{"report_id":"f4753719-730d-4a1a-90af-92185f35e857","version":6,"status":"done","tags":[],"date":"2026-02-13T21:36:16Z","url":{"schema":"https","addr":"birb-staked.xyz/","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"172.67.204.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"birb-staked.xyz/","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"title":"Birb Website","dom":{"size":17677,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6561)","md5":"fcf9e0f6d939173ea709d0f3c1b59368","sha1":"cd555c20d37036f34ca3664c2c1cc41bd4df0efb","sha256":"b84392f490599d816d518c736ee72cf10d193043a4a5a3d206bf3f857e20820c","sha512":"21236abda3660784ab74d5d8c1182cf869617e4bc8cbccbc28736423377510fad7742accd7746733a4af41a4f78d2d644a0c5e0b8b9b7c6485e2c2841119001a","ssdeep":"384:a3rMXYDfFCsXFCNWqFC7FCNFCCFCNZrbYNrbRWgrbtrbjrbkrbz+YNVMjJH5egJa:3XlswUdc21TY9IGdjyz+YNVMjJH5egJa","tlshash":"d682432561126b3b330f06b866a2abcda691f31ac70bc90ef3fd41674fcddc48656a50","dom_hash":"domhashd260c0f17402dceb8b589177f2adb8d7","first_seen":"2026-02-13T03:01:11.702852Z","last_seen":"2026-02-13T21:36:18.902724Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"birb-staked.xyz/","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"172.67.204.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T21:36:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"birb-staked.xyz","ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-29","domain_rank":0,"first_seen":"2026-02-13T03:01:06.345793Z","last_seen":"2026-02-13T03:01:06.345793Z","alert_count":30,"request_count":15,"received_data":1899243,"sent_data":7051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"birb-staked.xyz/","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1172ad137bc2b1d324ec546dd6d25193","sha1":"cbbfcf42596ea921244906a5bae80de5bee67a0e","sha256":"f59013261012dd24a62d04d3a52b45822a2e1dbf4af40a8299bc3653c26a04bf","sha512":"90e21579faa69dcff9b91a9152d231b77ad4acad8691a581173c96bc03649f132f983e4701e12a14bab952676676f8fd73f58a7f104f8ae2461b89416a133eca","ssdeep":"","tlshash":"5a11dcb251b121724f8b231a36b7f34c3730000762421a18fb2d478c5f94e7515a3ed6","size":980,"data":"","first_seen":"2026-02-13T03:01:11.756074Z","last_seen":"2026-02-13T21:36:18.913776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"birb-staked.xyz/","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T21:35:54.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A44DO085J23SuYI6zM1Dkirs7c7sfn86BS%2Bh1MGM6F8owwfcvRb9Sdl2pNEZ9HYW1oYawat4zmeVhV9Qndong8xUsutUBF6oaYgvxUowtQ%3D%3D\"}]}\r\nage: 195017\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd7754ddc199cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6561)","md5":"e73f7445e810e9fc2454cf4aaed0fe24","sha1":"fde707f4f0ee0cc1d1c8283fab85a52855785327","sha256":"7ec9d6592df9e13d9b109d944cff27b5161ea86d9a45ea5bc1ce8ead01f61530","sha512":"9dd80246055363733a67b41ad9be3831e8a761a58af46a9674105c2d1e38e631baabae5203635a158b732f9cdd1c15787c76b11e43fc86110f2f6830718d56b6","ssdeep":"384:06rFXYDfFCsXFCNWqFC7FCNFCCFCNZrbYNrbRWgrbtrbjrbkrbz+YNVMjJH5egJa:DXlswUdc21TY9IGdjyz+YNVMjJH5egJa","tlshash":"8182532561126b3b330f06b866a2abcda691f31ac70bc90ef3fd41674fcddc48656a50","first_seen":"2026-02-13T03:01:11.728909Z","last_seen":"2026-02-13T21:36:18.903811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":84,"dns":56,"connect":8,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/c0fda7165764d8ffa74964ca15b75017c2cfb730.svg","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /c0fda7165764d8ffa74964ca15b75017c2cfb730.svg HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"697b74ab-518\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQyBiyE3Up8mZBe9o%2B1l2Ouoy8ni4OKQRRqXg%2FCZAGq%2FQ512dQSWNOzC052hLZC3Octpn9vfUc1hScRjTgJgUHb8HTUF75h6wa1qx8qeAA%3D%3D\"}]}\r\ncf-ray: 9cd7754f0c0e86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"360c61bb61e9e90ba43122f08f5a56f2","sha1":"c0fda7165764d8ffa74964ca15b75017c2cfb730","sha256":"607ab3cd86e61d92e995666b9222a3a99badc33c1c0cabeb2721e17030e304a7","sha512":"7b16e4e57dc699918573f2e342f64fc2b7b87cca9dee8e9289750c18fa68bb6b3fbe01d0cd43fbc0d054c31aa0a58a2f3015064533a56f5bb95f9fe9088a57ad","ssdeep":"","tlshash":"47210b79b3e9d0a8340fe3b0553058b6b99b35ba3e16c55867ae8968fa0185cc688c1c","first_seen":"2026-01-27T10:49:22.139084Z","last_seen":"2026-02-21T20:38:58.576791Z","times_seen":7,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/bird-JGSjaMfa.gif","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /bird-JGSjaMfa.gif HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 837652\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-cc814\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9uZK%2FhwwE36020kHFqr1CB2GJa65SMJr0AlD62FlSs%2FR6wWXNJI76lDkxVei47CH%2BQ6NVEpz069yBVwoHtE%2FY6WbP84l8Mk0IdZLY3Zlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7754f1c1286c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":837652,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 864 x 864","md5":"7eb7cef536f1951f115b6d8346638408","sha1":"0e14654e9e1d34c89b17e59523dfee385ae7d766","sha256":"d05180095883f91dc953932b14738369283f297d5fbb64fab990c7378b0f42f2","sha512":"38869cb2e9a91305fc97af3539f91b357654357fea08b3b69e0ca699da728d6059ee3843c575e285976e30d662b7e8c2f8aa2626c42a71267f720dc5d21cb357","ssdeep":"24576:tg9NbvPIX8LVwu7T3HBu+ona+bvPIX8LVwu7T3HBu+onXy:tg/QXmwu7jmQXmwu7jx","tlshash":"bf0523e4c61e4ea06f7063b45f47e710136b5bb7d49c7366deac590e4129238ceaa3b0","first_seen":"2026-01-27T10:49:22.128511Z","last_seen":"2026-03-28T08:16:40.896736Z","times_seen":10,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":298,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/tiled-DUQGwgdV.png","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:55.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /tiled-DUQGwgdV.png HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 106410\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-19faa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MI16hcJiWVPpt5xGRkJYlV%2FEqkZvr%2FBqI5aCkUuGFdPYJ9ChaaIj54RJ8FLyovl9zWMmMIv6%2FYaaSDaElDfdupB%2BMdl6l%2B7nZD%2FEzShRDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd77550dc4486c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 952, 8-bit/color RGBA, non-interlaced","md5":"d044840830d7122c99c27bfb58182294","sha1":"1b7823f255df859038ad301d4c206d5ffe2d6f8e","sha256":"2cf11eceb17fc01666993b997d5f6fcf9033fd060a95b8cda3c94707ecca5911","sha512":"bd6dbe06efff9c9edb2c9ed064081e220b10b58ca858b367d3ace6862d0da6d4aab67afee6f96fec4fdcab3e7b5083d60075c305fc4ef3651e29d0ded3460522","ssdeep":"1536:h/G7jUOwIfjtX92x1wg0F/Lvj3bf1Hf6Geaz0AFliniz4EY/L7+59DhxVwHT2b1:hG74Owyjtsq9jLf16G3h/27AF7KHTq1","tlshash":"cca3025d852b9056fac40631cf9b90c21d20b7224da9ad2aadf9b8340ba1dd717271ef","first_seen":"2025-11-10T03:43:18.27928Z","last_seen":"2026-03-28T08:16:40.89791Z","times_seen":11,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/fonnts.com-Oscine_Light-DB9ymnG5.otf","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:55.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /fonnts.com-Oscine_Light-DB9ymnG5.otf HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/index-UIcSiLud.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 204648\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-31f68\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9pMTR5%2FnvoV7FGoCJKQyQwYOUB%2FY3ggBFyooG31XZ6WLw%2Bp5aGRA3Tt4IvmP2%2FPH1VXnVSb45KoFdqtI%2FLPo1o4YDlk9WfIUEj6FvfWaCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd77550ec4786c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204648,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 19 tables, 1st \"DSIG\", 30 names, Macintosh, Copyright 2018 Dalton Maag Ltd. Modification of this file requires prior written permission from","md5":"21d00eb1c895dba438b058c34490a857","sha1":"8e82d29a2511f6ff584e6662152fc42e8aa3e4b1","sha256":"2d608649470a7a3c503dffc82942e0539d7845e046bbbab190d2517e210ae5df","sha512":"230f503eebae1c72325d7ffe1a9a48a7439dc25db25267fe41c85c0008b27a6652481f61e656f8ab0943abe06b0ed8a999ff91842cb1d69e52a4f165a4641a88","ssdeep":"3072:LlrUC5IqTIBx5Mr8FD1UaZMK/qLeRSs9X4EQo9Keu:LNp3IB3lm4bHS8XB9w","tlshash":"0714290677066a95c706b93fd9d1c3327ff47c532b7ea20bf1479a29b8ab0409c97582","first_seen":"2026-01-27T10:49:22.143091Z","last_seen":"2026-02-13T21:36:18.906501Z","times_seen":8,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/birb-logo-DV5lYuCV.svg","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /birb-logo-DV5lYuCV.svg HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"697b74ab-186d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRucteRms4gslDG%2BFlgaR%2FIU2kym1Oj3TWYCIstJ8gERzDnV9ej1AZyBvZk%2FAwRgN%2FIdl%2BIS3JIFToqOWg4WhrVHiY0A3yS%2Fu2EeS%2FO2Vg%3D%3D\"}]}\r\ncf-ray: 9cd7754f0c0d86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8d7c1929a44998ccd7e1a4b9e079d16","sha1":"c835828fc0ac590b9b590ab8d2b46649ecff71ad","sha256":"0f19c957bcf992aee58519f73abaaa913bb728623240c4ccafff5b91a6351b91","sha512":"0512f4e5c224c45b7faf9e9c78e7218ce8a3974f5350412cf992876404479901b8bbf4f0784b29ad34c6095228368dd2c001fd4521d06bb21fdf5b0c16ec1e4d","ssdeep":"192:aCG+zJguJ/o2aaqGpzHH3p12O1zjfVml0dzx:aC86tzZJXp12OpjCY1","tlshash":"17d14fecbf911cc58a498bd18d1252b03b4b557f6f864720c1a0e7b0b81acbdd9d1eda","first_seen":"2025-11-10T03:43:18.314526Z","last_seen":"2026-03-28T08:16:40.895122Z","times_seen":12,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/df34a3bb803648371fc68adf55dbac7c36494c17.svg","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /df34a3bb803648371fc68adf55dbac7c36494c17.svg HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"697b74ab-688\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FxkAM0v48uI3tevccMGmkNB3gmuodKbTQR1N2Fs7Lhqfhtil78HwnVHlfZ%2B9nWAGx0euhsV%2FTX9u9AUte%2Fw%2FUWXIM1G%2BNSpQNEjHHkGXg%3D%3D\"}]}\r\ncf-ray: 9cd7754f1c1186c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1672,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7cb50e112b247c5e1251178cbccf2cf6","sha1":"df34a3bb803648371fc68adf55dbac7c36494c17","sha256":"d69f8b378b1a86353bc580f01b42a11eb41ae8ac2a6e8f0e086e59fd589d43ba","sha512":"b1f6b7d721cfb4aec00f2a52ec6236513c4060fd1893db94474cd417eb0ddead95f8eb08640780fdc04ff6472b2b97c7589d273d6eb63d44fbc16c1198bcbace","ssdeep":"","tlshash":"4c31bed96bc494d5a047dbb48d16a9b1bee720fcbb2aca9443e0abd0cf5106d45c8ce0","first_seen":"2026-01-27T10:49:22.14829Z","last_seen":"2026-02-21T20:38:58.5737Z","times_seen":7,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/ears-_g2N-GFb.png","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /ears-_g2N-GFb.png HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 23286\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-5af6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyDRtQqSUnWvdmenOlY%2Fle7VLq8qA3FP%2FfJd%2F9DZ3WAhz9%2FTf5v64TLRFY6ddiD%2Bsp48Ik0kHOfif%2BZ%2FORIMJlagCxzUbYfEfdbMggExCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7754f1c1386c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1861 x 642, 8-bit/color RGBA, non-interlaced","md5":"782f522392fb5a1266d2347ba72c6689","sha1":"ac5bf6e7123ef3a33e69f54f9ca9fd43ebc15954","sha256":"d306f99845fd70d744a9cbb90155f36ec059f575386d609c3860ce6b8012569c","sha512":"e3ec3a3a5b88247dbd682bdf2120c1d2da8cdd526d98e701588a9a56273db52fa71caa17006385df646e55f4ddfcd2020388eb4b176937aac294ccd33a1b027e","ssdeep":"384:uOKx3W0kOb8jHjKOQeUGASXz4Gtjl1mR2yigQczupUAIvdxIatM:uB5PG2OQeioTpSR2yBpAUAI15tM","tlshash":"afa2bfceddb74ec0c24d47708f5d5781b2ba59cd07548f6ea5b88632bcc86961f2aa08","first_seen":"2025-11-10T03:43:18.307648Z","last_seen":"2026-03-28T08:16:40.901075Z","times_seen":12,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/fonnts.com-Oscine_XBold-B4aiP77G.otf","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /fonnts.com-Oscine_XBold-B4aiP77G.otf HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/index-UIcSiLud.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 213760\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-34300\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgXxLM9R6l5s7RrZU1rl7CHhNVmhQnbW01dQ2rXEDSeHui8bk7ZpAOx9yRE4iVmwOseUtpSXjByER5sMTODZyVATsgUmVD%2F65bSEK4qDkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd77550ac3f86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213760,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 19 tables, 1st \"DSIG\", 31 names, Macintosh, Copyright 2018 Dalton Maag Ltd. Modification of this file requires prior written permission from","md5":"95413240643a2b98e076bf5579e80d3f","sha1":"f05f45bdeb8953e5448f7ce1d937d162a32c312d","sha256":"dc69393453f3fb531ddc682891c25225bdc442cc45f041f8e30d731c308b41fe","sha512":"088ee1fe4eb1342b711598b7acaaab30b6c4d15378cc2707574151592fc13ce63fe22e51ee76bcf6ac9c1df7b64e40c571d6775e45a32f90e7b3b9369e03101b","ssdeep":"3072:2dwEcjMyXOQEvbOms93okL7LiHnUHnQYnY1wiVof4DRK/oJOu:2dwryiokSUHnQY6VVNKcJ","tlshash":"28242a067746a695c346aa7f85e2d2322bf43c032b7ea207f5575b3ef86b0409d97242","first_seen":"2026-01-27T10:49:22.140715Z","last_seen":"2026-02-13T21:36:18.908692Z","times_seen":8,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/367d80a1f2f2432a08113aa66622998fd09537a1.svg","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /367d80a1f2f2432a08113aa66622998fd09537a1.svg HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"697b74ab-12f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmAh2EEMIiS8OHnuXmu3CYb32Gyif9L3G2iDf94kDv78aoxIKdbKf%2BSjosth17T5c1B%2BX%2Bp2KNLWuEnQW1xdx1FbELAtE61tbTPQa2qTqg%3D%3D\"}]}\r\ncf-ray: 9cd7754f1c1086c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"390674fdc3893d3f8d89d3b4b14f77d4","sha1":"367d80a1f2f2432a08113aa66622998fd09537a1","sha256":"7c134774a08e414ef52c4ee452b889c88c0a0cfd5127d3b1f371a018110540c5","sha512":"25b3f27964d6db2df080abe7d49b93acc63efa08c0aaad8523ca726f3ce4cd301ce683aded01747535edc40383b33193f9113ae8692ccb4ff3b75c51e33ca6d3","ssdeep":"","tlshash":"d7e07dac47999d4c0506c7f0503ce6327f7630e14394e1e4e3c32320b94813f1950cb8","first_seen":"2026-01-27T10:49:22.146709Z","last_seen":"2026-02-21T20:38:58.571354Z","times_seen":7,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/dash.production.min.js","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /dash.production.min.js HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHpLVKHYkDcCs08Cfo%2FVEmwP9h7MRXPOw1vZ1BIpQGOR%2BXcVhrbCvxtenWOO0VRZAx24a5GmzqQ8WzcyRwiRu23nLP2ECEGdzCP1OCxIAw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9cd7754f0c0b86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-17T17:43:01.324879Z","times_seen":17940036,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/index-UIcSiLud.css","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /index-UIcSiLud.css HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:54 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: W/\"697b74ab-be42\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMzzhbMoj7ocbdngUDczR2AwdtxmP3e3MqwCVigNNpI1VzopmAppkQ8vnw8a4MoUJBH7YsCJmWQ3FGvDKD9oW52%2B%2BAnfhCJhYvb3mtOcCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd7754f0c0c86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (48705)","md5":"647a04842be8dc4d920ac085170497c8","sha1":"07b82741c703bb1bb78fcaaa6d4985153cfdcd91","sha256":"e2646c5f1f89335fcd68ba81e39f587722798355a08246f0242ef6f1ce346afe","sha512":"a84709cc221daf235a57dfd3e37cbdef9330ab37aa186cf0f57510f2b4ab1044a65b9ddc42799064ef990791c73e702fada3ee75a868e19e9224d567ad3afd7e","ssdeep":"768:8IS8zCahx3igBqjRO+XN1dJLh9C9ZnOrdFGJtrSb59qVZx1GrdF2JlbiLRdtlVtm:nS8zCah78O+XDdJLh9C9ZnOrdFGJtrSe","tlshash":"5f23cc997a0cd114be430b6362df3e0865357648d63009cafe2a35c61cc2de67a77f69","first_seen":"2026-01-27T10:49:22.144957Z","last_seen":"2026-02-13T21:36:18.911577Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/fonnts.com-Oscine_Bold-fIFj1orw.otf","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /fonnts.com-Oscine_Bold-fIFj1orw.otf HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/index-UIcSiLud.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 211984\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-33c10\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0%2BYKoBCHgOg4BKBjLfaxipXTpL6XFJcUyvzPQlAjvaqZMgHLTw5GDf%2Bfs45Wvq2Mfo9hC7pyLy%2FsQ4Ag2pDAHPvmKwQk8c0oWP%2BxGZhJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd77550ac3b86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211984,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 19 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright 2018 Dalton Maag Ltd. Modification of this file requires prior written permission from","md5":"f68973855dae44d499b719937ecd1724","sha1":"fcbb6e3774e0ddc688bff5e7ff6e6924bd252ad7","sha256":"50c31052ed2119c7f8dbb4b9711037dac4621a1b1f9910c25d1f8bf86b17b142","sha512":"457187fc61fec1ec67f15deb199190e42a7c73fac6fc08f5008090c12189c25c6415e4124a5ee8145da2dc4de6c39e151886c999962feaeca2d65df23ec5b40e","ssdeep":"3072:ofmt61MYky4OtkskMVyce1LB2Ly33xKmXWz8u:7cvHtRqB1L4LTFzv","tlshash":"4c243b1b7756e795c142ab7f85a1e2312bf03c032b7ea20ff547ea69f8970848d63581","first_seen":"2026-01-27T10:49:22.133254Z","last_seen":"2026-02-13T21:36:18.912359Z","times_seen":8,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":253,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/fonnts.com-Oscine_Regular-BGnXrCdx.otf","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:54.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /fonnts.com-Oscine_Regular-BGnXrCdx.otf HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/index-UIcSiLud.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 210180\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-33504\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geCJyk%2FvTQ57vAQ96qh%2FtKPzM0Cueqwom1YwwLw1pWfNfGxaiztQUySPBMsyQZyNVJexdWbkZ7AVxxII4q831iXh0h77JloyeEFLAiy1OQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd77550ac3c86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210180,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 19 tables, 1st \"DSIG\", 26 names, Macintosh, Copyright 2018 Dalton Maag Ltd. Modification of this file requires prior written permission from","md5":"1393231958731116d20ce676870a6522","sha1":"4ce74cf338c2812c8d8192fa04af9c447e0a129a","sha256":"195226ebb6136f0f56dafb8523275f552e0ee5d73b677852256faee3a386a922","sha512":"6acbf0485cd98d6152d319c9da300f3bfd03a0cc2f843b0d3d1113b98354c655cb60086241d5d90af2463b33ac0a80e46738f398dabc6596e9e862db6b59ef1e","ssdeep":"3072:mEP7ttWKIZGF+1D1HsY7npiO0IYjjZ2EuwIbZkHvT+wbu:mETWdfTMunx0IDmvawy","tlshash":"e0245b07b74aaa85c142ae3b5ae1d3316bf53c136b7aa20bf4479726f8274c4dc13791","first_seen":"2026-01-27T10:49:22.123295Z","last_seen":"2026-02-13T21:36:18.912835Z","times_seen":8,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"birb-staked.xyz/favicon-zQGsYglM.png","fqdn":"birb-staked.xyz","domain":"birb-staked.xyz","tld":"xyz"},"ip":{"addr":"104.21.69.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://birb-staked.xyz/","date":"2026-02-13T21:35:55.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"birb-staked.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 14:18:39 GMT","end":"Wed, 29 Apr 2026 15:17:03 GMT"},"fingerprint":{"sha1":"53:8E:5F:F8:A6:04:3F:10:0E:F5:C4:6C:95:E1:6D:9B:0C:95:45:5F","sha256":"D0:26:47:57:99:21:09:68:AB:80:F4:21:01:AB:02:C5:36:C4:26:45:E4:B4:5C:1A:DB:70:AA:F9:EA:F0:74:3B"}}},"request":{"raw":"GET /favicon-zQGsYglM.png HTTP/1.1\r\nHost: birb-staked.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://birb-staked.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 1842\r\ncast-mode: default\r\nlast-modified: Thu, 29 Jan 2026 14:54:35 GMT\r\netag: \"697b74ab-732\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BJY%2FzCB%2B41jkFAl9jjCSkHha6NdQ0Rs4KCE5HUiAWAbbcwCgc63vPT4BPAJRK0vu9JLkV%2BGswEsMpzOk%2FVyBi0F%2BnbTIzAF%2B4oaxsHU5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd77553ec9e86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 29, 8-bit colormap, non-interlaced","md5":"fb2372d7743fbfe770f569bb2f6416dc","sha1":"cb5fdeab16c460b9bf5a1a3a2872ffeb9a682aaf","sha256":"bc0d7d1694f476ef9bb686adf7375e953fb57f82e973138c6809fefe8d916937","sha512":"6f6e227bae54e9d5b540af0952e9050faa3d2d2da37bfeafa22f7f3348bbce4adb6951189948a726cea695c30c97bfda513e2848f2f1af771436cf5e7cb81748","ssdeep":"","tlshash":"4231457d5073b3d6c55a523f83117984d9208e8c36e78b299c839be85c085515afbfd2","first_seen":"2026-01-27T10:49:22.126003Z","last_seen":"2026-03-28T08:16:40.918776Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"birb-staked.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}