If the userid is indeed hardcoded in the payload, rotating your attestation IDs won't help because the server is likely tracking that specific ID Have you tried implementing a delay or exponential backoff in your script to stay under that 30-request-per-minute threshold?