{"report_id":"e9e499f6-246d-46d6-8705-ec63b9aca129","version":6,"status":"done","tags":[],"date":"2026-02-14T13:24:09Z","url":{"schema":"https","addr":"spuerformfoundation.org/","fqdn":"spuerformfoundation.org","domain":"spuerformfoundation.org","tld":"org"},"ip":{"addr":"104.21.32.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"title":"Superform Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"spuerformfoundation.org/","fqdn":"spuerformfoundation.org","domain":"spuerformfoundation.org","tld":"org"},"ip":{"addr":"104.21.32.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T13:24:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"claim.supreformfoundnation.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-12T22:23:33.899243Z","last_seen":"2026-02-12T22:23:33.899243Z","alert_count":28,"request_count":14,"received_data":3849733,"sent_data":6956,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spuerformfoundation.org","ip":{"addr":"104.21.32.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-03","domain_rank":0,"first_seen":"2026-02-13T08:43:38.394172Z","last_seen":"2026-02-13T08:43:38.394172Z","alert_count":0,"request_count":1,"received_data":46520,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03486f98019e41d65d551d835817a9e3","sha1":"495741bb70e33bdfa69c1f91268a674e0ae92907","sha256":"d40d1b59045a55bf9142779b1ffcb0d3e36bacf60af0ada037bae6f747dfcde0","sha512":"15b50974ec069a224b9f85fd2f69b1efabc0642118db8941c285d82c037e1f3d197831f3711a1df0782233e75f37449204db17fcb31e42fea0103ab1116c069a","ssdeep":"","tlshash":"17e0c2286a5611b926732591c75f6240e86000639081d801fd1ce58a4f80a143465bc9","size":316,"data":"","first_seen":"2026-01-24T13:42:38.148025Z","last_seen":"2026-02-17T15:22:09.881828Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cc906811390022dcb22382e4925243b","sha1":"72be2048f6dbc39a607532d47ee8700286d33c54","sha256":"49813f2ebabc4e8c4bf44bf040cabd94ab6ba4aecc76cf00c09a5fce0c35e812","sha512":"1370048804298822b275731726aeb76a0c292f116c8b5f361003323d86c82e717e90c0ae35d6b232a04b71c4dae61767930260d13beb2311b1e3862184dfd416","ssdeep":"","tlshash":"40d02ea82e9a133827332520835f928037e08043a0e1f8023a1ce1c70fe1a1000bf5db","size":289,"data":"","first_seen":"2026-01-24T13:42:38.150592Z","last_seen":"2026-02-17T15:22:09.882361Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ff397b5f5ffc4520df139e69220da312","sha1":"176de3e567074dad97bb4a8b53e309b155cdcbd9","sha256":"9d168435f407b337f30bbe2c954b7c3f5aebee997582d76708f7a0ff68179659","sha512":"f324c48ba19b6f512e09b182e241b8afe188f14b376cc1c63b532403bdaa650807ce38d77bc24dbd4e2bb97650d643e31a6d4aae1aa2dffb69405ad9e4129879","ssdeep":"768:00zVYc90Xfw9AcEJcI85m/iwEaE9avqYUP4izERnzDvqYUP4izuzpc3HOuecJJHh:gXo9pEJ4MGaEu9D+qxo","tlshash":"1263a5d4591bd0e98e5221ded873e805e0680d63cd6df1a7aa3cdec1781ef22858727b","size":67647,"data":"","first_seen":"2026-02-10T13:24:15.528622Z","last_seen":"2026-02-17T15:22:09.884587Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9af873c5f0b347eaf03d18d252910d14","sha1":"b78b44063a4e77b2dd2a26145a4fd937d6f467e7","sha256":"5e2400690ac352640f50e948ed645ed04755e78656e90fb4b688b992f4554c03","sha512":"e6a86e14f2d31cfe41df32226482c68e47b9b0df421f388ed167c569bd487455692ba8c1574f56893d8170115d860e7ab9710966f8f39fc13c81c068de408494","ssdeep":"","tlshash":"bfd0239d1d75883072d8018751b5d3f835e12190f721654082cdcc2b7e11dd344f595c","size":217,"data":"","first_seen":"2026-02-14T13:24:10.54171Z","last_seen":"2026-02-14T13:24:10.54171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-09T03:42:01.551155Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37e1b341446a71c34c1ff284477002b1","sha1":"cb7b93386dae42e9ef7851467aa7d4cbfdd5623a","sha256":"946dc119a5c12c70fefac860522af2ce07032c41f5fb9a84b0e7f2287eb87dc6","sha512":"7e131c2931de10037ed307ee1547b6a5686907b02a2f74a3f4d60e37d997f77c12a6a32a6a2f569a54fbb6f4680cfa0705130930c183efb01f4bc39611b56664","ssdeep":"","tlshash":"9811c0793b2a5534d6c5418b317ee7b93d726061ba02a084c36ccc295d18e9714efdbe","size":902,"data":"","first_seen":"2026-02-14T13:24:10.54786Z","last_seen":"2026-02-14T13:24:10.54786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/react.production.min.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec7b6869ac23a0f944e06f4f72a4bd87","sha1":"44567f69c8d5b510860b988b65ac16c10aa5f9d3","sha256":"eeec5620e5e5f44b3d1c746026ffd53c729984720aa585c06582d0c206b4c24c","sha512":"7a7b10d3b7df9b55bc23a75e62f7348f35d6ed2e620c4358510038fc81a7590875b2d1dd959e84ab31a9a6dd886f4c05f43ed805daaa330bcce8781ed8a4e770","ssdeep":"768:pgzV8cPM3fNj/gBxeh/2WxGKCSxqYUv4iz+nnz9RqYUv4izu/c3zOoYcG0dhw5bZ:x3ie5FsKfz9YSrr","tlshash":"a363d9d6590ad0ea8e1111ced4b7f809e0680993cdacf097ea7cddc6b41ef66854723b","size":70758,"data":"","first_seen":"2026-02-10T13:24:15.527714Z","last_seen":"2026-02-17T15:22:09.872196Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c1c701965dd686cf0c85abcdf014408","sha1":"ff778169fbbe0a0a2db7dfb6f4fbf4d9c3447197","sha256":"b3ff774dd6103d877a4b6bbfa3c0b0d98b19bc1ba2617a23a1b7809bbfd7c485","sha512":"f8fd30863a7ebb14e5fa635f10bede4397d5d178103c2058f9a6f99e447c75aceb18824c1aaa65fc1dab4d592b81bcf7ab17f837735f3e56a4f5741658ed3923","ssdeep":"384:hLOdcFgNyCk60yEt5fDV4VQ9sVIBylJbaWEnQLf/PeyuDyP+SFivChcrI0hrhzsH:BPmRJbrEnMnPHuWWSCr15tsH","tlshash":"43a2a5d47debb0321233a871127f713ef3275cca906a192f9a00f6ab7e607045d6ad95","size":22199,"data":"","first_seen":"2026-02-14T13:24:10.528436Z","last_seen":"2026-02-14T13:32:08.916567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/8c0effc846ae9f33-s.p.woff2","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /8c0effc846ae9f33-s.p.woff2 HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/a15fdd5be02827a2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49612\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-c1cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 514\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKbKuO1idonwl7hrFE4W8qOlWMu5LPapU58KvUZlxo3S7ZGXRz8lTLOXkJgGW8b8fYNaSfqO1zWiOh3I7DZXP%2BRsXFhLVak%2BablIkTXCWLsmZZrXzDG0F92azLA12g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c6a8659cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49612, version 1.6553","md5":"78910cf98d6f2cbb37e2d56defc7dc3b","sha1":"aa8968cad5cd53627897e44475f2240c048a5958","sha256":"88665c9bc00cdc690c6399153d6e4499699f409d675e167f4835d85970f540c8","sha512":"b00a8e9b9835bc1a3fb11c1cb481bcb67326d2037d69f7f1e3cd641858c0748f8b7cbb988cd8b2b24e969760dc49b2ad6d3e70910059fd6db9885fc1d3f4fd7a","ssdeep":"1536:PRQOTYJFyxOUBFElSwt2otgjloioBqDGA:pQ3yxNBQ5xqBJGpA","tlshash":"a32301e1b0cffe86149e4f6cadf1704026c6540ba9899f9126cc74eaf9158b0d3636ed","first_seen":"2023-12-14T09:56:27Z","last_seen":"2026-05-01T04:53:20.723504Z","times_seen":36,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/4cf2300e9c8272f7-s.p.woff2","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/a15fdd5be02827a2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28388\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-6ee4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 514\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGMeL4SOMy5iXHzA1Z6JGEM5y4ym6uWNJJT%2BVU9i2AVIQ7iikodbhooYMwAc2mlrnhyhhs466I3jjhZ7sr5OxoEBPdmLac0kQ3hpueyOoen%2FBx3PZ%2BlgoFBZvOQuhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c6a8889cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-09T14:58:06.455458Z","times_seen":24499,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/secureproxy?e=jscdn/getFile","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim.supreformfoundnation.org/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://claim.supreformfoundnation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"ibxplmxgpo0jcxwzzdaw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdO8%2BINcTLmj468Lbf%2BHffh4mmopBU5eFt8TCv5YS8Hc4rCpcrTUry%2Bg2gYia1Slbdhmfrn2kACDj7c7SP%2FQp2k%2Fywle5czktTGVtzIxYuRiUw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdce1c77afd9cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3421299,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"346784bb481d1364ea1fc0a6092f051b","sha1":"19b9a5ddbbdc5a6c19783aeab839fbd7d1f2a7bf","sha256":"92f9d04310efd89c0a36e4ab2f84e084ab8cdff7b659b882a85a8d2b3977455e","sha512":"ca4d65508ed3fb55f51fa13544a4b12fc9cbb21916e263ffbdedb86eb6a18b1ef4a195c3e61d1ed9962eb2b1293cb9b863ec192eb80eee94ba1932c62f181008","ssdeep":"24576:8eV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdfL5Yvzw:t7OwPEZJsxc0","tlshash":"c32533516dabfead4f4cba65743b7e0366811f42c44ca8cf5ab2e9c0009c37602d6d6e","first_seen":"2026-02-14T13:15:35.479559Z","last_seen":"2026-02-14T13:25:54.04272Z","times_seen":3,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T13:23:45.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:45 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKAC%2BtHak8TYyEmX1DKNHF9%2F03KX5o8Xc2%2F5CJ2xQT3nyITkQZYMaxZjkGS5R4qDRS2x1yyur0y7OFw9ipGYJVWJacX8A4sGLmgUBp7yDOekkbCL2lQ2vzp6uzqr0A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdce1c17cc9958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46008,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29279)","md5":"68b80aa65ce19c0b4d49cdd5c3f7207f","sha1":"b57d84a7f0a00b7337c5195860ff34c02bdf9fb6","sha256":"2258c0c2f2df53e13f061179cc72976b5da1a422a99e153395753b1fb16b5238","sha512":"efcc4340cf1810c0ea0e4b0c0b2dea0b30ff55987e293bfc0236664da1c942a47f2cc08c5b9967d6da34744bf50a4d4aded4269fefcd42e31308bceaaa42ea02","ssdeep":"768:uQXCk3lSN7uBOLjSKn9ZlHOeBmaN/x89vzoCUx/0:hSk3lSN7vLjSIZ8vzoCUx/0","tlshash":"7b234b90a6601b762c03ffa586cded28d127a0f689cb564dfbdd504947c1bd80fb9b88","first_seen":"2026-02-14T13:24:10.526626Z","last_seen":"2026-02-14T13:24:10.526626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":63,"dns":29,"connect":8,"send":0,"wait":282,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/9722456a4ad99fe0.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-6d9e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2F%2BYfyKB0mt8%2B1PzVaDpkZ9nnWDEhvJ%2FVFtCmtyvzishl0r%2BBaNdJ6mujUq86vNTqzhum1eIaMQLDI3%2BwvtgUNLKsg8P06h8qFubg3m1kwJ6OUYhB4gXMTj0K4%2B9Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c54be09cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-08-09T03:42:01.514962Z","times_seen":150,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/home-img.png","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /home-img.png HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 66426\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-1037a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 514\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TXRkQ%2FavFHzi7g2Y%2B%2BXnAHDeoXV5L8OX6RFgYimpSF6aI037uD72c0EJkRxwbOLIPj4IDX0xXO%2FlXse5cfP0XRgw5y%2FHBFTQlyiIEDAoZzsBuW1od8eMdJKq0ls4iA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c72a169cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 666 x 403, 8-bit colormap, non-interlaced","md5":"62aba68778136dcb821d22ff04a0f5b0","sha1":"274d04c2128e4fc6dabc9f6589390efc467e3314","sha256":"2239b0a3d3b56cce01b6c4d8c2970e848916574132c45ea63a7d8fd0d5815c9d","sha512":"cd05b086288bb1238045f87d9077ab7e26f829e6fbbceaec1a41d3d13868c98a8ccc5706cca7aa62b7c8555a429cd522d98465c202f08261677f148d1748a91a","ssdeep":"1536:S4er3poK0eOptW/0yzctvD0HvnMgYWzx3xPKBUMck2WjUQ0nTRjO:ZezqeOjW/0yIlLTWTNgKhO","tlshash":"2f53025c6137a6ca909386b0c89b5d0f49732863ddd4c0c88f0856927a7f3b76933a2e","first_seen":"2025-12-03T23:53:46.0764Z","last_seen":"2026-02-19T00:55:20.34988Z","times_seen":36,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdce1c74a6e9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22199), with no line terminators","md5":"5c1c701965dd686cf0c85abcdf014408","sha1":"ff778169fbbe0a0a2db7dfb6f4fbf4d9c3447197","sha256":"b3ff774dd6103d877a4b6bbfa3c0b0d98b19bc1ba2617a23a1b7809bbfd7c485","sha512":"f8fd30863a7ebb14e5fa635f10bede4397d5d178103c2058f9a6f99e447c75aceb18824c1aaa65fc1dab4d592b81bcf7ab17f837735f3e56a4f5741658ed3923","ssdeep":"384:hLOdcFgNyCk60yEt5fDV4VQ9sVIBylJbaWEnQLf/PeyuDyP+SFivChcrI0hrhzsH:BPmRJbrEnMnPHuWWSCr15tsH","tlshash":"43a2a5d47debb0321233a871127f713ef3275cca906a192f9a00f6ab7e607045d6ad95","first_seen":"2026-02-14T13:24:10.528436Z","last_seen":"2026-02-14T13:32:08.916567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.5024783792219795:1771074600:BSNohOKGwlwLAwp1EymSu6srwnUOPqqd3BzQsSsNK5Q/9cdce1c17cc9958c","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/60138c04e6b2/0.5024783792219795:1771074600:BSNohOKGwlwLAwp1EymSu6srwnUOPqqd3BzQsSsNK5Q/9cdce1c17cc9958c HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12168\r\nOrigin: https://claim.supreformfoundnation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12168,"data":"e7C-VMN50xEaAHo2PKPNfNxKosCo8o$-SwH-09oR-df0lfU$iXop-efMwUoboFFo9XUmoXP0hloxf0Zfr$jCNdd$DCoDKKSRHo8AFtxowhoC5HdXa6$SokW6+tDw2sHozQB-fCR5PMYzg7iooOgAC9QUSomAjmfn7-AAkNoI1ZXbtIsu9MmfhMT-o2QA2wLABxo0gY+KXwTMSTXL1glo084oNioICG4-EKD5PeCbrpAYHERbYn0+7Nio02XooiP7BjzmajjoNsczn4eNCSoogYwhE0Co0kleokCK1Mo97mS1CBdxlMioNKX9oi$RDKQpa5itZ4oNRd0M4ckxoof4QjtMQKZNzZ02ZoEUK-Nqt9RooMYINb8IUYRo$4a+WmzpCBslZYlgS5LWM4sTQW8DMQfMKFEMDp5N-t10oCC401vVQoCGgHaIIVIl$NFIgpCIWbXcdXEeTol$+R3ot$RzooxPzBX0QCSQhU26QG8C7Bz2+7AQ0vY5g6137Y1hsrSkgUanU5-NMUHKNYM6Fe$nlCNHncEVbzTKesOZRg3MKZKlp1fouNhm4hz8DYJNuzpLFzQ+6hiumOOTcV1fKQj+VHobe8RNuOvA17eOaxxMeTv9mA9zjlG-05nlf40i$HY+$Swx6QLgo5nz$nNJt$GzI8V3qDstlU$s9gEfTWAsFXctnJl7aLHOI$DzB8r7-eo$XvaTYJsc1Uf9-l-9haKTV21U1XGcTDkDQi7XkB8+HV05hVOUNNgqeiMIpe9+zCMkHwvcaNNUSH1-obwxOC2VxNCeNS$x+SK0iMofKkLks9o4ZlN7+-BZ-owOKIpNGVfq-hKhbCdNC2ZMVYfE4KfvNYe3427CPd9heYTMhSC4W3NC4ExdPdNSKsQDTKs+E3$PRo+KS4E09o02MxCPWgtlUW59od9M$0jPCaXCNDV0XNME$5GhbSfNqEmQ-zC0qBgDU2Vlfg1Zq9ozZZzxoVtC$1-m9HgWnV$4ze4Ha+2-IlNDxCdopKCV4pY$AGMN6nRjCSf6It-o8j$eQ87NF3V$9HeN7SM4E$iIg+Fu0UrjN6NDhS$i8NN6I2ZL$d4q4YBtMOMg-s$P1-oZ39rJxP1W3fwts-WHJh6EUA3ERsF0Jfeo0beNNGo+z1V0MI0t-$NUNCJEZ43d2PvEMdCkWgZDIEsbzaPdEJtFjERUHXEP1fS-abmiESkDoIoZD4xs7e+NYSHfNHc3rbhNHlUeXPlUYoEfo4KDQZMuDz4S$VmK2j7bHqbIREdSC5lMS3OnGIci0hCDYxV9mvZ-xFOx-9YV6pda7D2WPfEJEYdZ-SHR2R4x1MCaQFWkDU33GOQsK3OMZrTLQ4W7r0u+RGtfoRrpsL1WPPW29o32gLplE2FHoHkmPgWSMqg-7Bq$og2oX+iffgZoPfYVVKJCNmv7I07tcRExSCu50J-UQ9ofYP90qL5pkrNAWv+VEZedlNovP4Wkbmmv4PQ1Cc9A8kJhA6I2hAU1mfQmQsES4p1PbRqYw6CEYZ54vtJLOn-pLMMhdL1KAsvgZ1TZuTrsvhoLTdq5ERhYo0SNeqDE-IY9oxaOooSLPLcJOhlw4NCejZ7eG0ExS-Sp-fCNlEHt7bPDBSoI3vEV$AnftGcoF-n22ASSl$aoN1dNRoa4xtsNHcR1096PVHa-coh9hSQRnebF4Qjh0SV6$hqU9wgrpWHlZMqtE0N39HpzlosJzIIlIeCRo30PCNCfaHOnDNNDgclNkFZLE5S1Umb2D3qwpSa43D5QZ+S-Z2g763RYlOGtCzAd35QoB8HRKf$P$H$-$N5xJdoxC7zRePeS8I3CUwIdZbH81qY6wgCKtsiHjoaUgIooYrIXNzBUVkKPasLHGIb2jc0uImH0U4$SxaxoRmpu4dM$UdoR6IHsE1FHoIaI2uXrMSSGImzPN50NQDL2YzfU$9ISwtKlUMoKEkOf0Q4ehE0oxaw9lba+K7Nb$f4QO5ic8+Mh401LH0EwSDUQFXkziEd$8OU6XsXlOn9TzoRScXUHs$RdstOQZLMcY1gY-os1CNHmY0B2hzn$$gXz-WBGxSrV2H4uF$Pl4ffwJ6rMRoQ9CEG450Ul0eNMmZn0KNh-KVpDgAxSkh0XhD4hYjD0Chq-Mi1CZugU0bZdGgqz5Mo1kxziYwKoNGh22c5s1WxPg4-Z+EHBa06aUKBUAdcU$HI8ULh3dbljH$Tq64xGbbOkhm4KHSzfgzAFp2VOQWkVHC-JP5zib7+YcFV6n16PxdkTgJnjo90DlmnXH110ergLS04He51oa4F08i3sN7WKNVkg7fuPFNxF-5Qw4ZQ3-n2W23eBKPEljSOK6SM2QuVeP9OOhQZw01$dcGvKlNF4Yr099a7$3Q8hcGDUY4CZoGxlXXKznaYi-9YwDh1-6ZlOaoh+h21b1vhQBbZxmzc0ZEelZGESoAPKWlWo0CLXVNsJ52D+YkpQ-hY$$fDXDgo0$GuVEGO9GmIF9oQAfMzw4ZbKGScu8kleoZuP88RwfS$j1ZFDtZ2AnoOzXU6SoaK-Uj187NrLXxosfpXi6SSiAoIkfGh9a9HGKD2t$S0r+2qMfoj-q+Ih9BZL0oMonr5RF9FYIYpKki3g8ceC8oa1HoRzZnaspCNg9PZ7Xto$1Inhv1gB4NS-KNWdeYE0MiPJP4S$wiZasifMh75bg7+hT9RMp9o6FfKcxF1IN7Nw4hijVXqomEroR65kFwU0UH5CGJo41lICXdkXz8rPUJi321LkoM9+U5PxDBt5EPaRzZ2KP-9$FjQ37oSv5-GnBblSYqFY+NKbwcLNfx1lZBNwW92hJOhSRi3HHC9PZ4gIa9ePcXQYjx-Sp4Y4-ZHrFXpSt4x-B1iVANQ2TwFgqjJMc1RYCgVNpxwR7UJNHX3NUzoYbP-COGRa$es3ZwhGsm7$3fx+S5DuQXZ1GxC4-lhVOo-UdmHP6+4FlEYIITjRDmWtN7OMXwd4UGcbvOhTjxcwzCZ7aCuhnZWoYOZQqZfKOPNojYISX-iNuk+b5W56hlGOErK021Aj5bJdII1+Yrt8dXe1$vBEYHzs60EdqlXAx7zbdQaXvS0WpZqlwirf3+QioMhEec4fXWN9rgFCF+hiYaCdczAnUIWuuVo+Ee9O2cg35eJYjixCoIr4YpxuqphsXpcjUYbILmThQ-agYQ41DzefMrKzKNQ12EIzsdFeGRsq2DN3I+5vS30ugBJx4dsEHXqckReUpxxFwHpe2fXXwLj0iFzTh9kNdeJ6Q-F5-92PQ$D7FGZjAix$xRF9EEhEPXYFerxBMhLj2ecp0hFdlkRu+kPrUVOx$Sodsw6xP8N18ciPwIVTmHMSjNkwJK2hTPmqHIMkZ50bgcg9ZDgbz4lvbZ5RGdA5NgqAOWXtQ-$xC8fIcfHHxdQOaxxuao9oRRWaMIwlw2C-Hh2+hiTsGczbmYM2Tei5Cz8ckah4-nmJzQxYK4oVSsiYa6kPlczg-VSVkcoDa41LKcf4G0hmTt9dKCi$zh7Yhx8qY0xm-$oSC7hHYMkM9XGLH4G35VPuP89l9$NXzEG+C79PNqUC8dGPswKFKaYSPPsX5BM+HkaIGSmP9+HJPWTpYjsNMf0YNHT5CV-VoBbfOOicK1Cs1a1V0FoOKfMVljUulzPRo4aUHA-SCUirx$ib10K0-voJxHYBNfkahl9GNoZsaSNuinNXomNmhzMC8UTlZcHk2YPlYpGTZtsXkhi1Gwx2CBixM7Uxbaz-Y$asiifwO+SXQsixC-2+oKYqh6T4xnTGbfkrOlUIz0ba1JkRMcxMCsl5mCiFzYTDlBZ$8fi2N-K$ZXNzmRo0Z5C0hNz5fsR0ifipRt803X1DSkH4x+oNoQ392zR9hN9cfBZrZJOLZCoc0xQMMY9S16C6RCl6ZrUh7uPn9aYr0+1JP18S3AmblWajarocT+iUOBTi2uKzsjMSKYPsTwhaTx8YCjoxG4xhGQiazmQpKn3fkLH2-Eb8NGGpoOGtijS2kElO3cHNGUIh9HOw5L04-ETGUm51lHGYCpaP8qhzP3-az-KzN7TGYHiJIA2t0UCtGqhxkNH9oL3JTN--Is8a8BZ-YPYP8CiaTcxIPDo0-lxt8Cib1BSpYwxI3b1E2aCI3Nzgi1m-g28Zz9mY-QNrS7NsaAbFYHgQgRo$oXmt3vbYCIRS-UQ-KJ0AGH-J0B0+xVGUgqYNRO-oCCa-G$hPQO5+oDoJPczE0-KvKb7lURN+fIO7hY9hT+o8TjSC8S1YIdIazUQ-H-NaCHir0l7bYNoSb3-HsP-c0wPM8HX58JaX23i4ouh-Cd5wx$iNzJ0DP4olhc3Csjg4IY8SX73v21X0gY9dH+opoiX68rKQZ-gkk45I9oCYYZ8uPI8HCUicxHxoXfoi51-nmJXOkEZS2xTXI7UUwjUsi21+oKijKLHO0aCk8UXk2xH4bqTYU+X0O1IMINHBPlYYYEwUKL9bZ1h0Rh2pGTb+i1XJi69-Mj2dPC81Kf-JXSgH$9NaCQ3fN0CuGN-GI$0oCNorTxO$H2NqNi9-$kR8iCNH$6Cuo97VSVR-$WTjTe$YYLRcXSI65FX7b9mnXsbMwXQ3xN-XkS1ZsF-DSXQGht0gZeRFansYskwY$nix$l3b2khnmW1VbT3LHmFnoAoZ-Ng12WI5mCb7sWx7IfZbajs7TtY7UvR1FmP457ZLYUZTa45xwZKCoUQ6odxuFHN81VojTmFHbXza3pomwhIXz3Tcl9xY2$Tp50mEF2NvR1XhMmCk5-hI3$GvYkXU2FN120XqhP9MCeUdoWU8iFYMbdHDP2Pg-4ijhNKc1DToHsZAXabtU3FWs-K5GtOJb0mFku4ch4MrUvTvFT2THn9io5ix09F5CoTxI2Mg-Z3dZYCwmlYxO$ZhzqhLFkOngfOif3Cv-+oE91-1NOOsaC8H6BOUQ2PO5b9aYH3azNHFoO$CbzwHOia7HSmW1paxXClOGHIIllob4x8GkIIpmAPNHYz2YNo+RhOC8GHpHjoB$2YV4TKQYjGmHA$7IcHeTOgs412xF23-$NzJXH994BIL$cHKSUH2IEF45CTDah4Eezs--LGJekai2IOIKvRreKsOsC4Jwg6SCkaQ3C7NTZ-aeS1UPthm4bzWGxgCYdRXzmQ3HK1j$S0Q5XzIefFVIrUj4N9Kxj2vOQY7eoYbHrUS-mYj8VOjlRoIT9xrFBlO6YRjnBZbXNnw0vPQ2Li7wHg4645S18KkaJ$I$S1U4h3$lsiZ80-N-Kw4eP37T-NYhnof-UPmPJ6NHFSG6d6XQ3hWkXQ$IF5SmZgS$qhNH9RW$nRKxcox312Iwb2qhQPP9Q9RoPZwXiTfX734-Y3DlW1D5JPs6r0WSra$wM6whD1bKjI7RvRC8Lz+5vhiRNHkOH9Fk$ZKexlbea8iI0$GGWGUHa4poV93PllUXYai$Igck7MPmv$M4nZ9x14QOB5a1LTT-a1DnuzX4DSZxHRw0zs2g$i4iOm-l9XPi046HWs9lZUS8vnmHJQBQ+I0IQK1CmNeoUOe5VsN-nmaR1hoTKRZZcg-NrxIn+PRRug$OKII$HguGmCDgO8xOWq6lYhWGqiTKi6fX-Kpp1xzPd5oeg6nE+SmQMpX$siYI1-F0HYdFUQk5h2vPiYq5FkAPm2GYuTSmX3FkERc5diARbIwxtnsZg-GKYWNaeozZV4WG5wpoaevKx8-1GaOI8Ymb-$OixIQISm+H+HAPzhka$iWpixG0UxO--DMlplH$YCFIsCqhb1B60-SKVsczI3P93CxzsfGW3qCoQpWS+i5WS-O5cxL2nZmHIPx9R8BZDWDP1CH1enCIBMSmJXJ3vHPw7Elehnw0NzNpneQXqeReDeVez2XpRHZ-3-0hFF+bfXQWa06N$4f6+8VTtOEk9iJOBOiX-F6XPFYbO57mC8Mb2bRMgGb1PeEkI3TXewx87jR-I-ZFig+bbYDomIW$Nz6CN6-$XY2m4ows7PJZYqKxka$Zx0v2$ZTp5WZXNHv9NlKkBXbRcx$iBpFk1ZtSNZp-g5jXqNFoDN-CGOT02-7aomH4hYLhcWSXBg3pFhl7rSVjeh+-Pb-$-ZuCwqoYroRZ-nv2VpazLTn$I$VqgK89baAGYPOW-Qz3fFPGrxh3KGNEsW6j1-njUj7wGeP-Up4-vFm$BeReCnLGm$tFFkrpApwx1VC8LRTKW$MbsfHVpGg-0E$oKq05Rgpgggj$e4+VqpY9AVW$W14EXno4Kkz5Y5VDKk7MEidYZ-C8W1gpe9QT8cX2lcfnR9OF4pobEFF1+HC8O15202Q-QjK4DS9Y2knXqD8irxdG31UNTgceNi7RzscPJPcNQW$HdSDghl3gOpazXDcHC4FlJFLpSXXR3pxW$pueggpwcHI9x81g+9DkcRCjjOzO8jeXijP-6C0lN2DXSXxFPENepurNEip3und1RGQmwxJqZ14sQ-gW4-+nMNweQ-7HGlqhzgeoVivFOlYCuO4bdYVo9ldSeEBSjP+489oCgn8qMC9WluJPB27pqIgpqVKn$DVoj-AXeuq2-PUHrU0CfeLOL-2nfuTKuZsDjFqTT-pj8ElEJaTEnmPhuK+GMXslF-MP4-oe$iJETKTpDElJZ1oj2h+e2sLG7n5twp$5fwjnS1reP-MX4blUoKMOMMvUi3Q8oq-nAFpoj2guzZUQ0lvUlIR1p26qzcqjH$gXCZvFXTWOiuMJ0huOw-$i1KRo7MV50P3WvNEKggEgoIR9uKQWk2iB75LwMXcfb9tHYG4g0CI3jVqWj0NJ6J8thmI4Xzsjr3VaenrWjDG4ZFC1f1kDkWm2XNxtXWwhzpngxnbbh20hLemuv$4$J8F0HCQT0-iqrDmHWKB11xbH6we8x8NFMhfVajQ6JQGD4HF-V+nIw0lgWsRwVT2$Q8C7Lcm$Zb3bfclqDtO$mgewdKb6s2a2nOluQj6CxXK-lTgB742Ysisj-KoculpJxO3x3PrxYV4$9pdPMz3p-pH1U48hzF-$-4zBHVA8-kLOND1NAPT5mHL2RUfFxWSFXkJXg-oW4a2bvU9sXcCRb7q4a1XNHVW$4n7HHWQYAWIhf-HieJ1uTRbHnJqq5KDab1Lc-8W21$$DeZ-chMcPXJidpzCXhZ4z3puhS-eEkeY14VGCctdtB5IdwBwdprf0R96cJPD0ppO-fFMCDUhUSAFi8pSrmHE6O-TZBhtgQ$eWiTC7gpzrRbXwvhzKYDTO8ZaC0hZi+Sm9GsUcoQ9s-z0C-qmit$cf9ojB64TVw6kHC8vXxazgM-1gubmlnmmQv-O-pxvUiqjt3uhBr88BPY640MNBZ28kVA4oBZHkrY0WzWlYKWHCRJz4JPdGPw$J-Mkk4wjXvRJXjc$iVL4qNhaCgYtDsDGkUDCuQ2uDSmo2H2Kk8$HdFYeNa8vRIeVLdLpACoke-P1c+BtTdB+z$$fkx+XZmQBZSvfOLgONK3NHdzLdDVzqEeIe1Xv90AYK5rFznB9jO-DRQZg4azzntUeNag7H2LdPNOFREtijELsS2MIEKzDKPo-6R-BS--LHDiQR80MFfcMTM0oA$t-SRaEodHIDgJE3JlxSzJgNSADUaH93DoNuYV$6sSDhNc1+0z9nSr073fih12b-zRzhzfeV-V4pFUzFpg4qITCi+fKmoQEPFKQlPi4tRM1Hq33mgr+fNFE6kLRDolPohCl8Xu5e9mlo+fKxEvR-NcM4-zgtCI8NModQ8n$9$NBUtGpQfc4bCaQdMZz05-P2+zE9YYEuFWal-UiSQMaEMIpCpUdoKHPF110p-$a07E0GHKBpHH9YdgxCokZYYEoYe5UKSxDDZ0$oUH19WMEko30RiCliCO-h0WR0IPaHU+N6$ZWU-ufYiijK00K9JnUZZHmSlI0f9SYNsI$YQ4YdkZaQKmEHsWKq$OE60PHWHnoX9UPtl3aNY9YSKD0dCn0p-O-OQ9o$9$F0RacHFkdAPBNF0nsY3iS14Fh9rUg-Q-iOcdzENFEY9-SpNQ3DG9MopbSOIsFQR89e0DZrUx7i+ZzSw0sZcziCpUKEoGRvKgHhUlzNfMWwtSbPV7YJNTNA0p-WSfH$E2gjUZbUbYC1bq90SJN0f82KSHfY0SzE2H5CwchqoxKeY1ijU$S+IWRSp0E0UltSH-HRSLHT-srNqEeMItPWsRtsDtEmxzW0asGtUKKbz$9NxCclIHaSdVSKSRHPK05iKK0oX$QQgUoQBfIsMpWFgo-9e4UXsSLPx3IRalouNbt$$aXj-IhItl0dStm5hiV2SSpj$oSJEGxlii2IDo8-3aIP1CcK9Gz8RYW1mloJhxGH0PZ05-4Qmjlz9Nt7qWZS-5elzoYtH3dRF-mSfhFe9nNjRHfuKCmIE$ZWBRrzVuB5FzttU1o2PeBVCCGt8Rg0fo$xz9KhtgMuClbuxpS6K9wMifgpoaHA6NN7gpPds05eP0cSPMg-q-nH-HoZ01oTCFHnQuMhn2t0lZuHwCD+jPE$pP34WD$U9o2W-q5xQP7S4sRu$ugRRw-zFxiR61MaO3+obapbxZ0TMbsaXEMx8CrSD-g-DYt5z8dIouZu0-2d1CYVqWFw03bPebKT+Z0WEqh7DdoEhd5WaHOZikd2eosK$Sf9sQQwH$H$f0dHw9WUL610ooFozloYedKlm9mHD-s7Muzfi8Z-Uv06o2ECea7Sr9tMgU9S1lK0E1Zw4x7G3EFKh9NNv-3oioL-Kf9u9QqFbRUbDhSexNX7sa2x0ieUZ-3xRH-4-4tdwFfUBHUfj1tzIlGSNmD5olUoCKIIoNt$51ZMxgeIx67qPbiIAO8Cx-R0a$2hW$eFN1rIuzMwocderKf$ioTUmoZvCmcDtjk6NF8ljbaU3ez227ZaPdxP9vhT01NXYnx08AM6mEkXExox$jdXSqS7$KN1NSSoR+CDxzSzp-qKCz2So4oOIg-oo$IqN8HJoZPIV8Az9gTo6QhnNC-p1P$$9f-dZ0nsx1sPJUN5bHDUtaH8ILNl7xBtwxbzkEcUmC$ouQIWIAnw3EYmCnMsfV27bS4-AfdlPuu7np-XHbgQ0NU0kEeCGT$HdM4mtPZgT$cfPDa0j2aoTgnSk8Zbt0BpWZZMO+EU99lQRpLlBHk-Ki+pSb42Hjx5CKKVZ043Y3Hf41iTrvtho4gwCSFKKd5PiRRRDPthhnSdJUZkfNouhKKecSDCrgi1XBUPWiU849GBHPSd0NbQ6WwshAYSdwN6S4z+gR9YYi0SZNnMIPWUC3SZr+SPMhovUdgCDxK9JW4oa7FkYw0D7Yj2H3xgStDeDER-eCeIYJBx90Zf5dow-VQKWUW2YWLNlN0-K8e-7D3HHvo4O0C04$NZR-0Q2fbYtp$8okhFQ9-omNiNFCPY+sQkbQ$DEe4RC4f1ldX0i0ED8-0IC8+$8wMKYAaW$58fexnU7p2fFodhfgtxWM06hloi2KXoBW8HECRU48zn9G0DDHhCoD8Yld5Exo71calhNtb4IR2Goq-ZHxftmNAaDbqUf7IhMWFtfcfO5W7RJCmD-QlUJS1bpY$AZg2Qfk5AJ$tCAgwj4oWoCbpBCT-Eg+XcfsKeGIEhejGwve9lHbMzWd$lwkHbbeJCJU9oqb-XplO8Vs-62iCOG0lfwCMDlHmGgr0I9vM+UbRvUAd48ifSWFwjjoNabPKJChPKo1NvFi2CLV3H1E8wZm3kKJd6Qr2Dlx8Ei+Bd6QjfoxQX08tLVY0Wj7-qUpQETGdhljLwf-NSCubf0oVaQp9z1Evb6ktMo$8AXGbrVoGEjf$dwOT+BIfMQYoaqUiHIt$pB2oL2l08b+BCDh+w8w+UieeuFph0EXwU0w-x+8vhsV-fe0qfNeEjBxVe51msBBnBKZ5PWa0-479pWehwqRozE48YoAPIg48w$SBqKPQ3VYVR$$aCoZPn+3b3R$4bbaOJeZhMNtQhZ9Z5NsQjP-w$O0s4dT4SG70AwgMksOjSx+njpCHmxq$-c4t13QwEx+Nf71aEv2M$uMW80ro5Y+ocU5543+7lDBsKlfHzgNX710+oKZwQzUjVrIQYg6wU+Mk3bBMLFTRSFHzwIz2VjhWoIXYQPfef1-YpN5FYaWf57tuWT273+SerI-gJM4Vqo1mF-Ep-U2K$N$Wzw5Q5-nZWjU8pkONa7cvwwj1bZ2ONAYQs+$4GftaSTigZk+U3j$O0AoZjD14njJCHavolkMO+8RvZcjKExaAh4cV8Fa2qlza1pMEV202m6i4ftK4w22oIHKP$wNmZwjK732EnV+tQGdK4YfKGT+BbNSSo0FRbGiefr00vV519n9Z50n0-+VzaqUK-EStZBnjJCaKcNO$9uSVqS4Fs-9pHeC+4oqbwPT2$xSEjU3g5BbEZHwIQ4-g04+Ld$GkVjULKDlcasid$-DJ8HCxGsbFYv3EZgPJCAH+KoVV8h9Rl$dPr$HwztPARc$QCYbYmAiBMRA-rS57GKgJ-rKWSTtE2N0IFYvElCASNSNvjRNW0G$VPZ2IVC31M1p-da-6fxoZ4MjW4S5c35nKeGTVfFME56iztDSFelgT8C6HjxiukQ+RwoQxd7$P2oQK3+Mgt-9g8E$KxOCO8GXVdFBkoH6qUz-bJV64i2B4OmA8RbEWYsNowG5weGm1hNuj1wi1kbHBbDG$cFzz58-I79V+pSN4+SVeGhgc4TR16BK145J0Dj$1zw3Oml4GQJ+O1WXp58n+1guULsN6okSX+Gat4RVU6-klIXbQtDZVZ6kHow+KQBUnPF6smmhVOaaoV2bSxCawD2cFYUgtwi1AeD8gIZdwXSbkn-CM-m4k1jw$0ln4LI+GGcdFi1wTztS97AcJw1-4TficF+k6$6F1aNpicF4-KI6pOaNpbcorHKoFU9BmAolo6PVN3m9FNfTlGYfVU68084XOcPYhQq4ROln5HQU4212$PmtZBG1Q4p12emWSqp6$UI618$2OnZObc6G5Khld0B5APArKEEV4fMApp3A2EMKZ6511RunDQ82KKej9ZR4rPfrKKD6AGIRhrVFGOVn$C7l4+QgMPu18C7hHW+3lntvcEbFMnbiIaYr3gIK6OhIY7l1+QOA$H9cE47nHG7OA$x0vE47c-88OPFM9njzXFosbO-FS9A4HUAx6GNxF27WqLwS0rigiRCGTEYYneGFKe6bz8ViYSp4618Fxm2jzFaGY+cYnwxDXunVF+XuGfih1XYxA++gOq4I27XHganY4u2fS2weD4aK8pKD6R2AXGFMf621GnNGWXzslJSJKKo12ccRs1fWeupFEGaw5hlzsA08K4-Emp1AUNmRIZe7TuDgUw$7gT$4b+jCPNCG-ZVo+zDuujUSsJoePDPbUiz9uYhSCo1f0Qom9K+RcvKp7ru$x9P1JoBQvoHvci26SmcZgT5Lon$ST8zEV4bJ$kfFgW+vOXRtHbGfx0R$zu7ILuVFz2nDNiNwUP-zoootgYphUY4KsEs9dHg-IKo2IcbJKa3W4QGN7IudLOG-RHL7IN9g0sHdNeSkU4xClBxEJft-jbvRoI$Do2Yx6ooohGoE-2PTCNNom$8NTHIomwzsK$35CeRkCfP655M0iER06C$Yk3tl$F86MFplo$oEaSHomkoo$SStAooNKS++V17En$811fGPxPtHMhJJNfoSFIVakEzJYp8lr++cln6YEZodbASEj1HokkoorEjlnsCC-q2PYdDjQ6-PocHOot+Yugw6vgYf4o4tR-SHNCosqOiBBpCW36IWYpso9dDcnesvUMo-mzIKhSD8ao2Il-$JL7ox2J4YPT-ooVDY-YZalg-CfoN4J-9qjoXA+s9P0GH8qv2MkIOtW4so9oJiq-NNN80SSIPTsT-XQVF0GZYYnTEr1fMB68Hr3oYd6Kh04ERZ9qpSD0bBV1V1PERgH1iBStbUR2$2tMb1t+$DEecYp+-4QCut+sTpYHSNzsIWnI-7kmYTbFSKQ0Ir8HzpQOKLpp+8EhNVH4P4vfNC7zG-ZCiino0B1SZF-vp4QzoN-EHeQNPChSNhDZW1MbRKR1fx$0jc9BBWKRYTmS1iYI9Uzf-nQI7E6oxExomE+iroSXI7EWwuHuN66i49Qb7NuH7Pw4pn$RFaEYPoofWBrfSgq38mAb8UnNCk1MObWtYP9v8qXLqv2oBRqSobMJHa1b8sxWESEiIc-oo+2xeoo"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: ZCYCB6n4rAtxy1zlMuuL3Q==$/Lz3vXLcEKuMkxl/6HkDUw==\r\nset-cookie: cf_clearance=U8T0gW.2xavaF9NaHyjzvSsAK_STXwke.9ULD2h9vwo-1771075426-1.2.1.1-UO47T23.E03Y_lTrccebqFzQkkluqAjPK_d3wMUUj4jfS1JAkUARumAcYuGUhzsPY1ef8dUxCS50oCwAvBqtc7NmO6GbfYKN5MpDsHE7_y3jmSSJplBZv0CiXRuBjVtxGOCjjlBSSph7rOxzzS1DhvDU7GDGEuJadTlvMlVtVmtIlXBv2IblBuo9uWgvCeMPtioe.IZJYYNvm8wVGlVlrlGP0jr4LTW8l5I1PjqcRPs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=supreformfoundnation.org; Expires=Sun, 14 Feb 2027 13:23:46 GMT\r\ntiming-allow-origin: https://claim.supreformfoundnation.org\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cdce1c87d6f9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/24b9d70a518bb58e.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /24b9d70a518bb58e.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-216\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mR5NRukavoEmO5%2FhdmyU2y%2BbGzV4iYlQ7lal5XTcum2GwguUraWThF%2F00svUazr3cIeogbzSnYfNUPz1LzgPpnW7gEf7xz7Oa33Tx93OeO6HBg9GrwLJUXpWu5tag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c54bd99cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (534), with no line terminators","md5":"5187cd0a93fb6daf09cad236fc10c76f","sha1":"3639d3384c737156280a82ae508c92f608d55ffe","sha256":"1d3162144a434a45889360f66f962a2cc2c30116c9ac4db345078a6f87f500bd","sha512":"6fee11fb9fdb1933898c2bcbba1ede39f8877f60344376f87e5ff4a3c2f6608837dc4e8ffa026f8a51062c61cc3b1f802879d6bf7713c49b0758f7237a484c92","ssdeep":"","tlshash":"8ff062a4e8219aba3d12e878136cdf59d003a09089ea469579cf526861c3b930d72155","first_seen":"2025-06-25T09:12:16.631378Z","last_seen":"2026-06-26T22:05:17.195861Z","times_seen":100,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/138f3cb2f3239054.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /138f3cb2f3239054.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-2d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NRYD%2Box8yn98tXRPgQZT3ao2GlVisysZE4zmnBUfGfsp3RWHOleOIgojAKC%2BYZ8KQwLleWJOxg6jpDEf2DJd%2B5LQwa9dstnLH8xPccbENR%2FBtLEq%2BeXL9I7UNVPdtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c54be49cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (725), with no line terminators","md5":"44db3e1de099a93d79acfd53c5f5a1f2","sha1":"34665fd937b455fcbfd4e8e354c1ab00de993f56","sha256":"517c3d37440776fa987ca01292cac5a1d7381c317be1508a26422d851d4d979d","sha512":"67b4fa1db97721ae7dba04c1710e6f63d266cdb596e94c9b544bd2e2bc7e5e5a53189f56962ef37fe3334ed9583a32aba015fc70231729fe0b0173d32f44894f","ssdeep":"","tlshash":"e201e9a8c921f6ba7f17e1a892d81b3a3206e7b444ca4384421fd0317ccbbb60163896","first_seen":"2025-08-21T04:05:47.796863Z","last_seen":"2026-06-12T10:50:16.390393Z","times_seen":82,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/react.production.min.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /react.production.min.js HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-11466\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMfEgWIR6azCuaaN4%2BcVXX7rFwWWC%2BmsYVNnXkqS5qGrTp2w%2BU02PBJEROvL0mDnTnH4EcoF1NABeM4mve6MI6IBhjcI3DyrPQV2duoQfNsUUg7ejpWBV9aev4L79A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c55bf29cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ec7b6869ac23a0f944e06f4f72a4bd87","sha1":"44567f69c8d5b510860b988b65ac16c10aa5f9d3","sha256":"eeec5620e5e5f44b3d1c746026ffd53c729984720aa585c06582d0c206b4c24c","sha512":"7a7b10d3b7df9b55bc23a75e62f7348f35d6ed2e620c4358510038fc81a7590875b2d1dd959e84ab31a9a6dd886f4c05f43ed805daaa330bcce8781ed8a4e770","ssdeep":"768:pgzV8cPM3fNj/gBxeh/2WxGKCSxqYUv4iz+nnz9RqYUv4izu/c3zOoYcG0dhw5bZ:x3ie5FsKfz9YSrr","tlshash":"a363d9d6590ad0ea8e1111ced4b7f809e0680993cdacf097ea7cddc6b41ef66854723b","first_seen":"2026-02-10T13:24:15.527714Z","last_seen":"2026-02-17T15:22:09.872196Z","times_seen":31,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spuerformfoundation.org/","fqdn":"spuerformfoundation.org","domain":"spuerformfoundation.org","tld":"org"},"ip":{"addr":"104.21.32.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T13:23:45.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spuerformfoundation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 23:07:39 GMT","end":"Sat, 02 May 2026 00:04:45 GMT"},"fingerprint":{"sha1":"E2:E2:D8:E0:AC:13:22:A9:49:65:5C:1C:5A:D2:E9:11:95:DD:97:1B","sha256":"88:4F:F4:FF:89:B3:05:0E:0C:46:54:9F:02:2B:8A:B4:0D:A1:4F:B5:18:AA:FB:8B:BC:45:44:0A:F8:8E:B2:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spuerformfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 14 Feb 2026 13:23:45 GMT\r\ncontent-length: 0\r\nlocation: https://claim.supreformfoundnation.org/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5LcizyHCBpPboFE3lbi%2BV6mT88CK0xWCQi68H4Fx8OrVHxnhENi4zE3pl1cjraWUSdU6KkCrXI%2Fuw6PUPbDeiqeFB86WB1NgNrXClWmEGzrcallAksx4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdce1c0f97a95bd-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46008,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":97,"dns":65,"connect":8,"send":0,"wait":11,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/a15fdd5be02827a2.css","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /a15fdd5be02827a2.css HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\netag: \"698c82ae-112cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 515\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8oDVna7mR%2F6Tn2kQAHRXKmQlARipV1EQRGFROUKGX1Sja7WGM7x1sOar1ZnmGa%2FzOiJvlhCqHdrh2wCe1FaYwDUrJdAhcCs%2FSVztNbV%2BIbTs8WJJCYnkxftCZio7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdce1c54bdd9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70351,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61614)","md5":"6d86a574ced6e332d528d3da9477bf90","sha1":"d5d69edb298ddc02a7ae985479894c48d98ac6c6","sha256":"8530ab70cad77552af0b888407fb5fbf50451334a7ac924361c6be498d9387e4","sha512":"9081f975334d7d5fe3f1b21c5bc7ca71127b2837a9d2aab344eeaa63ae6abfe4fbb7747be2e575c7769bc4598629c79da503d96dc3635fdc903a8be842ed7519","ssdeep":"768:Ua1kag0VFq6ha4lUfJgX8zHtAVtXilnTsNpnuhc26ajln3uqVB4Gi:b/g0Vc6ha4lUfJgX+Kyn3uqVBbi","tlshash":"d663c820e225e57fbc37a57966bcf81c72067190deb907e9fa2271119ec36f21c26724","first_seen":"2026-02-10T13:24:15.517449Z","last_seen":"2026-02-17T15:22:09.880622Z","times_seen":31,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cdce1c72a059cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22199,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.supreformfoundnation.org/favicon.ico","fqdn":"claim.supreformfoundnation.org","domain":"supreformfoundnation.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim.supreformfoundnation.org/","date":"2026-02-14T13:23:46.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supreformfoundnation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 12:04:17 GMT","end":"Tue, 12 May 2026 13:02:57 GMT"},"fingerprint":{"sha1":"32:73:D1:E7:03:4D:95:11:74:AF:DC:3E:E1:0B:5A:AF:EC:33:54:C7","sha256":"25:2F:4B:E2:DD:02:72:D0:DB:43:17:AD:2B:AD:6F:4E:A9:D1:3F:06:A0:09:0F:AD:B7:AD:7B:EC:A0:B0:03:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: claim.supreformfoundnation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://claim.supreformfoundnation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 13:23:46 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 11 Feb 2026 13:22:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 514\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJgaM0FvlZWfkgIkNficendGq3Yyf480hsg0U1lXH5SI7Zd2J4h0TMxauLjjJnn%2FPA3jGBX%2F9lbd4%2BbGZEFyIWzl7gtyZv69Gb32T03erI%2BSGaiitdSUHO1sv%2BoRhg%3D%3D\"}]}\r\netag: W/\"698c82ae-2b36\"\r\ncontent-encoding: br\r\ncf-ray: 9cdce1c76abf9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11062,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 53x50, 32 bits/pixel","md5":"7e8ceeb0fd30da8b3bf55ad8aef7023a","sha1":"bbdafec6c002159bc6505a2d22230e69151a62ca","sha256":"09a78fdb5ca24cff9ed5492efa4f68385086817a8b3afe3a6551a5d546621693","sha512":"acb45bcc5a16a2935b9a9ffac3d610f45de7ed4c93cb578b3ee885ef71ff7d632bbf5370cfbdf8ddffdf3c2a673b01bc141ae0685959e28bab0ec996ef968281","ssdeep":"48:XOZjt4MGocdLrnNDHwGh9Vgx4ozEBPUsBPejqHme9E7GpG7HHQeLAJxXuhSP9odU:+ZjGdl9fia3iW7HQxotV6u4eixs","tlshash":"60321f89f71bdbf0d001e1b252d2ef9a6ec51daaa450005407543e6b3db2ea9f38e533","first_seen":"2025-12-03T23:53:46.083421Z","last_seen":"2026-06-12T14:10:03.994811Z","times_seen":42,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"claim.supreformfoundnation.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}