000000003000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T04:09:36.457374Z","times_seen":9907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f3dd66014231344968f5cf97e5ccd92","sha1":"25c15b682c445c74143b0d073ea584a6632c4f4b","sha256":"26ac24d62e38da2a60d0da6f508fe20f6ddb5c1ceb73ad3029ebbe85079e85aa","sha512":"4fc781195d4d97603c01c839651818c2d1527af9460f1a2915960c43db3f0f1978988320ee26bfb2f3cc3a166a844b3b553222ab121f54c4eb510cd97f74d721","ssdeep":"192:i1eK+AxQTYTCfB4QrfObUYNwzG37VqNVakoWuqxw+n:GXUSRaVhuiw+","tlshash":"f4f1a429b1d13035800b70672ad7ca2d753ea64b5b164c523b0d42b6cf25dac79ebfb4","size":7911,"data":"","first_seen":"2026-01-29T16:31:30.451806Z","last_seen":"2026-01-30T19:03:01.267773Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29495071\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/assets/e.js?6","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","size":13546,"data":"","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d1a2c4f480ffdfd81ec59b6066062582","sha1":"c7f481db7ebb4a9af0f88d357c014735310dc5b3","sha256":"b1aa496e9a1a68ff4e574df79718cb6032178d6d825c048bdbf136aa4efc0465","sha512":"fbc803bcfe9aa6d538d100c3f084d16d7be017365c879548f74da1750b5bd0a626d337da6f35313461bfef8293a67200c8ae666158c02df2fd59111c87e78113","ssdeep":"12288:WgW385m0nuyi1LAz0cMquy0aDwU7ofoedMWG9oof5B2Y:WSczuunK","tlshash":"2a94210295c293a14273d3aa4f13b05ddad899f902456d63fb90aec6b438934f4f2f76","size":435663,"data":"","first_seen":"2025-12-27T20:50:26.092645Z","last_seen":"2026-02-01T17:18:58.555423Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","size":442978,"data":"","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=3hfey8bikv4tqvu3hnlyewklwhtb7xvklteuyw7uqgxm","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /tokens/v2/search?query=3hfey8bikv4tqvu3hnlyewklwhtb7xvklteuyw7uqgxm HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\nserver: cloudflare\r\ncf-ray: 9c5a1e26982d56ca-OSL\r\naccess-control-allow-origin: https://birbmeme.lol\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d229ccc15dd984a81023d1b57fa0adbc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ofU07SzG1SK7uMWxrPHnH11OoI2VSixfH_RGOyoV2th4Eq4W4SnE5g==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-08T10:37:40.034217Z","times_seen":290874,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":20,"dns":14,"connect":1,"send":0,"wait":80,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:06.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"POST /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"db-uX2dcRwlkerhOvstSns1Gsm4bcY\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769704326748\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/29/2026 16:31:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 19d88470c741a7b3b938262f0d2d9e1f\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44767168ad60adf84e7dfa67e7f69bb7","sha1":"b97d9d711c2591eae13afb2d4a7b351ac9b86dc6","sha256":"638b5fb0a75297e6a612a3762e04ccc3c5e35411f78f94df4b9f5f66acde8425","sha512":"1256fcda84dbcb0f52704580002c461ff6df5716681b3c9280bb90ca2709ef53d41f6246d44c984c465a510820d97c0fc5828637c1f1bb83044b3e6ba11599fc","ssdeep":"","tlshash":"91d023274983e87d00573c1d5ec9d55f677d3932d156d154c754d530e7f14605454b83","first_seen":"2026-01-29T16:31:30.442344Z","last_seen":"2026-01-29T16:31:30.442344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/style.css","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /landers/_airdrop/style.css HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/claim\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 03:17:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgeCYuJwsOew5jdIZfENzjZ2zqgHfDlnggrveSExEIoWlcRnZkUuDvPKZ9pot1ml9OGnbfLkDtc2bxdMuRmw4fEhBej5iG2O0y1cuw%3D%3D\"}]}\r\netag: W/\"69534457-ad11\"\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e232ee6c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44305,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6441ed9401d9fc6b87caadc9a82a5a12","sha1":"257096a5c4270b3e89a4ce0e5e43f3e80195c494","sha256":"f10aa91801c62f2eac54158cf9e47971899d170c87051d00e1edff4e790c81fd","sha512":"e966b92872674b7ab772698dbfae2960749bed38a88d43438cb2ec6ea74e36a8797229cbdb5302743d4bc1e3c28a8863d7a9b5824c4f6fb68d48c018a9d5ea6a","ssdeep":"768:NxqNbIVNl/fmjLQk8zM7vTXVkbDBCunyVnGOFSSDDk1dWoab+S:vzM7vTXnYS/ks","tlshash":"4513115a6aa325097817e4682fbb1758336cd043850fcd793fcd729c8f8a1d969e278c","first_seen":"2025-12-31T18:39:38.407406Z","last_seen":"2026-02-01T17:18:58.554583Z","times_seen":15,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/%7Blogo%7D","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:05.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /landers/_airdrop/%7Blogo%7D HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/claim\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwP6%2Bf1R7D4YSsgzcr%2BH8TY4MPde5%2Bm5SnWUkZez%2FZuQV194%2F%2ByNtCgV%2Bu39GDwaAvriWrTNySgimNdAby8%2FXGiwrrw%2FrnTE1Q2RBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e289cd7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/@v1/cdn/js/boxen.amd.min.js?t=29495071\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:05.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"GET /@v1/cdn/js/boxen.amd.min.js?t=29495071\u0026u=-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:06 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=boxen.amd.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/29/2026 16:31:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9bf36529597741cadd59e4c2a7ca0d96\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-07T04:15:26.458958Z","times_seen":2555,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":50,"dns":41,"connect":1,"send":0,"wait":319,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com/jmpd/","fqdn":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","domain":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:06.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Jan 2026 15:05:58 GMT","end":"Wed, 08 Apr 2026 15:05:57 GMT"},"fingerprint":{"sha1":"4D:1D:3C:6D:9E:2D:29:38:F6:A3:C5:A2:A9:6E:00:65:21:FD:F7:14","sha256":"B2:0A:D0:D4:D9:66:A7:A6:38:55:71:26:B9:06:E7:A1:A5:4B:C4:7B:C4:E5:D6:9A:6B:FF:D1:0E:21:E9:BB:C1"}}},"request":{"raw":"OPTIONS /jmpd/ HTTP/1.1\r\nHost: aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbmeme.lol/\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 29 Jan 2026 16:31:06 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 01/29/2026 16:31:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0856c7d11091a41a45dcf394407ba7a1\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-29","alert":"Sinkholed","trigger":"aodefevrgdkhqltdnwgzbyjoywrlbntbhfwq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/click.php?event2=1","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /click.php?event2=1 HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQt35p2cmFq1zx1FPaKxahrizmZtaWAQnsoQsosL3qoadpoEYa%2FYbyrdMisuvjDr0ABeRvUBA131N%2FfzTzbfJpBeIUjY4DEUHSWxew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e27089ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/claim","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-29T16:31:03.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /claim HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: uclick=2tsy4kvr; expires=Fri, 30 Jan 2026 16:31:03 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=2tsy4kvr-2tsy4kvr-fe-fe-i4-17-vr-61ae3e; expires=Fri, 30 Jan 2026 16:31:03 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclick=2tsy4kvr; expires=Fri, 30 Jan 2026 16:31:03 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b; expires=Fri, 30 Jan 2026 16:31:03 GMT; Max-Age=86400; path=/; secure; SameSite=none\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3NFR3LHYrjWGzfFWoDhjBD2dfB6NKKGgVTHSJyXNUPz7ipMIg5MAH4ATm1S0QE0YGtRjgZY1IqpY4PWh8s9xrQYXpnoFENmT5s%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e20fd5d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167514,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16901)","md5":"eda2f7c607acf79afcc53455a1a217ef","sha1":"9605a120f61447c9272a4704510bdfcd38cd8d51","sha256":"cc849f301965c75b600a6bf9032f7b35c3d5465a040f560fa2c8b997ac8d7bfe","sha512":"e2c4ae91c720594c604674200d561a2c1f5a978c4b121e75e3bdc484f36b34a6e45595f6a2722e80fcca911acfb7986fed3a15c30b97ecee0b6a9c3f9ff3fe79","ssdeep":"3072:A6au3EHjI6sftmcau3EHjI6sftmXZwQCVr:A6aaEHjTCtmcaaEHjTCtmax","tlshash":"6ff3d657165f2666180c3eb74bc26d0ed548f1e28a138bc8f0de19fc9bdfa5d898216c","first_seen":"2026-01-29T16:31:30.44523Z","last_seen":"2026-01-29T16:31:30.44523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":182,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 29 Jan 2026 16:31:04 GMT\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-08T10:27:00.652373Z","times_seen":29580,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":100,"dns":1,"connect":14,"send":0,"wait":37,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/click.php?event6=1","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /click.php?event6=1 HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNaI649HzdtlN%2FQ3yRbBVAMDJfOo5MVL77JaSNwxM%2BxB92dkFmgTTpB39IeIWx2qRpw9V4rdSr8eonHWUu1UbJnJ%2FtnxusyJUKtNLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e265f11c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbmeme.lol/\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 29 Jan 2026 16:31:05 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9c5a1e2c5e101525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":22,"dns":6,"connect":1,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/assets/e.js?6","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /landers/_airdrop/assets/e.js?6 HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/claim\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Jan 2026 08:01:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/e.js\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bXDd7Dwi04H3miVkYc33QtKDN2IXOjLIKzHluhp4h%2FGqBoYbnpTzUF2CSp4HX9%2BmKSJZplC6LLYf7vdoqgmy2W0we9HCZLIon3a8dw%3D%3D\"}]}\r\netag: W/\"6979c243-34ea\"\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e232eedc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13546), with no line terminators","md5":"f4e014c8dce79aa242d655fc1ea4c0ff","sha1":"d8bb4770c67d0de9a76e5f9418808fc672a05401","sha256":"5e7ec9b55712cfcfc72896578b4c898f6905e2b8710d87d033edb2756f0613d5","sha512":"49c3bbcf91e033939bfa7141e57837dd1d1c6504f352314fa006a68d6d4c9e695f24d1ab0565da09a247302ba62fcb18842e080d1d6e603b6166f565d8f0a418","ssdeep":"384:PgaGybMmIVyUtMUxaH0CN8bMmhcU5QVnh1ZDPAdkjA+iBesCbtgNfjsE95Qi+2Y+:jYaUCN8bMmhc+QVnh1ZDPAdkjniBesCI","tlshash":"105204c62fc5e851175b4a7bb21b70e5e17a3dc922488d17c414b860f4d8b0bead39f6","first_seen":"2026-01-29T16:31:30.447077Z","last_seen":"2026-02-11T03:30:17.438243Z","times_seen":11,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29495071%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fboxen.amd.min.js%3Ft%3D29495071%26u%3D-4FEMssTs5owquo3GDY5NGE3NWVmZGZhMzhiNjVlMWJkY2ZlNGfIqeocvHK1NT1tCw HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/claim\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oX50N%2Biq7YmI7TmEvYIkUWIJ4Q%2BhSNLrxV9g5Z4txG9LMJkrRgeQjAitH64lSzA6ALD3znErPf2SkqhiHyz7ZPBlK3%2BLgSwda88MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e27491fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/click.php?event8=1","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /click.php?event8=1 HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bIapmQr%2BW0HLNCwrXZ0LeDSnjVOEBMe8gl2xU4v5aKaKKMA0BtPRZKTCeGVm50iuUAEjH3Z0lxU4Voi9qEvTfeCEDyxlVHaYOYwjzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e274929c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/YqhV6q8Q/New-Project.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.82","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 06:59:00 GMT","end":"Sun, 15 Mar 2026 06:58:59 GMT"},"fingerprint":{"sha1":"C3:A1:A1:CF:B5:C2:F8:46:61:8F:2F:50:69:51:66:5C:B7:40:74:B0","sha256":"0D:77:24:2B:B5:24:E5:20:5F:99:9A:4F:51:93:65:79:E2:FF:1E:BA:9E:BF:E4:28:BA:34:F3:C4:83:0C:CF:21"}}},"request":{"raw":"GET /YqhV6q8Q/New-Project.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 29 Jan 2026 16:31:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 16507\r\nlast-modified: Wed, 28 Jan 2026 09:39:57 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit colormap, non-interlaced","md5":"616354eb51b1c657d0f5054fde15e401","sha1":"2f263258b227d05d39188d250758dd7a32fc918d","sha256":"f2ff53763ce236e500c4837702e99ad688a55ed7b14a5e4723cb656b873d93c1","sha512":"6842f6c39bcc5d75f6d71bd0a35511deec4b560435ff8cfb73be2f6de2ce7062c24d98677475feb309a77769c52b31a1aa736a8638af582b4a2c24a6093435f7","ssdeep":"384:jkIpBBBBBBBhiAD7zjaHI/YbYY6vtCqW74IOJVmYnIAjxBw4ViBBBBBBBM:4IpBBBBBBBdao/FtCqW8IEVhnIAjxBws","tlshash":"d372c0f34be1d9640149354cbf31dd202f24da761823b9727aa0ea6daff92709b22153","first_seen":"2026-01-29T16:31:30.4482Z","last_seen":"2026-01-30T19:03:01.263601Z","times_seen":5,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":200,"dns":122,"connect":25,"send":0,"wait":26,"receive":283,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"104.26.6.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:05.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 Jan 2026 03:43:41 GMT","end":"Tue, 28 Apr 2026 03:43:40 GMT"},"fingerprint":{"sha1":"6C:0D:40:92:59:E5:2E:A0:CA:4A:E5:0F:8E:6E:29:51:9D:B8:99:E4","sha256":"92:26:45:38:46:B3:CC:84:2B:1F:69:1C:B6:DF:39:25:92:BD:77:47:1B:3A:E4:90:3F:61:37:38:69:B2:7E:4E"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://birbmeme.lol/\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 29 Jan 2026 16:31:05 GMT\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDfMlK9yF6u%2FoKZCnCWVUyFSTR4xWBDtBLreej82Nos%2BsSFj6dBxLsryW8j8HsBVqhx%2Ff8GL7ukwhkgIzmrC92wd87TXJIIobg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c5a1e2bfb1c56c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":27,"dns":4,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"solana.publicnode.com/","fqdn":"solana.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:05.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 17:51:58 GMT","end":"Fri, 13 Mar 2026 18:51:54 GMT"},"fingerprint":{"sha1":"5D:A4:4D:64:4A:0B:D5:DF:A9:2A:74:FF:D5:CE:EE:61:6B:BB:D1:AE","sha256":"FC:1D:8B:EC:25:7A:56:52:D8:D2:33:2D:B8:F2:93:D2:1D:7C:2D:4F:FB:EF:EF:31:6A:44:DC:EC:F3:3F:8B:7D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: solana.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://birbmeme.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"getAccountInfo\",\"params\":[\"8ycauMwVE61B4uWz87B2k2G8mMK7iFjRoBHooaVAcP4k\",{\"encoding\":\"base64\"}]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:05 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e2d596f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":327,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23b24936223fa15ebcc6b59118392260","sha1":"2464029892d52c6e630c4bf4f02fbae52b17f1d4","sha256":"cde051378480a1f8257b53649cb9960d1b87da9d41d0e759d08b9c4697123ec0","sha512":"2bc3b823681adf5d9a4ec944d7b33d605eae89b8b28953bca4ef00e4592078d9b375abe4d3f895f8848b7cabe0948ded2e903ae20f84278c60737a88b80860b7","ssdeep":"","tlshash":"13e07d813d0d0bbe9ed44e17da1562a9d7c10d585b408a4713db0d1571c969da20b5bb","first_seen":"2026-01-29T16:31:30.449287Z","last_seen":"2026-01-29T16:31:30.449287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/landers/_airdrop/assets/elegant-spinner.min.js","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /landers/_airdrop/assets/elegant-spinner.min.js HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birbmeme.lol/claim\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Dec 2025 05:45:56 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-debug-path: /var/www/binom/landers/assets/elegant-spinner.min.js\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8dwLSGN8gaClHTqsN5ru6Tt0SmB8vqSkAZhX7iY7YPZGOnDcOxLeaCUVMucvtm%2BAg1GomCdH0OKjuYab2SnqH2NOjQmKz3SDlXuvA%3D%3D\"}]}\r\netag: W/\"694ccf94-6c262\"\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e232ef2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"332a20e21ddf64c1580acd8bddbd0f9e","sha1":"bbec58cd9f7f4e08cec0bf6e3cf7a2c321a3e10c","sha256":"08ef9a306d9cb6be9a37d2925525dc810e09397c2b78e240c39615848554106b","sha512":"6bccb38b1692e6c363bd92f57a0d0edf3621c39c0dcdccf65f418277099412589850f2675521da5359a6e823b79678467ca1a38e439ce49785bc45bb6b0daf0f","ssdeep":"12288:kPUKDF8B4wn2UiHLgTo24yuyq4DKqViNKedMMK/oIfNBQq:ku29WuNy","tlshash":"8e940e0395c193914273d3aa4f23b05ddad899f906456d63eb90aecab438934f4f2f72","first_seen":"2025-12-27T20:50:26.017526Z","last_seen":"2026-02-01T17:18:58.549021Z","times_seen":19,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/click.php?event1=1\u0026load=1\u0026domain=birbmeme.lol\u0026sub=\u0026wallet=","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /click.php?event1=1\u0026load=1\u0026domain=birbmeme.lol\u0026sub=\u0026wallet= HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhgcCbFX4bPHES%2B3OmdimQemzTO1aXpKTX7GIil%2FsWaBKwLCXzP6K1IBDlCzEE75BINSRIDWurp%2BCMmsLFfbGNWZwxNSpbxVyXa12w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e246a0ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"birbmeme.lol/secureproxy?e=ping_proxy","fqdn":"birbmeme.lol","domain":"birbmeme.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://birbmeme.lol/claim","date":"2026-01-29T16:31:04.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birbmeme.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:05:34 GMT","end":"Wed, 29 Apr 2026 02:03:11 GMT"},"fingerprint":{"sha1":"EC:FA:34:BD:6A:A1:D7:F9:CE:31:32:C8:A7:21:D8:EB:B8:EC:67:79","sha256":"EC:39:D6:40:A8:D3:8B:3F:70:DB:A8:2A:F7:9B:9D:9D:3C:4E:A6:19:00:36:2D:D1:F5:83:97:FB:E1:CA:6E:4F"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: birbmeme.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://birbmeme.lol/claim\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: uclick=2tsy4kvr; uclickhash=2tsy4kvr-2tsy4kwj-i4-ci-gm-j6-dv-a5566b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 29 Jan 2026 16:31:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fdjShjv4sO4bOWCpgXHaA0%2B8p82bUFeUJ1ntwn4jCKuq6Gxrw6Rz0k3N4gLFPZjsyvJAOop7YeESjfh1q0UgwonKIpnN5KV1PKeJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c5a1e263ea3c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T10:34:26.034599Z","times_seen":16237034,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
