{"report_id":"7b6d2fdc-1762-48e6-9810-09e626a3c79e","version":6,"status":"done","tags":[],"date":"2026-02-14T13:25:52Z","url":{"schema":"https","addr":"ssuperformfoundation.org/","fqdn":"ssuperformfoundation.org","domain":"ssuperformfoundation.org","tld":"org"},"ip":{"addr":"104.21.54.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"title":"Superform Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T16:57:26.648985Z","times_seen":17840002,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ssuperformfoundation.org/","fqdn":"ssuperformfoundation.org","domain":"ssuperformfoundation.org","tld":"org"},"ip":{"addr":"104.21.54.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T13:25:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ssuperformfoundation.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.supreformfoundnation.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-12T22:23:33.899243Z","last_seen":"2026-02-12T22:23:33.899243Z","alert_count":28,"request_count":14,"received_data":3849181,"sent_data":6956,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ssuperformfoundation.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-03","domain_rank":0,"first_seen":"2026-02-13T08:38:49.117194Z","last_seen":"2026-02-13T08:38:49.117195Z","alert_count":4,"request_count":1,"received_data":46526,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03486f98019e41d65d551d835817a9e3","sha1":"495741bb70e33bdfa69c1f91268a674e0ae92907","sha256":"d40d1b59045a55bf9142779b1ffcb0d3e36bacf60af0ada037bae6f747dfcde0","sha512":"15b50974ec069a224b9f85fd2f69b1efabc0642118db8941c285d82c037e1f3d197831f3711a1df0782233e75f37449204db17fcb31e42fea0103ab1116c069a","ssdeep":"","tlshash":"17e0c2286a5611b926732591c75f6240e86000639081d801fd1ce58a4f80a143465bc9","size":316,"data":"","first_seen":"2026-01-24T13:42:38.148025Z","last_seen":"2026-02-17T15:22:09.881828Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"804419a2b6d910fb113bf2a13d043c05","sha1":"7960fcbf23798a10cc2f315e83c50e25a4f944fe","sha256":"2a95ac8494dec2a0b82c644fd7e313150b15706707b4dcfb20c5c27174c2d8c0","sha512":"270fa4b5825858451c65109657c19da3f7fbf0f89401ad337b5f6f450d9363f444d3c06c28b9f0dae3b9dd6b5e2a8ca9ae0c13e5c04481434c85d58804460d1f","ssdeep":"384:V2exJpq86r/xUBfRkHvX7iEEn1CEzSEYchqKH563TnKEL76wVhZ0gpC3wZUgHY2U:V9e6SEYchqKH563TnKEL76wVhZ0gpC3V","tlshash":"30a2a6987cebb02252736c30157fe22bf7675dc1102e252f9620f1a7be307449dba996","size":21919,"data":"","first_seen":"2026-02-14T13:25:54.041298Z","last_seen":"2026-02-14T13:39:41.8077Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cc906811390022dcb22382e4925243b","sha1":"72be2048f6dbc39a607532d47ee8700286d33c54","sha256":"49813f2ebabc4e8c4bf44bf040cabd94ab6ba4aecc76cf00c09a5fce0c35e812","sha512":"1370048804298822b275731726aeb76a0c292f116c8b5f361003323d86c82e717e90c0ae35d6b232a04b71c4dae61767930260d13beb2311b1e3862184dfd416","ssdeep":"","tlshash":"40d02ea82e9a133827332520835f928037e08043a0e1f8023a1ce1c70fe1a1000bf5db","size":289,"data":"","first_seen":"2026-01-24T13:42:38.150592Z","last_seen":"2026-02-17T15:22:09.882361Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff397b5f5ffc4520df139e69220da312","sha1":"176de3e567074dad97bb4a8b53e309b155cdcbd9","sha256":"9d168435f407b337f30bbe2c954b7c3f5aebee997582d76708f7a0ff68179659","sha512":"f324c48ba19b6f512e09b182e241b8afe188f14b376cc1c63b532403bdaa650807ce38d77bc24dbd4e2bb97650d643e31a6d4aae1aa2dffb69405ad9e4129879","ssdeep":"768:00zVYc90Xfw9AcEJcI85m/iwEaE9avqYUP4izERnzDvqYUP4izuzpc3HOuecJJHh:gXo9pEJ4MGaEu9D+qxo","tlshash":"1263a5d4591bd0e98e5221ded873e805e0680d63cd6df1a7aa3cdec1781ef22858727b","size":67647,"data":"","first_seen":"2026-02-10T13:24:15.528622Z","last_seen":"2026-02-17T15:22:09.884587Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/react.production.min.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec7b6869ac23a0f944e06f4f72a4bd87","sha1":"44567f69c8d5b510860b988b65ac16c10aa5f9d3","sha256":"eeec5620e5e5f44b3d1c746026ffd53c729984720aa585c06582d0c206b4c24c","sha512":"7a7b10d3b7df9b55bc23a75e62f7348f35d6ed2e620c4358510038fc81a7590875b2d1dd959e84ab31a9a6dd886f4c05f43ed805daaa330bcce8781ed8a4e770","ssdeep":"768:pgzV8cPM3fNj/gBxeh/2WxGKCSxqYUv4iz+nnz9RqYUv4izu/c3zOoYcG0dhw5bZ:x3ie5FsKfz9YSrr","tlshash":"a363d9d6590ad0ea8e1111ced4b7f809e0680993cdacf097ea7cddc6b41ef66854723b","size":70758,"data":"","first_seen":"2026-02-10T13:24:15.527714Z","last_seen":"2026-02-17T15:22:09.872196Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d23ed157fe00165d285e39b2f1366b8","sha1":"679a2d08585aeb0460da92a7acc46a49b43f7aa6","sha256":"758db93d0b9667542fb2392aa4977c44fe89c0ccd1a1a46c9bd95d8d227cb006","sha512":"b9cdd140cb6f0022a9d6742b5162e58b558a66a26d4f807a906f2240f82042a73b86196c1066987594e760fe8386a50eb27dd423dc23001c7b92e419bb01d706","ssdeep":"","tlshash":"b8d0235919758c3075dd01465075d3ed256130a0fb515544c2dccc3b7e31ed314b195c","size":217,"data":"","first_seen":"2026-02-14T13:25:54.053797Z","last_seen":"2026-02-14T13:25:54.053797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-11T10:54:04.310295Z","times_seen":3240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b93aaef3461d7a1879c1377a8ef2577b","sha1":"8f62041b3edd3db76f07edc448f4c5e93bf2edd5","sha256":"2fffd7689040260315e8e792703743ed38e4a6688663bd87a001fbcd77c9b4f0","sha512":"b5f826b544e6f6c4acb193e1dd586cf0813ae070da91413975b7068626223a0a8eb72e852f8bcb7244f4ea09ee68272f0be6dea2160625a07ca68433b3f266f1","ssdeep":"","tlshash":"91119c793a2a5534d9c5818b317ee7a93d326061ba029084c36cdc295928e8714afcbe","size":902,"data":"","first_seen":"2026-02-14T13:25:54.055719Z","last_seen":"2026-02-14T13:25:54.055719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdce4419979481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21919), with no line terminators","md5":"804419a2b6d910fb113bf2a13d043c05","sha1":"7960fcbf23798a10cc2f315e83c50e25a4f944fe","sha256":"2a95ac8494dec2a0b82c644fd7e313150b15706707b4dcfb20c5c27174c2d8c0","sha512":"270fa4b5825858451c65109657c19da3f7fbf0f89401ad337b5f6f450d9363f444d3c06c28b9f0dae3b9dd6b5e2a8ca9ae0c13e5c04481434c85d58804460d1f","ssdeep":"384:V2exJpq86r/xUBfRkHvX7iEEn1CEzSEYchqKH563TnKEL76wVhZ0gpC3wZUgHY2U:V9e6SEYchqKH563TnKEL76wVhZ0gpC3V","tlshash":"30a2a6987cebb02252736c30157fe22bf7675dc1102e252f9620f1a7be307449dba996","first_seen":"2026-02-14T13:25:54.041298Z","last_seen":"2026-02-14T13:39:41.8077Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/secureproxy?e=jscdn/getFile","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.supreformfoundnation.org/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim.supreformfoundnation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ibxplmxgpo0jcxwzzdaw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BkSbaqvvkKWbi9m%2Fk6WkJJ9c7syAlaZqq71p7VrpPUT3abQMjOZtSu9eCqC%2BSMd%2BPj8h6eaw5Du%2FjM%2FrMWrd5eL10blQM%2FddbhKgGpgZW2l7g%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdce4425bcb481e-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3421299,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"346784bb481d1364ea1fc0a6092f051b","sha1":"19b9a5ddbbdc5a6c19783aeab839fbd7d1f2a7bf","sha256":"92f9d04310efd89c0a36e4ab2f84e084ab8cdff7b659b882a85a8d2b3977455e","sha512":"ca4d65508ed3fb55f51fa13544a4b12fc9cbb21916e263ffbdedb86eb6a18b1ef4a195c3e61d1ed9962eb2b1293cb9b863ec192eb80eee94ba1932c62f181008","ssdeep":"24576:8eV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdfL5Yvzw:t7OwPEZJsxc0","tlshash":"c32533516dabfead4f4cba65743b7e0366811f42c44ca8cf5ab2e9c0009c37602d6d6e","first_seen":"2026-02-14T13:15:35.479559Z","last_seen":"2026-02-14T13:25:54.04272Z","times_seen":3,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/a15fdd5be02827a2.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /a15fdd5be02827a2.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-112cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8leR215yNBOzZ6fAef5RSw3aehyUK3ZX3%2Funi9H47rlywoPkNv3lq81r1v8LA0LETj4fp1Zs2B1CqUDSQ3Q9KVuVbq0wnnYhivxCz0IPNlZZweaYCEK4QyzuccCpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce43fdc99481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70351,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61614)","md5":"6d86a574ced6e332d528d3da9477bf90","sha1":"d5d69edb298ddc02a7ae985479894c48d98ac6c6","sha256":"8530ab70cad77552af0b888407fb5fbf50451334a7ac924361c6be498d9387e4","sha512":"9081f975334d7d5fe3f1b21c5bc7ca71127b2837a9d2aab344eeaa63ae6abfe4fbb7747be2e575c7769bc4598629c79da503d96dc3635fdc903a8be842ed7519","ssdeep":"768:Ua1kag0VFq6ha4lUfJgX8zHtAVtXilnTsNpnuhc26ajln3uqVB4Gi:b/g0Vc6ha4lUfJgX+Kyn3uqVBbi","tlshash":"d663c820e225e57fbc37a57966bcf81c72067190deb907e9fa2271119ec36f21c26724","first_seen":"2026-02-10T13:24:15.517449Z","last_seen":"2026-02-17T15:22:09.880622Z","times_seen":31,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.5024783792219795:1771074600:BSNohOKGwlwLAwp1EymSu6srwnUOPqqd3BzQsSsNK5Q/9cdce43d6a38b7b2","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:28.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.5024783792219795:1771074600:BSNohOKGwlwLAwp1EymSu6srwnUOPqqd3BzQsSsNK5Q/9cdce43d6a38b7b2 HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12168\r\nOrigin: https://claim.supreformfoundnation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12168,"data":"e7C-VMN50xEaAHo2PKPQS2PEH-EfoaoBKSoHP0xNJo4jSBe6CEaNcStY-NPSaQojYc-EboY3PNWLQeSwbgoIkwKgo0XRHMKo9smCg-txPTpM9wxhCP-t4lKQ2ux+0o0RtpqT0EMtW0F+V-o9MX2TMKNodImLKIiCEwToH0OCORZz4S3CBSICBQoxMImbuwwDoo1FIPhl+cNr14kKD-ongHo+-0zwgfo2Q6xqzNn+D8SvfRFjL9Tvc-oa1HotUxI57nVssPop0rVFpDMTooKF9X-HMoolWWH8Mo1C-NlrbCM3q3VCc-oz1R-rSQIZY82br$PK-oQc-R0sq9ooxCsIZ3S9HvKHTOH-N2wHoTnMC-oRztoJXSMCC-01Ge3ibbS4kB+KBHM8V3RxkAHRub3UCRwYZRblbtHq3NoS$2lYLgsoSIYPYS7hUBo-MBY8B7ZFxFFaTUvLF0jcf-EMCgoo9X3pnNf$mfzzROo0P8Z$S1YzA9qLFkqhb6Yd5hYhU7JGxwhaqUoxHMT+2SzaIAee3oKNnfiXzD3ZlWUxe8CRUb4DnDoEfxJMa2+zOBfEuWWqKXEiU2j+MDusX4zN49O3OoN3lMVjV+qn+Nj4ZTURA67Bh7MGpMsoDZnDSQWrKmU7CWI9nEpCE$1HeQdfvKzGb3id1i-ps-bB4CutsXTSnefqAnj$WkEZdKKYT8vSNQocdqB2BbUpYWLY$soUsZD3bYYFDz6L2LzpErE+YTskiXW-3VY-d6+gcPRDgQskNS+ztdmpBPYZ0NYoNrIMR0RIZ39QHZIM7THDsHpN+Dv9-PSa43rSmSqsotDRReQzPuEaf3Y83iw30YYHOWoKQDE7zZlxlto9N7UP1WsS3NSabI3SQI-T97H-GZ0dPGU7bIbSC57HUQCHPthSHZ0SeCqPUV-PN7URCzii$WIozff4CYHfcMUPPWo+gAZS5Ho+aqVaMRpj$IY+QPSYxVZBTCwogYuZzNxegfa1RcK$MlYNIPzfZ97pQRNOc1-nkUHbg1GfoW93I5o9hfgn9Box1ICgz9Q+NSYQfc3eKm1fYhlfbA2xP-c8-CblbYV7gkAcKU7mzYRxOZbNYL7bC8AfhNYiVtCT7$1t5hgaZTCu8-Q+uNQoR8QCKPSk$HfHRHR5tCYZ3Ef5KlbTGt75RwtYXxzXCiZMYh97dfm1fOe0$CbSDtSX-rFPfBzLTHSKOghBNa7zZ0Eoz$ibwU32$sZ1b$sm-ouo5gzXSxDOOzP-guZG+A92ug3xCIwNEFUHhV423epPS30OZTX+WmxNUcRUNzZijQqW0b4lEodX1hmxN0SbzVIZYNSFoaLDaMbK240ZGKYYbv2qSaLtfDOkKPJo0bJlWn4l0SbHP0b4VJgPb4KtmtGhNxCU+gxuSvAC$bHEKJ2ENxCtqSZIX+Xodhv9Ctoq5CIZNEu-G5oFLRqShLH+cJWAG7emLkTfxIgwPC9TSadHrBBkAwNRXf6Tr+56kgGY67F+M$EFOZQMcnGN2d1BbgoKFjMA7vuJ4aEc7YS3JwR4TBwxe+sVL8TBmPEv3vW-OxzZv--IAMf5N2-PNFhpooWTEqLuY6r0QINlprN1PHX-UoWnqNoePOovN8057-9bt7Ifnmcok3fCa$lGY7-FPn-oeG70C$MIZiW2NO$HH8bNO9UNfSPUPF0eggs1n9xP-ZiQara-rebJaO$sx+-7CH8IzE1RP9BORIe3KgSCKCGNv3E9ME4MfCKpepPdHaE7V-F4tZ8YidADQFMlKuZSK77Sb4d9lKKFj0Pw04wTeFoST2mCDEbtKdxLCjZBO79ZV0zIbNQh3KISBII5I296+1hAeITRiZ20f$UFICo0hweCKYmZARG9hFk03I8G5fDXVMoYmQC-FZ-0dWcOg5RxM70bZKO-p4KoNIZbDub5RoM3dMGoD-He0uTzMDSvCRCBCw4sQHiHLzDEF0gUPCHNFBC636Mwto33VonEDW6i2mY2Q44kd-dCM5FScdzpPI7ljYhcbWej$Qr2HoCFuSMO-KCT-JRSEm4OF4KUo9URE2tM-YlY24QQnVKfS5kR-hwiz0c5Ql$jVEtdihm0CwNRoO2c-YwPZQx+UeQiHYsTRu1pew-BSPDx2Oa2hzfNSrn7D6GSVpY-RsIk6d1pUH$BHMR2BIHoKs8G4uhFYXh$xaSK7OSq-GnUZYmFwq5-1NbsWm8Iw68OoArl1gMR3j+YrMZzoMD$K4mclRu$SAHO0SEieMD3r0kF5ginnGlTZv+6dphfLHzprFcK$XHRlqK7-z1NcFH$MaQGj8b-dSX-ILGdEEiSQIUaEFtxae9x$lYiGIawGop8fWRYQUG4EXXbNDDY3StC$HgqOrwRPx11hfHP8Btbe9s6OjaMMlSC03FjKIz4nMnso2BK58Y0aej$-S2m84R6+mFSwsIBM4ffCXnsKPf-NTbYpsfNZEJbfbBuhzOkBDgSS2vCc0uKpCoH1jXfuDH2jZxQP$$kSz+xaI30PFuir48QSVi982dIo-l4Yx1fmb4qQEzDxhCZwMYShpGBobJJI-9WEcV8C-W87NdD0UP4Zz03ziH7P-GkT+aDoK5t1wxPsmV7L7H$lJMxQs1ZKWg+D8eb6Xg9P$Fzo0KYenhWgoeChSdEC7ogRearq4xkcPUNLsXwK-fYD8ti0P-AVsbhWjSYrEZsd0mrPmxEQP9acN4XUnNCrodKaj8Xu+QJ-i70bcBYAx-40NZ0rf0n4RIEIvDKG8lSBu8b4DvL7H2mMhNM57j-i$MKYbRzSoPalptrEvtJU06awsPMBa1a7IRreuJjNFXsY7dxf8YruYPMV8VmNo2SKnIeo3l$ue0hXUoWcK-aoK9mcVC-k1USqD3e7e9+rxndlL54pD2Z$bfVgBKdSBu2$bCxmHmZ8tTEz2e-glhxdx28BBoljNM7WMupExeMPZoa$s3uoS7-v-991ka6P1ZId8OK+UC7d0YDdIkaM6XrJYr8XF+KNSdSZE53aSf0WYetAjNDGoC91-CZx$PVLzwjUuha62qHiwHG44TuZrXwIezkh7T3JI6HAm7fM0G1QHXvnjewB0R3q$Wb7-YpadnrV8J9Cq$PSYPXnuVExfC8qxgS1m32ZZNqO4qaZxuuXf07XQjG4pbVZAOhcPZoNbk1WgWLca8WVni5MZ3VvBs3S$FKF0nzORcSGwzRHe$GHXKGZmg12bBlYfbIKJB7hCDpxvXMgiZ1EdnLzIaWIZUnKEglDEVdVTfDs1+sPr-IwAigSScUo8+wo1LSMsbpu3-gMxQvQxPiEKUglwQmYjTiRnuQYsgqrzVOqG9mZuN-C-NTBbgh9PeG6u8tIILrmSHhfd+dXGYr8th1NxDYE-R6epCsKpI2znrw6jMK3qj-ednJYuCwSogZ9DNeX00NZqE4NZWp-tHxKxpSRderKRo0S8zmjr8M6ORrMUG+3c6Z0G6L4Usa$ABO4NMZYQNfhW2FhAG$6ORxNfZLRf0pMnDw4u01PYrBP73wREP1Yr0U3hr1-RWUtCtNtS20U+YHjK6k018Vhi$i9P6PPQVKHOswto8odaZ93k89BIYg4MB999WVUmYkt4ZKPBhoskEiSLj1hi-xDoz-Kt6Z959fSwjEDD6XRR9F4FRfHQERDSRp85WpsGSC0n-MNmtNSW8w-c36HR+UE7tXM0U7Vt4U6P2PCSbF--Vu6QeCt-dU2YR9sB6sIOtGYh$2W1rsCTWdYj6zrIMRSJ3U+SZZ6MY0-nhWjjtVz7Fe9W8ZS9Y7NzBa8A2gFA23jtGJ4sZKHR6F+Lzx4X-R9FjBZEs1zB2psmCljE8HxNHaVCK+UCoYeZoYPKDW9MCDjEj1CTPGVezfWz0gU7tP$9C8zzCsPC6uSmbmduDmIo$fGFSYz-PFzg91I$8abmUr$i$Q6Mh7zqDi$GPhevZ6sphpM7$L2JsWYvj8DXzGh5HZYh9Brx6B3hsZ0fNM2gU26E6MDFEg4lVt4k0YoX8PK26QEzPJ8fh+HpjGIOoKsZxP2E+VW7YaoL2sBWF420sZEnh9rasG0x$MYNzHdt22MErXeTH7HZokra3B+2tHETdLrsSNbh6hsmx0h0h93E6B6XhbSftU$3-T3E36Y7W1BIZbI6HiRZNbCK4V6+U$bGsKHrUU$ob7BobFFws1M$e$xCtCEd-TdwsZNKdSoFSN+f4ksStfY7zwZOsFd1-KeYtTN$U0Pa2$EDU7SfEi$OHfYN+wRr$sMCKJNV+S2-srs79r8fZ9PFzZIweMHFo0SoIZ0E874rN2BPoZ2x09MS$fDbSG2EVhrpWbGVsQE5PNNJBI-cPK+fYiSQ$s6iI9hpKgKhPWd9dT4DC4K-8kS7$QEjbl8w4Sx$d+zcZCrT0MUb6iNbsNSW6XMN-EVoEjZY$ABuV+H5ChRBjIdSUBb5hW84Y7ND8X4kEHRZtGsWdGGM0grA2UMJCD4RxRd2oT$2MM-LxZD73seYPzx8D1r32J6Ddu8QsSGiGTN96R4StuCFKoQPIZ$9VodZEOrs03CQ+TtP9v3W+K9HdQVPsoAzbj3oKo1g$forNfZOxoaL8L3Q1MWkeuCZbcUcdNPrFcbZs+ee9IBsEdHFYb-a0fFe0sP74xI1xnFlMhB+K-nc3-n8I8+Y6AUpRXr8ektUgQN7oxoeeGYXVBZNr9UXBNVSI6hiBtPkBSBkeYch0cBSVkUUd6McZBxIRooF0QNwW51ob6Gf9LrU1NjK4heQtBx3VKGd6pP3MhHAjc-+-5lHdkeDxsDZtDUS3bC1rkBDxhYQeGHDda8oPRNah7S5hjs1UR8kSi0GNx0c85PI4pzLrm9UeJeZPmhxaiUNDMPJ+XP+UADOn52aGmBvrmA8D2$Q6PEW3-HsnZot3ZbYRxSbImxZtdF2ZWHax2+ajmAD4nVEDj0IEmS7of3Y$HVDGFZ929aJHF0GEDZP6MM9eM+2oQEHgN2+KED6W0oBUpDnZWI$jz2NIe3PN2gh2rRIVAZTt20MGzBP0kxjR9s2$10fS7lzZOA340hOjM$7ANIONAj4bMnGRUlGxoQK+uKoP2awV7gONH-M9RC51cZt2pU2QX1G-SEkrXA4W8RVRI+kbwgGWGZ0ALebANt4F9ItodPx$ZQFHhomrMg2YO3FI0ZkVKDF0KN4GfQ-4EWKRIcSgXbmhOQC3Rhi+J40BNQ0h29mBStMhi3uGpsCNdP3hmaqjG1MbpamIjCeACDT$9DJrtK$Kl1c-FG3+4BfgCQFYMa8Cn8WsbrUtsN+Kgl9dtsoKU3Q$SohEhtiA2SQM8gTne9xsL4eogxc-BUeC-Aar2o2xfn1IRZfNheGRdI8+a399o6osC9SdVVrjEd9xa0hKpspzuWi9hl7Yfhq-AxGAx2pR3GXd0dkI9jkzJBmj2d2tDzosAHaIRgF33nhj3CH12sOPM$MnQNf2b$6sWKFWPgeeL+SGtB7aznaC3FznEYJFFDvjs$FzpcODK1fUIM0dCzGh4Cc2cj+U$PjbEPz11Si-6sx-hrqcMtpSq0wCReNRRt-bQSWRcZiBs$AFMeYPt3zxxepxobwZeaT0KVpCcRRIC1$VOjZ0pVG3WYLln2UsOrcr3D8cExNDcnRUGNJ-NnbnQO7WFSDcClW2ZIYSQz0ZmQFtDU8DTE2BcUARTthz2WLPBWbxAHOeuZJ6kI3dI-qlUIx03zUfehQ0YIOaOjBeQ$ZAwRhs$z6WRb2BZsocD3ZeNCBUkSkNT0Yr4-csuc3MPYZFYS054jn2oaZSgKZta36YTAUoZRiFORbbo2INMGW0sidgo$EafMJjULSEDFXWT4aVM9bN-2bsmK55iNR0$RngNxmHBBudiVk9tdop3a6ACHKHVngnEdg1I1XgX1GDVaKox0xoYsa1wjEeSp-GQC1c91T3LPJHLHjruYJDjxSlcbS1ZjDBtZ9sR8R2x4K36GNQLRbdjIAIhr95x9xSxc6Kw32UftZxfQKzgobaocKh+UQtbW9t5KBgRB4-aI-+THadjcU5Vd2t7Pe3+YJI2eX-csJaA4YC7-xea$VhudQCQ0fCN0j+PzYt$-tM0a2Wm65fWxqbVaa6r97ZiXasm9NsoaSeXtdQ0M70xx$ATRunMDv6QgCgLnIGP36FkshEYf$0GVSl08wU8IzPCiUilXY$l5hLtK31SSWaatmA-aw1Ig$ckr-QmaAGJnJAIFRX9jkd3YfaR8W0Nu13xoHLCN+QDMeVneebfg11wLc1-6w5fapzQueQ0g+zDMWZOX++SHu3k-xN9sp4VgQ6t86ub46u$1CjY1cQNP5anYkN9j4DhHGRS$9Xz1f-2h+4cd1ij8wZk8eY-d6eXQVr0KGZiEi$feSLKN7Mpx68eVDnMDKXON0anr5cJQWVKbVgUfccXneVAIONC3h64K72L4OI9iuzDG8XcV8OS0go4PbzuCWIUlofIcci7CujlVpgqzK6tBIBLaezlZS$x5a0qaHdIgSE006ra24bQNurmc4sZEuzg3khfo637ZQ57Mi0klPrT$elrQRospjuiST+EAgeVAgX4Q1if05$JIcLlH9oM9mBZENcJ4m94cEL3D5bMi5AAjsEliPpPLpBPpAhSjXzksDbFPaoGSaoNQcrfL3+j1fpr5eH9iY2wlGWkr$c-vVQcWtbpQFGw1SSDKg6s-NYDYY+mW8e9Pta$nmnQ9i4VOYCFo4rmF3KeDlGA14LlOonVISdmcdsuDj5+fYjuDxoc6RYCtSRuBh9xL7CX4eCpCNKCjX4SLGDsvEWvxDeuNPrO0M2ndZNbbXLaifHdiAiPmrZKcKGhiTIpZnlmiOO2axg$D$+zLYLhDCI-JxLx2DnnIFg3s8HYjwAWL71QAisQYN$trUErlkuMSXYq4Rh29AIl3hPxaYjNphp9Ap0251oaNOqgdC46xiMdIL8Hn93tEqL-aI8Ij$pr1fJHAFIAIwR8lh4h4c4jp9OgNWbY$r6xv0lzhW8h5NH$upjAXWGIMb9wMZOQQjlTSzGVaE1$YMls2Yaoa01YkNpTstDJHKpHITtjWMETzxWSgUfUcd+uIxoSOnhRrm-8WeX0Irt1nFDCKN5f1nc00Sp0FmXx6S0E3ApDL2b2$ALAcZzpZ6Dq59si4HQ1Xax$5sRiEdu3J1RExsK1GVc5rSNQLR1Fzg53$fw7mJZIvxvIJlJozC8nui0fDcnYESQR05Us-Fmc8jQhJMoinYtsxmPqeogaur3t$V1GkIjddm2RzMLjGsIZoYsV27B-28UFLwo8U0+ZStAWP7nutH95T1A3LbczN9rJIFM4CY$4VXrF6AWFEm$YEgBmWrlfTV5sTT8sT0h1QYHxmbGrRpmQSmKtGk-YOYp2ZY5N0dOzciNk8tCA5S++zAbudkdubpfc3ukAQx3Z$K-kiMOrYMXEp9DOfB-9z9R+GP1Nm1ZQehrkIIguwJJnwotRQ9$4Om7v3mkkHQctRMJxVFSmCBJEDqVHIGd2NkDwkXO+QXgInDd7P4kZDhm14a78pY0OeSeKnMz4QmZQeFV09DTToVY1CfJ8fuT-hYRCXzzOGoS91xS7QS$k0u60bPYYc$5+sHH$7QmoMeAQ9kNKpdfidp3-M+pCCFk5FMo80foVOZfll-MxPepz7zH6Qh7+9VEs6GRs0zKY2DNZ5NOcaaMYcnKAgd3EPJo+-woiSg4N8E2Qkx4ztlbdFb7JoxQiADk0fN8oS3$8jVuZQrZPoJoR-Lkxoe5Ya04CwN8PYHNq96QQPQxm-kjnE$Og3$FNmYKHpU99zkHf20-u5apFsSWPFSF-5RVgEaM7Nz9Sn4HpaonWBofz2NYJM0o2ZqCZotYKMAQ0ZgUZHZMO5CLCSM$H6aHAH9CzV3$j3EYSPYOCRb$MSM7bQaxxUEu0Wj8fHHRHrpaUxKt-F3CDoPM-bZC1F01ZvYeFN+-O9UX+QVHiQO0SO$QECshoq8e-K-P-ZzfRw$Qpa$YN4oPoQPaQzeFOSARqTS7xQ4lMhVPFzaaP8mgxNSEj4XkHfxQO-soWQe9KOPUHEgPWRbUn0bP3Qz5bmZBE2mKHBCGUeOD3EaZHf02dw4KSsU2HVSYLC7h8NL0BfrPe7paSfZ0oQi4bxUIsZ2Z$RrQPHJfCD98RHME0-HMHGzEZte5rQNZR1FD85-QMwxOCWQHfYFP7MS00CWkVs9h7dQXaRCTSiMCTMf7LZMYf4hMPmZRH2HCPIZ$p3K9-ZwfZHMK9NHDW3HHHECn$$x-$tuNbUDa5noSo31aMb-WTNhIKeFPEfIP7QnW95Nx3CqPR7-vWUj3iH-WlfQoBfO3Fjj8RKf9s9eZb$R$XH22G2KUp+FPt53M2oGSCpU0nth52HPCvta5dSEZa2H0-k9Ikxat-WSsgQFQbOKEEXRtZCfax5kbkRu5JU1H7mgH0GNawXN0PT2eCDoogMH3YPqxDX$3jXWQhgHrxDj$VQ$M$TCCd$VlNT-D-lo4fhSXxta$1$mo7C$Ht3S1$nE5Y6lH74sVOtI0OTlofcl9KaOfa-P9Y5tcZF9toMlMVfcpKKVx0YgW2bnY4WGx7N6Wg3SC+sR8FWC5Rh397M5Ix0O-JMG3XCE5VfY9RqR0ZLa5ACGb8Ng3+25CYfLar0O7o53JUpMEYVrRTRQ9ZHQWo8F$$KNKoVoRktCs5WTaHHoSQ0XP0ZgwYr-rM059BSDODE8sxSB7OQ9HXNaBoh7Pm4x-PF4PHHpYdKgB08C5gYPHCdmKC$PNmoDojf6tag2xZ25PZI-Vd9FhR-D3aUx9IM0SSa0QwvxcSUkSW9pHkRe2H-dMD-$sWTNRICoC7cFYxRFIgIhAtlNj3eJG3NUmC4-lYsfgaQeGwVOYuC$Xwl7DoVPtsc-SdwtFOfTL9Qxl68X6UhI1GG+SehNkhorm+P$HVKFg-G6mGd-LDCX-N-lXJCBQBogHeHVo-0Kw0XMHMDatgR0G--5QERIxooog+Q92tft8NIi6kH6tP9nS6QISEnGoQQ6SNmC4lZFGht5-VZ2Ea-qM93V7erNU7vIZ2+Hp5WZoQEpNxXeqAbCOBZ$aGWNi+NPMa9JNq8EuL$Wa$KN6xoHs-+HXg0rjKNmzA-lSedPnu9En-Gi$-t6eQBGsIP7YJa5xxDz75-P660Vcqsk$YND2JQZ2hz9XZZNRRaCzlKhKE0nDr8v7aP0nVIoUgRRJhE2KKxioms6QZvxUdDtPE53RRnfMX9qV6DxmhSush2Q2skSo-7HI69aLbU67-ZvCbQM1zqKC2MMPHSCeaRbS5Z9CUbk7hSfPtmZqI0XZHr5zQ$BSAzBCzL0hGz9IhC-kX1fOxNgNgKBpX-PYVEl7Ex0pNY5UizUu7ePVUNG3at0i00E70cRZozQQx0xo4SDo2-JQ8PtYPnEYNJ-jPxg90MTFtH6o1fX11I0c$43JCWPHOGsoRI927lrxRzFqUfchjNgFaBElDoQNmj$CwU5HGa3PE8RDCSmi2oX0xMl24QzPzOOS3o0i2F3u-I-t$4pFsPCw2gKb5Ptat2oWoL-eqMXraZtNxsY5QJ$uEDUL0dXtM5$$sBfFR21-nmeb4EtDFvfQw$qdbzQofNNjawtsopKJeu9ZR13C53lOrdwQ62NszYX7nrVzN33AXt5vHtgsEVnjG3iU9lD3EzP4jtISzp2tM6b7RCrmzmZ2dmFwkl2joU5AbGfoeM8N+XS8iH$Hdmc8REwiK$HirxdhdR+XTn9Tzp3hPu2mwTn9uoNFECGPJw1-Yi+StaZnoL23m68uveSEPZEXDoHNpFEQ24HLw8AHmHol6JK38wf0PiuogvV+2mwVS40-$BaZ2NC7calHET4PG32mw052vbrKmW3gc5caPHudx-4xNMTrm8Z5ENQ4coIQi5wZXcF+hUmqawYVhSpBUoAojaXardMC0HOl2-$TNeKlrCQUvgG$9IOZOCQnZoSb$1TI8KC1g36W+XaxUHCqSsCsV-bF9bStCcHGMgv2QMro4vex+GWGfZMqlug0tZBQa$OQqGetCXM7Vt$F-LTYHc5YiPG7EMm7$5WWMlKv$25TZ4j004CVd$Hz7NYde0YhXiwe0FbAxMm+GIsmDmA2CU10+IKGRi5UfNVKFSENc$Y0qQVU1FUu0BoJ5L8+9K7Zlwx$d5zg+Q$+BxouaShRHQCaO+VFEU$axi5hjADHeB$LvdbpRsbDHekF9M711joq-Bj6xdzmhbfcH47SbOpznlLX0$B7$rYDzT2dmeiXHXFFm2nXisnh+n24FDaHXiHG+hcjVowzAbOH9K0GoACdUdbX+9bHpgO7q03wz1WNzr2mwPCvooY1I2j3c9fH+wuFH6QsV-4QY0wO4BaMYNQ-mxqlLX$Z4fVHQjfZLQMalUoj1Ng01Qtgrbt8RI--i5heVUwP5KtIe0a$Cz1Jw71rRi5Wwzp6phW37a0Li2NNM8Zs1BTC5ebtXNk0wHNXisP2ePgT971tKHT$kefgN0Z2BFJsmz$m97WB034d59wYfBP7iHCRx1B7p3$7WP-dT1CxfzPgiSbRIX9eY4paNqU91N-SKaG5OQWFiVFgR1r3uSaHuh12HkfUgn6d83919XWjL40kdC$N-vol9H$NGKm4Cmo68PfgRWREG2jIXmaAH09Aa-YNrXi1c8Ykc+FT2IP5Ok-CtKjBI1rFUPVip+V6+R2Sw2OPn51zDUsodo3OJQ-K17ZX1s6eOA2eGaw4zcBfzifnz+bV+F216tOJ4YuVch61q4V5WT-bQtHWKk6-k1I5hat43VI6ok5I5bczotKw4SmFlSllBBU3u4$-NiRPZZ$BKi451UFCvV64w1i6IxIvVCZrGaNSYtMA4GLCQ461cwKk26Xmc6+d2H7-r$qLLIY0AjE651vGQlan4-Vc651aNRbcc4-Vg6f9kNHSa-svF7$P9lNfbd-sQVt622WN5hlPG2cV4i0U6t11V46cM$SMl4GHlt-mxk640cnGRAUfBclQaZbnGPlD4aVR6i1jZY637YJFT$TwHfXOcS4JcleiH5RYbcF4zVp1p98RRRlfsKKlTE9wRzink3Kx8w51jRpQgt$21q$xGEpG3tS2SOTe6QvqfXsa4gj3eMhTeIIGcY3KB$6zqE471o6fOA$10rE47g-+7OA$598jGSaH6lODxQ9ZjYSQ-6k1SFwh2PIUl+SLcvC-GJ6V2I0rPOMFg1sgRlg2G3O2-W1lnGsgBhGOYnM2MqOFAIMuVpg51JVOjEs6DKZFkkqV+1gb+EK$eF1MciDoh+I1OnZGjgzi1b4JKsaD9l4z6QKsuKGFrfBXiH$G4pObFDSXcuaQO6BVU62GF7G3YaoLWn45-dMIxIAtjOpxBCA$dP1g2Tf9oI0USNf0kzuui5-hJfNlSiNsM2HjOUPZo$DEFNJ-3zkeLwDA9JXI-8$tfSqE70tqu8GQBF5edjW7$QQB82HXOgrfADSnxOvJDKdON22N-zC1DLNVJX51G41fDPdxMS0HoooqKWasMMQG-i-3kIxNIH9ReXrX4hxOn0jrNVXJJ0sxKEvNCC6CGMi7IQBYMgZ$sX-Lud59XrkCNC1f9zZhQooSzPo59GE3oCIJ-bPd2bCtBCGZHlVZN1dRE99cMUHWPOCGgo1BGCqPal8aYcgPoQNn-MotBHoogo-q7ooIHMkwpBopQl64Do8ohokSYrLfVooUgIptHO+OWl68kkqp6l1-YCNw87-ipzot+Ho97ip6lZNSt1G0Zkip9a9oIO9pokkWpdbAqKWSQ0QJsoMoIo9BcDsmJgSibgxOWl-o3kppglBmQHStMRIYPMiF-9RIsoAOvoNh+O1hEsooNOKU0UeF8xoEooKA5or1fEeJi-Goz29rATY+HVHmO8-dHtu6aoCC8PH-Zbt8BsEeNaQ0sKMFAPiqDSYTl29TC0ZTgYPMQOxCrcQMfRswpRpGoOeK$D6f-wsMbHlHmR6Hk71fXnOWamonNEfkTBjMMo-CGZxpgxtt+MB3rC-4oRbT20DnERDJc1iPxPNOSl0AJoIt00sSIEjrb-YqHUxatJan0HNsoKopovG0Bsx25xpYR2IzeDN-QGpfsmmXzKBr-FD2ZCsMpSNn0doiQT-I-t-OJs7oWIro5LEOEfblc2Q6NBoEOt9tKcnQ1xn-OhooES5TJoFdlbrFw8s$QIt4YDRsfJ9orTrcVvATHSkdQ-Ns+O$FRs8ZUfQ-u3$5oo0TRZQoo"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:28 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: yr77lCJfN+/A4a5Pva0zRA==$BJ2+uuh+ChzpFmdxAzx2/g==\r\nset-cookie: cf_clearance=UmhQYcbFRTV3agKC6z1gJM1JYGmDC6_Mu7o6DWbDHEE-1771075528-1.2.1.1-zbBLBzaLUP5rnTPC8OpLe11_GjFrKPc_kD3FQrXJBBtPWM0YH2F6IztmGLG_dwVGSudWiybfTx8sbnmCx1yz8HbKkm8Aw4tyi6ojfw1.FpP0.bZm83ziNrvvJ_B_Um_K6uFoF5xfw4FskApOpjN2WDBViD3XeAwa8vEA4EmY2i_Uxw2nohnKEwSZdR33lpVli_HJXPjSkicNsm9u2crOREAY03W.F2X_Zgrp0HT4wBw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=supreformfoundnation.org; Expires=Sun, 14 Feb 2027 13:25:28 GMT\r\ntiming-allow-origin: https://claim.supreformfoundnation.org\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cdce4425bae481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T16:57:26.648985Z","times_seen":17840002,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ssuperformfoundation.org/","fqdn":"ssuperformfoundation.org","domain":"ssuperformfoundation.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T13:25:27.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssuperformfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:07:54 GMT","end":"Sat, 02 May 2026 00:06:12 GMT"},"fingerprint":{"sha1":"81:F7:8A:60:EA:F7:A5:BA:8E:39:D4:10:3B:26:52:6E:B0:E6:DA:06","sha256":"83:7E:B2:D8:FD:61:91:56:6F:6A:E7:02:3A:61:53:CE:8B:88:FA:97:8D:D3:A1:03:44:57:2C:E4:E9:2C:4D:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ssuperformfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-length: 0\r\nlocation: https://claim.supreformfoundnation.org/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GM0ivBZHalNAxGLOFmAUAbnVnYSoB4gjTIxKraeQbJ0QqXvUYgp2pGQSqFQoqfpdKXnAytoHd6KAJVyOfPNs%2F3MVsljcgBHA2arXBzx1c9m7Q3JQFRN8Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdce43d1ea256f6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46008,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T16:57:26.648985Z","times_seen":17840002,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":57,"dns":26,"connect":8,"send":0,"wait":12,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"ssuperformfoundation.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ssuperformfoundation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/home-img.png","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /home-img.png HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 66426\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-1037a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIgZDYU3IbnGB2M4zS5dXeI1%2BW8EJwCrOUSNWjjVLp3SfcIp50peBiZHXhYKkBDmuVMze9T%2FtTR5IaUrod51EvxvVQXcYzigikiJ9U4H0%2BbbmMjVziMvskHzsc72Pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce4417905481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 666 x 403, 8-bit colormap, non-interlaced","md5":"62aba68778136dcb821d22ff04a0f5b0","sha1":"274d04c2128e4fc6dabc9f6589390efc467e3314","sha256":"2239b0a3d3b56cce01b6c4d8c2970e848916574132c45ea63a7d8fd0d5815c9d","sha512":"cd05b086288bb1238045f87d9077ab7e26f829e6fbbceaec1a41d3d13868c98a8ccc5706cca7aa62b7c8555a429cd522d98465c202f08261677f148d1748a91a","ssdeep":"1536:S4er3poK0eOptW/0yzctvD0HvnMgYWzx3xPKBUMck2WjUQ0nTRjO:ZezqeOjW/0yIlLTWTNgKhO","tlshash":"2f53025c6137a6ca909386b0c89b5d0f49732863ddd4c0c88f0856927a7f3b76933a2e","first_seen":"2025-12-03T23:53:46.0764Z","last_seen":"2026-02-19T00:55:20.34988Z","times_seen":36,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/24b9d70a518bb58e.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /24b9d70a518bb58e.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTDY8T7fdiX6Mydx5yUTnrjdhctME1xSi%2Bdz27BnpxWQ%2F5QgGEilhHPvaRCt85CRqHwp2QiTknFy2WgS1G63b4BkEicxrue6d0r6%2F6ziyvAzn2c6%2F60pyHpJ%2BZ8nEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce43fdc96481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (534), with no line terminators","md5":"5187cd0a93fb6daf09cad236fc10c76f","sha1":"3639d3384c737156280a82ae508c92f608d55ffe","sha256":"1d3162144a434a45889360f66f962a2cc2c30116c9ac4db345078a6f87f500bd","sha512":"6fee11fb9fdb1933898c2bcbba1ede39f8877f60344376f87e5ff4a3c2f6608837dc4e8ffa026f8a51062c61cc3b1f802879d6bf7713c49b0758f7237a484c92","ssdeep":"","tlshash":"8ff062a4e8219aba3d12e878136cdf59d003a09089ea469579cf526861c3b930d72155","first_seen":"2025-06-25T09:12:16.631378Z","last_seen":"2026-06-26T22:05:17.195861Z","times_seen":100,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/138f3cb2f3239054.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /138f3cb2f3239054.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-2d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwPlvkPptO%2FAEZzPBiF7oM%2FNQuAOmO%2FC9zUM%2F4YnJphs0k60PRIvA1OkmsLumTesfKKGvLaldmvWKNY%2B352SZAvNZZKjY4AdYo%2BvYwmiBExYYipOhad0XUoTaTrGOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce43fdca1481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (725), with no line terminators","md5":"44db3e1de099a93d79acfd53c5f5a1f2","sha1":"34665fd937b455fcbfd4e8e354c1ab00de993f56","sha256":"517c3d37440776fa987ca01292cac5a1d7381c317be1508a26422d851d4d979d","sha512":"67b4fa1db97721ae7dba04c1710e6f63d266cdb596e94c9b544bd2e2bc7e5e5a53189f56962ef37fe3334ed9583a32aba015fc70231729fe0b0173d32f44894f","ssdeep":"","tlshash":"e201e9a8c921f6ba7f17e1a892d81b3a3206e7b444ca4384421fd0317ccbbb60163896","first_seen":"2025-08-21T04:05:47.796863Z","last_seen":"2026-06-12T10:50:16.390393Z","times_seen":82,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/4cf2300e9c8272f7-s.p.woff2","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/a15fdd5be02827a2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28388\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-6ee4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNY45LxQ10%2BVmMnSu9EsVi4KAu28%2FHycgPuB9%2BgWyhSNfkJHWctXRhjSx0a7fEPOJcN1dSvtfk6ZYIxjcgNh1PBCYGHk%2Bw9EkL9VSxZrlJCASPAU5zMdEOF%2BYeRPGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce441387f481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-11T08:29:11.205384Z","times_seen":24501,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/favicon.ico","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yyxjs%2BsDbws9hNZRzNLz6VnvkRBMsOQ9XfNcITa12RnTZhZF%2Br%2Fd0%2Bvj5qirt3xaevViMAWIFShskMWR030qrR5zDZWbqaPTVH7GLZrzOuDojv9I8btwcKMxawEkNQ%3D%3D\"}]}\r\netag: W/\"698c82ae-2b36\"\r\ncontent-encoding: br\r\ncf-ray: 9cdce44168e7481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11062,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 53x50, 32 bits/pixel","md5":"7e8ceeb0fd30da8b3bf55ad8aef7023a","sha1":"bbdafec6c002159bc6505a2d22230e69151a62ca","sha256":"09a78fdb5ca24cff9ed5492efa4f68385086817a8b3afe3a6551a5d546621693","sha512":"acb45bcc5a16a2935b9a9ffac3d610f45de7ed4c93cb578b3ee885ef71ff7d632bbf5370cfbdf8ddffdf3c2a673b01bc141ae0685959e28bab0ec996ef968281","ssdeep":"48:XOZjt4MGocdLrnNDHwGh9Vgx4ozEBPUsBPejqHme9E7GpG7HHQeLAJxXuhSP9odU:+ZjGdl9fia3iW7HQxotV6u4eixs","tlshash":"60321f89f71bdbf0d001e1b252d2ef9a6ec51daaa450005407543e6b3db2ea9f38e533","first_seen":"2025-12-03T23:53:46.083421Z","last_seen":"2026-06-12T14:10:03.994811Z","times_seen":42,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T13:25:27.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdJ641MSovIRMXYu2eE02m4sIVtICT%2BXrT%2B4uP0VyZKAYhnUJ6Yv1QRiC9%2F0gpohvrD%2FzvXDba%2BVoFbeKkLVEZ4zDeXMmIi9ReTf8NsVw9HHCVBEdyudJqHp5Kfepw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdce43d6a38b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46008,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29279)","md5":"67a6c795b529298225170f3a3fac1aac","sha1":"f00ddf3abbd6d3a1f24537c1a2ca7b3ae153678f","sha256":"72e57f9336841ac465bed843c3a20cc4b9acbe45ef26e6cae35f2d22d50f94c8","sha512":"db1d6c24bd7af20a5ccbd2fe6c02ab01cd1e3c81ab4518aa651b3d87527c01d753ca0b1c94ceebb0b209babee9cf67038ec0f94bbcca06f7a1de26ffb73453bc","ssdeep":"768:uQXCk3lSN7uBOLjSKn9ZlHOeBmaN/x89vzoCyx/0:hSk3lSN7vLjSIZ8vzoCyx/0","tlshash":"86235b90a5601b762c03ffa586cded28d127a0f289cb564dfbdd504947c1bd80fb9b88","first_seen":"2026-02-14T13:25:54.047552Z","last_seen":"2026-02-14T13:25:54.047552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":212,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/9722456a4ad99fe0.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-6d9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdEDOnEPrWX7gRVlscckNYtPOrlsvNy%2Bq6DV4ixyLoq5OvjB6qvxlmfC1KLD1txzN%2BJA2MAjrGcxiGLc%2Bpr%2BkppZ85UWCr5ALgn7qrnLMM%2BHz%2FecnQ0lR%2BtsDiEHsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce43fdc9e481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-08-09T03:42:01.514962Z","times_seen":150,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/react.production.min.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /react.production.min.js HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-11466\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0zxs8eTNS5GpHGV8KeZNS0arcLoPCSPgtW4CpxGzNKWo%2BE9LyBb3M5T2CjRzDvWupI%2FPCQqnReo%2B62nA2DJYU3peyXflV2EvWSoPBd8WjY20c5GkSiFDa4%2BzjqKVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce43fdca5481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ec7b6869ac23a0f944e06f4f72a4bd87","sha1":"44567f69c8d5b510860b988b65ac16c10aa5f9d3","sha256":"eeec5620e5e5f44b3d1c746026ffd53c729984720aa585c06582d0c206b4c24c","sha512":"7a7b10d3b7df9b55bc23a75e62f7348f35d6ed2e620c4358510038fc81a7590875b2d1dd959e84ab31a9a6dd886f4c05f43ed805daaa330bcce8781ed8a4e770","ssdeep":"768:pgzV8cPM3fNj/gBxeh/2WxGKCSxqYUv4iz+nnz9RqYUv4izu/c3zOoYcG0dhw5bZ:x3ie5FsKfz9YSrr","tlshash":"a363d9d6590ad0ea8e1111ced4b7f809e0680993cdacf097ea7cddc6b41ef66854723b","first_seen":"2026-02-10T13:24:15.527714Z","last_seen":"2026-02-17T15:22:09.872196Z","times_seen":31,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/8c0effc846ae9f33-s.p.woff2","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /8c0effc846ae9f33-s.p.woff2 HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/a15fdd5be02827a2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49612\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-c1cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 616\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ga1665smnmt0cmDeSrz1zEM7uKUsS43q0VdW9Q7CgZn7Lk2DucFonkm4K6Xpo6pWRAjhd4ML%2BX8aCIHaxYyCDAKeZKRs37828OpHlIssk%2BP1GWg8EoMi9annfOVgRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce4413872481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49612, version 1.6553","md5":"78910cf98d6f2cbb37e2d56defc7dc3b","sha1":"aa8968cad5cd53627897e44475f2240c048a5958","sha256":"88665c9bc00cdc690c6399153d6e4499699f409d675e167f4835d85970f540c8","sha512":"b00a8e9b9835bc1a3fb11c1cb481bcb67326d2037d69f7f1e3cd641858c0748f8b7cbb988cd8b2b24e969760dc49b2ad6d3e70910059fd6db9885fc1d3f4fd7a","ssdeep":"1536:PRQOTYJFyxOUBFElSwt2otgjloioBqDGA:pQ3yxNBQ5xqBJGpA","tlshash":"a32301e1b0cffe86149e4f6cadf1704026c6540ba9899f9126cc74eaf9158b0d3636ed","first_seen":"2023-12-14T09:56:27Z","last_seen":"2026-05-01T04:53:20.723504Z","times_seen":36,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:25:27.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 14 Feb 2026 13:25:27 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cdce44158cf481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T16:57:26.648985Z","times_seen":17840002,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}