{"report_id":"c065cec9-65d5-4f2a-98a3-aa2820de0414","version":6,"status":"done","tags":[],"date":"2025-08-16T21:17:55Z","url":{"schema":"http","addr":"savewelift.com/","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"savewelift.com/","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"title":"Save we Lift"},"submit":{"url":{"schema":"http","addr":"savewelift.com/","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-20T21:17:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":4,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.068835+0000\",\"flow_id\":27672296940055,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40844,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3515,\"start\":\"2025-08-16T21:17:33.057879+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40852,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.093879+0000\",\"flow_id\":1070743759442819,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40852,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3446,\"start\":\"2025-08-16T21:17:33.086915+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40866,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.129398+0000\",\"flow_id\":377239685159491,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40866,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3516,\"start\":\"2025-08-16T21:17:33.121411+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":45834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.132493+0000\",\"flow_id\":1090169896561863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45834,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-08-16T21:17:33.126151+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"savewelift.com","ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2025-08-16T21:17:55.638604Z","last_seen":"2025-08-16T21:17:55.638604Z","alert_count":0,"request_count":10,"received_data":822643,"sent_data":4361,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"lnyrnmpvrgmzesgdedsq.supabase.co","ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2025-08-16T21:17:55.638501Z","last_seen":"2025-08-16T21:17:55.638501Z","alert_count":0,"request_count":3,"received_data":8937,"sent_data":2445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40844,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.068835+0000\",\"flow_id\":27672296940055,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40844,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3515,\"start\":\"2025-08-16T21:17:33.057879+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40852,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.093879+0000\",\"flow_id\":1070743759442819,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40852,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3446,\"start\":\"2025-08-16T21:17:33.086915+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":40866,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.129398+0000\",\"flow_id\":377239685159491,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":40866,\"dest_ip\":\"104.18.38.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":934,\"bytes_toclient\":3516,\"start\":\"2025-08-16T21:17:33.121411+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-16T21:17:33Z","timestamp":1755379053,"ip_dst":{"addr":"172.64.149.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.22","port":45834,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)","source":"{\"timestamp\":\"2025-08-16T21:17:33.132493+0000\",\"flow_id\":1090169896561863,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45834,\"dest_ip\":\"172.64.149.246\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050130,\"rev\":1,\"signature\":\"ET INFO Observed Online Application Hosting Domain (supabase .co in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_01_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_01_17\"]}},\"tls\":{\"sni\":\"lnyrnmpvrgmzesgdedsq.supabase.co\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3439,\"start\":\"2025-08-16T21:17:33.126151+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"savewelift.com/assets/index-ZR-OICab.js","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0707d20a5ae084b0cc6d63f6ff60901a","sha1":"25555b5683ba86fca9ac685daf49a472267a3c4d","sha256":"201df6d1ff49f65a7bd646a187338144078771cd4e8ee2a7cf670a2fed27d198","sha512":"94916e1a416077405a4d4c9e7187f9e6bd6cc8c6f9ba597a88911e542844f224f37ceff89debc0de3c6aa3f1f3ed2ecabb9285e81fa21571afb3b01dec8d82f4","ssdeep":"6144:AYO6RSlQSU+gr0RsWsDzQjYNoH74/LcbspiHWz9uBLdNMrw1SOIEALvWsnlpttME:s3U+ZsWsDQ7ILcbs2WGpKvCm","tlshash":"5fb46cd871aab5715be385a1807f4103b3382916780d8060b13dedee7ab5909d27bfbd","size":512375,"data":"","first_seen":"2025-08-16T21:17:57.553763Z","last_seen":"2025-08-16T21:17:57.553763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"savewelift.com/assets/index-ZR-OICab.js","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:32.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /assets/index-ZR-OICab.js HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Sep 2025 21:17:32 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 12 Aug 2025 01:12:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 150570\r\ndate: Sat, 16 Aug 2025 21:17:32 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":512375,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"0707d20a5ae084b0cc6d63f6ff60901a","sha1":"25555b5683ba86fca9ac685daf49a472267a3c4d","sha256":"201df6d1ff49f65a7bd646a187338144078771cd4e8ee2a7cf670a2fed27d198","sha512":"94916e1a416077405a4d4c9e7187f9e6bd6cc8c6f9ba597a88911e542844f224f37ceff89debc0de3c6aa3f1f3ed2ecabb9285e81fa21571afb3b01dec8d82f4","ssdeep":"6144:AYO6RSlQSU+gr0RsWsDzQjYNoH74/LcbspiHWz9uBLdNMrw1SOIEALvWsnlpttME:s3U+ZsWsDQ7ILcbs2WGpKvCm","tlshash":"5fb46cd871aab5715be385a1807f4103b3382916780d8060b13dedee7ab5909d27bfbd","first_seen":"2025-08-16T21:17:57.553763Z","last_seen":"2025-08-16T21:17:57.553763Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/assets/index-6luecqMz.css","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:32.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /assets/index-6luecqMz.css HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Sep 2025 21:17:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 12 Aug 2025 01:12:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10927\r\ndate: Sat, 16 Aug 2025 21:17:32 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64885,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64884)","md5":"ed10258a17c8d8c0747e28872612e640","sha1":"489ba545e12ea94baeefe03e4dd53e8416da8f02","sha256":"49f79b4386ed993308f0ba01cc38e5fb6789fdddc1fb39f603d9de823cda07a5","sha512":"f9bc31ebc9317591fa1411976faa9ed3ba469893a6cebf995002f54ad2e38da65f8015871262d71a81046aed2859aa6cc3e562c084b33e1a68a9a23bb520e59b","ssdeep":"768:lcSoP0hYZOYekg6WMUhnreYaGPCL4U378VQZkt5FN/GToIbnW:lhYUYekg6JUtaGPCr378VQZkt5FNCoIa","tlshash":"fb538419b519613e3c2791e883ccb9ec611ef0c0de3b05b5be9b42216ad37f619bb548","first_seen":"2025-08-16T21:17:57.557727Z","last_seen":"2025-08-16T21:17:57.557727Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnyrnmpvrgmzesgdedsq.supabase.co/rest/v1/donations?select=*\u0026order=created_at.desc","fqdn":"lnyrnmpvrgmzesgdedsq.supabase.co","domain":"lnyrnmpvrgmzesgdedsq.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Jul 2025 04:33:35 GMT","end":"Tue, 07 Oct 2025 05:33:32 GMT"},"fingerprint":{"sha1":"27:79:DE:B1:71:A4:B9:32:A4:66:AA:F1:F5:0C:87:DA:F0:65:2C:6B","sha256":"52:D6:5C:AD:3B:7D:A0:C2:6D:41:84:46:4E:2B:C8:F8:1B:D0:89:07:59:23:0C:0D:DF:49:D4:6A:F5:DE:11:0C"}}},"request":{"raw":"OPTIONS /rest/v1/donations?select=*\u0026order=created_at.desc HTTP/1.1\r\nHost: lnyrnmpvrgmzesgdedsq.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: accept-profile,apikey,authorization,x-client-info\r\nReferer: https://savewelift.com/\r\nOrigin: https://savewelift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept-profile,apikey,authorization,x-client-info\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE,OPTIONS,TRACE,CONNECT\r\naccess-control-max-age: 3600\r\nsb-project-ref: lnyrnmpvrgmzesgdedsq\r\nsb-request-id: 0198b4be-b26c-7049-aed7-e163c8b0ce94\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=uI2Ytgw2XWNqP7WgePdI.AIKLmF8MdIaFbCy3GiHKjU-1755379053-1.0.1.1-OLs.VKCx5mYTO_HHn7qsWHP7oyX2XpR9IyAMHm3iVsdH27s.Omz97Iet6gFg4H822go4zw2Gpa.B8J6byiS62IuusaBtSsPd6sCGMCtWAfE; path=/; expires=Sat, 16-Aug-25 21:47:33 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 9703f58a3b3656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p2.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p2.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 16 Aug 2026 21:17:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 09:46:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71047\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71047,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=ADEV (Amsterdam Danst Ergens Voor) which means something like 'Amsterdam Dances For Something' is the tenth time its annual dem, xresolution=251, yresolution=259], progressive, precision 8, 612x408, components 3","md5":"b1d2b1699138adcc7678138f2c07bd45","sha1":"4c193874afb1bbf54ed03fbaa0727dd3be6f488d","sha256":"0b8c7c3882800fbd062b566942b49950c4019d6aacbc8eebecdd1f684ba7e871","sha512":"98e641a8f7a2dfbe9515b7cff0ad95058272c341f4aebe95530755c8d310403773c1bfe73b4f91fb568d953f5b82af91dad4fe16423b29ba55747a0253f51742","ssdeep":"1536:QIFtZn5jbMK4w8H3IF9rdmTXoIUffHsRbASJfY3bxelpGOLEg/:/PhdbMKf8XIF9rd6YudAicxGd","tlshash":"7363028f3e016bbde8c2550169f4378eafb5d4113df885a0e7a7b5a0243b0fb718a159","first_seen":"2025-08-16T21:17:57.562129Z","last_seen":"2025-08-16T21:17:57.562129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p3.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p3.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 16 Aug 2026 21:17:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 09:46:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67988\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67988,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=\"Ottawa, Canada - June 5, 2010:  People gather to protest Israelaas presence in Gaza  after a recent attack of a Gaza flotilla., copyright=PaulMcKinnon,\u0001, xresolution=202, yresolution=210], progressive, precision 8, 612x406, components 3","md5":"16ccf276f9da5980f159d5d41efadaca","sha1":"dd6e8a593426b63fa62bcf8e2a31f97f21ebc439","sha256":"dab9587c221ee539ff6b77429e82a04f08da904b519a2326638e76048ac3dece","sha512":"8c12002a6855d354e892addc05c9802fcbcd0cd935f0017d1b1024070ac679c3f73806a96722cbd15afba7ed666f7fb1b02dd60e4616256987c8204dad0a26aa","ssdeep":"1536:VqtKcp246sqPR0Oln8DUzG6ZW6pZzWmjfQbqa/QK:+KO24BEWK8DixJVjfQbhQK","tlshash":"ed6302a4cc4422450534667378e5439b7619cf29e3b40dae7cee0d357abe8817e9cad2","first_seen":"2025-08-16T21:17:57.564762Z","last_seen":"2025-08-16T21:17:57.564762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"lnyrnmpvrgmzesgdedsq.supabase.co/realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxueXJubXB2cmdtemVzZ2RlZHNxIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTM1Mjc1NzUsImV4cCI6MjA2OTEwMzU3NX0.ulEBQIIuw7miE2lULZp_lJMB9d37CkdUCNUx4aUYqjM\u0026vsn=1.0.0","fqdn":"lnyrnmpvrgmzesgdedsq.supabase.co","domain":"lnyrnmpvrgmzesgdedsq.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Jul 2025 04:33:35 GMT","end":"Tue, 07 Oct 2025 05:33:32 GMT"},"fingerprint":{"sha1":"27:79:DE:B1:71:A4:B9:32:A4:66:AA:F1:F5:0C:87:DA:F0:65:2C:6B","sha256":"52:D6:5C:AD:3B:7D:A0:C2:6D:41:84:46:4E:2B:C8:F8:1B:D0:89:07:59:23:0C:0D:DF:49:D4:6A:F5:DE:11:0C"}}},"request":{"raw":"GET /realtime/v1/websocket?apikey=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxueXJubXB2cmdtemVzZ2RlZHNxIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTM1Mjc1NzUsImV4cCI6MjA2OTEwMzU3NX0.ulEBQIIuw7miE2lULZp_lJMB9d37CkdUCNUx4aUYqjM\u0026vsn=1.0.0 HTTP/1.1\r\nHost: lnyrnmpvrgmzesgdedsq.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://savewelift.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Y84lSYIDDjaxqVtWNQuRzQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 16 Aug 2025 21:17:33 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: kDT60N6DQmPM4bMQ2Kl6VlzUJ2w=\r\nCF-Ray: 9703f589fc3b56ca-OSL\r\nCF-Cache-Status: DYNAMIC\r\nCache-Control: max-age=0, private, must-revalidate\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nsb-gateway-mode: direct\r\nsb-gateway-version: 1\r\nsb-project-ref: lnyrnmpvrgmzesgdedsq\r\nsb-request-id: 0198b4be-b244-7fdf-aad9-ed20e19f588e\r\nSet-Cookie: __cf_bm=l22xPMI89TmODxNBtHrNAzKr_JAXYTZcIat4gmboLW4-1755379053-1.0.1.1-jZP4XiTs5lS5uFhVy0QupvRp4_vPf9AJdCea5FglmAyr2G5v9F1rriYg2lJLPHtzlNuH3nEvPhF_4beqxZybacMRT9P9ahwFyI4iyVpte7s; path=/; expires=Sat, 16-Aug-25 21:47:33 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":30,"connect":30,"send":0,"wait":179,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-16T21:17:31.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 15 Sep 2025 21:17:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 12 Aug 2025 01:12:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 280\r\ndate: Sat, 16 Aug 2025 21:17:32 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":827,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3dbc0796abb2b37b479fa60284233a22","sha1":"c9aeb0b6bbdd459a7370e27113322184c4c20d0d","sha256":"a653666be02efc857f803b51d7fc668be272c1c28780b96ec44c5829330f5c9b","sha512":"01e99eaf549278e52a24188e1d3fcb6aea3e0352d11ad8eb96785e6a572c15d2af62bb0124bebdbd0ca361186c37f9c91b5565f939f124d58f2ff36b3756abef","ssdeep":"","tlshash":"6f01bd5359a0c91d137486280dd2f0088abaf3c78368684476eda5ee0fc5fd1c5eb5b1","first_seen":"2025-08-16T21:17:57.567225Z","last_seen":"2025-08-16T21:17:57.567225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":325,"dns":98,"connect":108,"send":0,"wait":108,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p4.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p4.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 16 Aug 2026 21:17:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 09:46:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53463\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Marseille, France - August 9, 2014: Protester gather with a Palestinian flag on her cheek in Marseille, during ? demonstration , copyright=GERARD BOTTINO,\u0001, xresolution=258, yresolution=266], progressive, precision 8, 612x408, components 3","md5":"2ff40773c6c3cadbc80db40a13c485f4","sha1":"401e3d0aea6e9f99996e0bc3b4dca768e29dd845","sha256":"389aeb89f0349c95339f89bba67c368c502d102e315b1e7a906f1decca64cd0b","sha512":"6e2d8c5e96129eeb691ec09fd3c3830aa9c6ea1b19207d05c018fa6fe4575ff055eac88d938a20a0f4ee90d8c05ccffbf92e112cfdace499d6ed145b11f64173","ssdeep":"768:oGjDpdDzUEgBBFbNjsBgK6+bpB4rTtY8ht6JIpGPg6lk6+oeW30lQGB:oGf3zURZB4gFjEIpG46QLWElQGB","tlshash":"3733f185ab72d4b6c428647331887313ba99474143460cd353fdb0a2fa6b5f75fb28ab","first_seen":"2025-08-16T21:17:57.570204Z","last_seen":"2025-08-16T21:17:57.570204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p1.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p1.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 16 Aug 2026 21:17:33 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 09:46:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47656\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47656,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Munich, Germany - November 16th 2024: Unidentified activists hold a meeting for support Palestine in Munich, Germany. Protests , xresolution=252, yresolution=260], progressive, precision 8, 612x408, components 3","md5":"2154b64f2ef58af08c17778e793ca2f2","sha1":"ef328a1f82c8f162f8484a9aac3dedf10831eca8","sha256":"d04d7a0081296144c69e1938aa8cd50edce2b758a8dec16f47835740d2e22fce","sha512":"fe354a5d0543f42dc4697723305744b343871feb349496a23a8ecc4fd65007c677b3a8391721d11df55aaa9561b9e4e1793448f81bef666cd689670597f27635","ssdeep":"768:85mYZdHtHErte0KN+2BnKIurMQAGx+XJ0Rdw+1xDdd03cYDCNyqq:85mYZ7NjB/urMnGMXJew4dnW","tlshash":"842301692e24ea35d94c1efa9cc8db931273ef554f91228d23fa111552362a53fb08c7","first_seen":"2025-08-16T21:17:57.572444Z","last_seen":"2025-08-16T21:17:57.572444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":127,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p2.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p2.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/p3.jpg","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /p3.jpg HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T13:28:35.973848Z","times_seen":13540758,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnyrnmpvrgmzesgdedsq.supabase.co/rest/v1/donations?select=*\u0026order=created_at.desc","fqdn":"lnyrnmpvrgmzesgdedsq.supabase.co","domain":"lnyrnmpvrgmzesgdedsq.supabase.co","tld":"supabase.co"},"ip":{"addr":"104.18.38.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"supabase.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Jul 2025 04:33:35 GMT","end":"Tue, 07 Oct 2025 05:33:32 GMT"},"fingerprint":{"sha1":"27:79:DE:B1:71:A4:B9:32:A4:66:AA:F1:F5:0C:87:DA:F0:65:2C:6B","sha256":"52:D6:5C:AD:3B:7D:A0:C2:6D:41:84:46:4E:2B:C8:F8:1B:D0:89:07:59:23:0C:0D:DF:49:D4:6A:F5:DE:11:0C"}}},"request":{"raw":"GET /rest/v1/donations?select=*\u0026order=created_at.desc HTTP/1.1\r\nHost: lnyrnmpvrgmzesgdedsq.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://savewelift.com/\r\naccept-profile: public\r\napikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxueXJubXB2cmdtemVzZ2RlZHNxIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTM1Mjc1NzUsImV4cCI6MjA2OTEwMzU3NX0.ulEBQIIuw7miE2lULZp_lJMB9d37CkdUCNUx4aUYqjM\r\nauthorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImxueXJubXB2cmdtemVzZ2RlZHNxIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTM1Mjc1NzUsImV4cCI6MjA2OTEwMzU3NX0.ulEBQIIuw7miE2lULZp_lJMB9d37CkdUCNUx4aUYqjM\r\nx-client-info: supabase-js-web/2.54.0\r\nOrigin: https://savewelift.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-range: 0-34/*\r\ncf-ray: 9703f58a6b6856b7-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://savewelift.com\r\ncontent-encoding: gzip\r\ncontent-location: /donations?order=created_at.desc\u0026select=%2A\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Encoding, Content-Location, Content-Range, Content-Type, Date, Location, Server, Transfer-Encoding, Range-Unit\r\ncontent-profile: public\r\nsb-gateway-version: 1\r\nsb-project-ref: lnyrnmpvrgmzesgdedsq\r\nsb-request-id: 0198b4be-b28d-7b45-a3ba-92fcaf18d94b\r\nx-content-type-options: nosniff\r\nx-envoy-attempt-count: 1\r\nx-envoy-upstream-service-time: 46\r\nset-cookie: __cf_bm=ZxSrNzD9SI4uuKPRZdRO2281AAjcu0vp4qB2KKYsVgU-1755379053-1.0.1.1-KymEjUXTL_nxGwKj2IoVquGsubnP3iu6nZJQ1Q4D_i2Tw8AHeRbPuFMz0ue2PY.DA0YmpnPLuVjtG5MigXxOjxb29VZSlVuDzCdZJddVjug; path=/; expires=Sat, 16-Aug-25 21:47:33 GMT; domain=.supabase.co; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6015,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8f9e95bc5d050b2c552bc04dac7537f","sha1":"7db1e53ad93e3dacc9f51e1c008433e75ac140b8","sha256":"77758f487405d9d85a3ce2d0c5e63cce0775176c571ea2e7924bc80c4bfcb6ed","sha512":"104677ccda1af448b39a92c2cd68ce50cefe5878ce2f25ec14e1ca466844e292dee05cbe02dbd05b3bed083c2f3f5eb893a2ffa02139c1548c1b139b5c2ee522","ssdeep":"96:5uLPisCxu5Pp9395qFoqRxoWsJVyIEptb6J/20colE4aCiW+pDqGx1zO:5uLPisCxuRp9t5qFoqRxoWAVyIE32t2S","tlshash":"bbc1a0753e241cac5f690453bd96b3b4bdcc484a24dfadf97eac842ccd14e50790c659","first_seen":"2025-08-16T21:17:57.574643Z","last_seen":"2025-08-16T21:17:57.574643Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"savewelift.com/favicon.ico","fqdn":"savewelift.com","domain":"savewelift.com","tld":"com"},"ip":{"addr":"198.23.141.202","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://savewelift.com/","date":"2025-08-16T21:17:33.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.savewelift.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Jul 2025 16:51:38 GMT","end":"Tue, 21 Oct 2025 16:51:37 GMT"},"fingerprint":{"sha1":"3D:C4:E1:65:A1:BC:4C:8A:10:0C:3A:73:4A:12:E6:47:65:7C:B9:A8","sha256":"73:CE:A9:1A:E2:7C:33:92:90:5A:FF:83:B5:05:FB:48:BF:2D:9C:8D:EE:B0:7A:1C:76:11:60:82:49:4E:2A:01"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: savewelift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://savewelift.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 16 Aug 2025 21:17:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-09T13:28:49.820296Z","times_seen":117127,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}