{"report_id":"87d43e90-c6e7-4a9c-b916-0237e120bc7c","version":6,"status":"done","tags":[],"date":"2026-04-04T11:25:32Z","url":{"schema":"http","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"104.26.4.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c#c3RlcDE=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"title":"Fanforus – Start Inspiring Chats Today","dom":{"size":251,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1bf4e2afb2ac7784ad5d36a9541e4efe","sha1":"ee0a11b4ac40bcd83431ecee42ad7d885e781cdb","sha256":"8042e9db87433f75c90b0cddfc6908625d3f33e51eeb0f9e3aed49f15f155f9b","sha512":"2a1214ac5c0bee37dc7fa0379390fba3c35126548842a99535f61828b587cd3c4dc5e89d4700a51a71f1096be663cabfa39201c39b7200b9434251f041d2bde3","ssdeep":"","tlshash":"36d0924ac0023009da30d67408d1b6a82485b409f1a49c03aa41e0745898752cc83094","dom_hash":"domhash29587ba7e7b6a059bad01e5966d41bff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"104.26.4.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T11:25:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"track-victoriadates.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":2,"received_data":435794,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":12823,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.gstatvb.com","ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2016-10-12","domain_rank":766151,"first_seen":"2017-11-21T15:40:48Z","last_seen":"2026-03-31T11:43:10.533913Z","alert_count":0,"request_count":27,"received_data":5454481,"sent_data":12717,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"browser.sentry-cdn.com","ip":{"addr":"151.101.194.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-05-30","domain_rank":23677,"first_seen":"2018-07-13T11:42:06Z","last_seen":"2026-03-30T06:19:03.592615Z","alert_count":0,"request_count":1,"received_data":83287,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":1,"received_data":49155,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fanforus.com","ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-11","domain_rank":0,"first_seen":"2025-10-04T13:16:44.741295Z","last_seen":"2026-03-23T01:32:52.685171Z","alert_count":0,"request_count":40,"received_data":1346052,"sent_data":32242,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"o4505715306201088.ingest.sentry.io","ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":1345712,"first_seen":"2023-10-05T11:55:04Z","last_seen":"2026-03-31T11:43:10.45746Z","alert_count":0,"request_count":7,"received_data":3574,"sent_data":4536,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"track-victoriadates.com","ip":{"addr":"18.211.60.51","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2017-11-09","domain_rank":197323,"first_seen":"2017-11-30T10:04:32Z","last_seen":"2026-03-31T13:10:27.143196Z","alert_count":1,"request_count":1,"received_data":125,"sent_data":437,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0f26c4fef5c57c74609218ff9cd8307","sha1":"775318e9725440a5f15b38282ae34e1ffc2ff6fd","sha256":"f6cf5442479e47229437e3dc631ab5f2a50120a9eeadd78434e58ed5760bb626","sha512":"2a2b96cbab4c90dfea8ce4061c89457b4ec326b4e1ddcfa990e7d9fbfc642d3f7df2bf7b6cc5481df6d3b085fd2bc1de2a36ae9112417906597973134b5c5253","ssdeep":"","tlshash":"2fd012651db1d175864258d73139e1207291756b6011f04d7ecddd5c1f15fd88d05d34","size":220,"data":"","first_seen":"2024-12-20T21:46:27.464657Z","last_seen":"2026-04-04T12:09:38.689264Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/js-chunk.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3aabb65281a0313d8a64488c03b1a6f","sha1":"d2075d6433436ff2b0a445675a23a84f2aa7b169","sha256":"380f56cbba459ca472ea5d303b6d168cf79b6e74dbc735837fef40f08591db6c","sha512":"51171e9b5f69c742e956454f37705d9f5c19cbcf9b09bac050b70cadb0561acb53782b4eb3ec84df52414debaccad6f17f0343c068a2d8c987e6e09687bacdbe","ssdeep":"96:VbUeZtI15J0Idq081frSyMvLmNwQUJi7tDyGqBNyQjLTSQ6HZ0xKwqy6D8ifhDwE:pUeqhRkfr7Mv6PQwxQqmowejhUD7s","tlshash":"49e1a6dcb385f3755366a876a03f7106e73e39491818b930828ed4817e75d4ee922f9c","size":7088,"data":"","first_seen":"2024-06-22T10:44:55Z","last_seen":"2026-04-04T12:09:38.680987Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/8.91ba656.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb0b78ef78d5064cad866e3fb9920e11","sha1":"c2f109887178863f6492a4f48b8688c7dc8111e9","sha256":"832e6d5fe43f599c0171028d25bf427f9c325520635301ccdb83d9d963f5db12","sha512":"99d9d6d7ef3f7f64692053e98672f886d8ed997ab664c7ac44ee67a4cb410caed262a15b9040f9344f8c2d16bc012d0ff9d467bd0bcc96d1b029ad29ae7a4c1f","ssdeep":"384:/tt7dN7JbcQzyzB7tb2o/bonPOtGgIFk5:/rtcQo900bCOAgIA","tlshash":"c66253d8b5e5f06543a376b4803f100ff23a39a9649da4809750d8f6bc7858ea167f2f","size":15688,"data":"","first_seen":"2026-03-11T10:42:57.55326Z","last_seen":"2026-04-04T12:09:38.644042Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1841.956f009.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbd77ab07c481b9b2e1b15934aad46a0","sha1":"c22200ee1d17f8a58794656b60918f6975f82318","sha256":"315f297408ecfbdb4c04a9bb7e3330909e133ad09a667e91f9eeb1aeb9347f60","sha512":"87fc5c64ee47d28fdf90b763e71387aa6c38e29fda38b8e4f7299e4ff6e5f3dddc418786a5658395668a47ff6786f03ad56602b83eb513c6ab0ec0cc45c270b2","ssdeep":"192:WH09dS7nq/0s/lStk0nWb8aQFDDTqGhb4XHncQ:GV7nq/X/l10+Rc/TsXHj","tlshash":"38e1a527f489e4b4562350c1417f48b2f22965dda5dd84a8f8efcddc2368e0a643637b","size":6886,"data":"","first_seen":"2026-03-11T10:42:57.618719Z","last_seen":"2026-04-04T12:09:38.649967Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1220.a0684e3.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b849245541a813dfa44462265563c812","sha1":"544ef810c39cdcbe4ccb9b19e5db78acd39d34be","sha256":"1e0218a15497efc0b2c48aab59108b53d96cb5d9cdf91c29f8faac545bc0c987","sha512":"28a27e46b70d8157f86d0d25199014c1da4b922f6982091dde67f577f0123cb561734550ca639309519343dc0a707ab23fcc7930b5809d2f6c79a445be98f707","ssdeep":"","tlshash":"0b516349f192e4b547af8080121e197bf225626ea350d8d07229cdd276e0e4da32ff6f","size":2959,"data":"","first_seen":"2026-03-11T10:42:57.580029Z","last_seen":"2026-04-04T11:25:41.276384Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/scheme_493_scheme-391-json.e858fd4.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee9ec7c6826906a145788c8e708b41ef","sha1":"4e2634694a87f32a59906adf11108a790113e741","sha256":"9603753109bb4bbde5f33757a7e9a846fc79b805f61bc2960069da3455d505d7","sha512":"f5083958e101b2bc0f1a48e045603ec8295f88ead7e5fe7495916d26061ca4b562f10485f5c8edb4c30885f3af34b94442a4e7fcad648c77dc84b9ffff25409d","ssdeep":"768:fvxnPS9XJhe+vGmHNcshjt5YO5RXHmSXH8Nh+N3g7LJVOEv:xae+vLNcshjt5YO59kNh+tg3JVOEv","tlshash":"c4138d6773452c282f35d7d18c5d682ec19eb27badc9eb89a3048dc01b947e7112a8f7","size":45450,"data":"","first_seen":"2026-03-11T10:42:57.548833Z","last_seen":"2026-04-04T11:25:41.310167Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/3.a1b7253.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cede13359ad69e090c08e5263328d723","sha1":"e290841dba090e56d977137e742533929e0d8767","sha256":"8662f8b7a4286c8191343ad1d1c0922d502282057c223916287d9e232e28e487","sha512":"fde0c69df920b2844e69983f43015adf2613b2409149171189e460d2cb68a5ac9d744bc20e282049ceec88bbebca2ef19a95802f54ca3741e3505207ed2c5fdc","ssdeep":"384:rRCCIEAJucUv8OlM65vV54rBXEOBriSARU2wAA+Euh8aOsGsfMbY8:rUCbNv8+M65N54REOBriS5AA+E28a2Iu","tlshash":"73b229ad7811b8355bea42e550bf550eb17d145a200880a0e7daecf468befd96037f2f","size":23393,"data":"","first_seen":"2026-03-11T10:42:57.567539Z","last_seen":"2026-04-04T12:09:38.676944Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1844.88923b8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"504eaae18a9697f3edd753eebd2106c4","sha1":"caab43ec373a1a25e3731cacc8f34360dbc7d98d","sha256":"8fb7df16a8df2277f9d43aead1e28f6edfdbc879ad91057c2f3868a195a93a8f","sha512":"199ef6541ee857f3aea1bbd3707adf870c08d5dbd61fdad95e4c712c8684ca6aecbee2a7ddad2c7cbd622eeeffb4c85d4a466958ddef728ab913f0162e0b039c","ssdeep":"","tlshash":"bb3121157047e5b5cbde40d48126c876e1763b8c344ad8b036fa8cdd0aa0f69e22e67d","size":1725,"data":"","first_seen":"2026-03-11T10:42:57.617713Z","last_seen":"2026-04-04T11:25:41.275617Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"698658bec11418b53ebcb5e1113a0e79","sha1":"4dff7d75d5cb9d9431ab7b29d47ba06c93702eed","sha256":"74c920da552656b4257a74f7fe5bfd65bb730234980d69405c4bf6ef8103f5f4","sha512":"49119baaa2cb3eb68f7c0fb25954217dda3174b16089b6c6604ae6db19620b67eaa30045de21bc829a9c054f3f5d00d8a2afce595a3e16d03635df0bef2a2da7","ssdeep":"","tlshash":"b5f0ebbc16a014e95b0f43aa04ca6829d0ae981bf749bc6100a19e14a32a4eae6241c3","size":562,"data":"","first_seen":"2026-04-04T11:25:41.324784Z","last_seen":"2026-04-04T11:25:41.324784Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ac56a2a780be1dcf4bf3877400d75f6","sha1":"8c2b894ce21b3aab3aa622ea3b6b8eac0f49df86","sha256":"56a20eb613b5b3a4870a5333e7fd8135f02712327f5a095e8c93f2c13f9606ad","sha512":"e969585e0041aeea7739509d177b0973f85dbdeef2e056245fc7ed66271dc529f3c429fbe4d22cf58635602391c70ef751df44095ad0756c7fa99105a6b11aa4","ssdeep":"","tlshash":"2390008822020c0000a0aa082f0eba88b0023022a0a0a8223e0ca208a320c0baa80280","size":52,"data":"","first_seen":"2024-05-27T04:45:04Z","last_seen":"2026-04-04T13:15:06.910179Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/vendors~app.404e1b8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc0c6ea98ea35047e60ad068236f69","sha1":"c7cb64c9597b4430c96fcc95873cbc9d1cd30d15","sha256":"0758f5dc5422f2e9c1e13a0faeba758cc501ec14606108e7f3f0082800871177","sha512":"8d9a2aaef09f00bcf4e0f1e42b601178fc7cd61ae8928a24d31a38204d61609a5bb6461b380254f7696fb8d95613dabe7126700449850461006042c107710733","ssdeep":"3072:lX7RtswpC111VpMUjuNLGGvoo2PLYz0cnq:BRt14u0ZUq","tlshash":"ff04d5cdf695b07103e721b5407f550bf23ab858b80e8490e256e4e57cb898ea06bf7d","size":190185,"data":"","first_seen":"2026-03-11T10:42:57.587945Z","last_seen":"2026-04-04T12:09:38.664265Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/app.2301f84.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7c71233407148b973d3259d7e31ae5","sha1":"5d9c468f63a86e15fabb74d0066b09f26b9d18ee","sha256":"65c23a088fd4512e4912afa1e7458c390a4b7153def8e3f8f47f578bc4eea14f","sha512":"cf575d3dead589d16c622f5197e53b85db446e254a0c63e929f58c8e07b39012f0f47c409cf9829288b8817581f913dd3d707b66ba4c344800fed886084c9d77","ssdeep":"1536:V2fLLWazlcaBoXwWKE57Asvj+Az2d3lnC9kejNtabt:V2jfq6Em6KVdVC91qbt","tlshash":"d7c34c5d76c8710902e30261b6db0247f23897d1f129c45ab545c2ab22d9ecfe37bf6a","size":127123,"data":"","first_seen":"2026-03-11T10:42:57.552119Z","last_seen":"2026-04-04T12:09:38.652851Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1071.5fa049e.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4af9af7ca15d63cfbf4cb828a7bbdd64","sha1":"d60c6dbfd9cef114e7f8c520689fe09ae91fdc66","sha256":"b5aa3ac85493f94d676bea63cb2751c5193c9db608da4de01f2cdc6d0b66340d","sha512":"4a9f37e7e307dd75126a2fee599f3d7ec6d04a3022286131422b4048c0c131e566cc7a0cf26b6d5d8bc7df271c7984c8c467f16617b1c6836ea8ab98b382fb44","ssdeep":"3072:KUk6gEqjE8Jq4oBRz/Jdz+VhK2wuGQHOwhsxaXvJDRd6ywMkDeT4Y2oXJJ+1:KU4EqjE8k4MRz/Jdz+VhjwJwh6aXvcz","tlshash":"d164f921f1d4b4b407a740a051274126f33d3a5eb60ae0a8fa6fd6e91794f45b227b3f","size":333168,"data":"","first_seen":"2026-03-11T10:42:57.605444Z","last_seen":"2026-04-04T11:25:41.297148Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1837.eb9a318.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f9403e50deab1cad33fafd52565ca03","sha1":"6b765dd22c6fa74fc480ab9a820459cdc455c8de","sha256":"dc073a3778b23aa6207d040bd25fb8e5ade0c98ffc2f8d7456be2bdae470cb97","sha512":"ba5e9c20c620edf59cd4b95c1ff068b5b1768658c8498763030eff811fff7e4efcb41eb456f16e265fa829b869f10d2feb262f79b29e7536dd13e2f651032383","ssdeep":"","tlshash":"8d6130eaf9728429437140c0a03f8965f12f395c6789d18d7ad24cd97a60f9da100bbf","size":3276,"data":"","first_seen":"2026-03-11T10:42:57.590596Z","last_seen":"2026-04-04T11:25:41.306335Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed4cd7de4139dcb963d5fab0d83a7a0","sha1":"3d691894e9996ffd6363c146791d4fe647a00510","sha256":"5e095b948cca657faca2ff50b93d999aad3aa6bbf2e65e528c1bb98af2ebf600","sha512":"6444a190a495fe1543e361896bbe5cc1f9afc4c8161de632e73f2f2c46551eb4f97531f17d855c85aa9e88acb0c0020c507d5a17a1b79454daaa8727d8ba7e27","ssdeep":"","tlshash":"9e116baa2db74a305a5f401b2a7dd61870a3202b7002c0a679fc891d6fa5f860d15fec","size":948,"data":"","first_seen":"2025-10-04T13:16:52.589889Z","last_seen":"2026-04-04T13:15:06.910645Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc2fc90d3c765ac4c013a87e725c8176","sha1":"6881b83ccb8f4b01f143b14e69d28a6aea7114e0","sha256":"a755206e1ab9fdb25bb1a8f20f3e1dafc068ccbdf1f88c44aca06a532ef901d8","sha512":"d69649e1eac2d3738f9fb925d186f348ede543a824934ee9e6949770d7eadaa83a0dc386aea22a029dcb1680353ab88f5f1f8ec234b2dea0f0c23f8dfb82e8f1","ssdeep":"192:s0JScOswiWLYYxScSRs3lr0FKPwtSWds8V3Y+slS:1Ir0AP8SWd7IM","tlshash":"8892245d6dd7020b033250bc954f8091ba75ec63561adab1ff5c86ec2fc8198cab1be9","size":20447,"data":"","first_seen":"2026-02-17T11:11:10.682141Z","last_seen":"2026-04-04T13:15:06.91214Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T14:46:24.610173Z","times_seen":594101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1729.9ff0bea.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"718d205df323b9d0ecade2cc7022cb63","sha1":"6d670dc57422abe3f8b62cfa0f25fef3670f75e1","sha256":"5952cb6df37aac809e8dca7c648d1507e27db33fe73b9e218fb298ca807aad77","sha512":"f478746696ff8d613af4a8f6faa16dc140adc85a2c0c7b18a79542c5741a1dd8f1de80123a4b9bc8f4347d490c0c60a502d9ab838d90075fd35fba42da115a1d","ssdeep":"768:uQWmPGGpBQGdpTCQ7QroFyt2TYiYePYMHwMY+Y3E3EabpyeD:xFq4TYiYUYMHHY+AE","tlshash":"bc53c6674645341eb23bc633f8c57a5d2028c553ee230dbdf6966a2ac7862c6237339d","size":64636,"data":"","first_seen":"2026-03-11T10:42:57.565667Z","last_seen":"2026-04-04T11:25:41.311122Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe2ff4d73d27a9563576aa762d2705fc","sha1":"0a7ada337830244320d43be242b4127681c113ed","sha256":"9af140e5271a8369dbeb745d96854632e013bd892ef8711a32ec4619bb08bf7d","sha512":"40c7cb4b7973f6169a8b32e8c0ac29aea912c674f35175d2c888aeeaaa5c3e9fb2baae3b69361e23c4d0f2e47d4ac5ee4a5386fa421ac63e332d69a703e04519","ssdeep":"","tlshash":"07a011cc320388a002ea0ba20b2f320020a0200080a02a200802a08a2222c83a082aa8","size":79,"data":"","first_seen":"2023-03-29T22:09:41Z","last_seen":"2026-04-04T13:15:06.912594Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/7.46.0/bundle.tracing.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.194.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5be6507084644ff1096237e60dabccf0","sha1":"eb880c4eb01758a72ddbb7cfe03f0ed64bec5db6","sha256":"8df41a67fc8dd45d4129a58dbc5186b4646eaad6d99bbb14782cf0db76f0d0d1","sha512":"10c33c4732d8746529fe96e744b3e4386f85f70cb5a04047aabb25d72366a163fc47025baf439b0fa9881f81e00d4622451fc8a68129f055b56681d6c9fcaca5","ssdeep":"768:/xvJ5NIlBZygE31EKG9cmyckfr34iG8saYJrWnADQBFVA5YJIRJ0Emrav51wSa/2:pvOkYLGQv51JiYxrbi50eNeTL","tlshash":"7b83c5cab1d2b03147d71ae1503a0101f73a5a50744bc1acba7cddea6da644fa2b6f3d","size":82741,"data":"","first_seen":"2023-04-27T01:47:28Z","last_seen":"2026-04-04T13:15:06.904171Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/5.207b9ee.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"381f1dc828f03c845c8c5a7563431a0e","sha1":"25fde8748634fe4f83af758f13bebfccdd5a9055","sha256":"d3e69833394cca725f607fd7dd8467264f6dda065db9295059cc5a8cbe037a70","sha512":"949f24241861787d5f1b19514aaa1fe75d660b634ad093cb090b5431f4c57de19ae66b4a64b6d9ecd73653e94f46f2d003a4556dd0b039a81e44be0b152d4b09","ssdeep":"768:9XYtERVuEtXNeleCCKXCfY+PKJfGOWKbxP7yNKRUzE8A3T0M3lrA26XHSRzrwKNv:NIdObK9+EbHrNCzfT/Ze","tlshash":"c353b7c8b5c2b4218363b5b1903f010bf37f6984b8ad6524e164a4e97d7498ee43bf9d","size":65496,"data":"","first_seen":"2026-03-11T10:42:57.593879Z","last_seen":"2026-04-04T12:09:38.678698Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/13.be78989.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfc5047fc32fe3de77e54bf345143c00","sha1":"ecd2b71aa642fe4dbde82194eeae5b5eddea57ef","sha256":"4d2a97c3c1596d2bc3d420997daf7b85b02a1c5285702145dd4bef5ae1ef26e8","sha512":"9ee0c55e886b2eb11fecb428c2b5c2a217bbf609ead3a6c91b39df011272a335d66e91891493738726c7a2feaa315c81ddbb0d048c424cc7fcaf3abc78a23818","ssdeep":"","tlshash":"07110e65d068a8f002974242522aa963f0a8206bf755a0f03d6fc0f92a64e5a9427f6b","size":977,"data":"","first_seen":"2026-03-11T10:42:57.556184Z","last_seen":"2026-04-04T12:09:38.680192Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/10.7e5a1ce.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cf65a4087f937fc226654aeda4bb616","sha1":"d59a2d907b2b249f1be9b2ff3005e9dfa2461d56","sha256":"bbd688898ceebcaf9fb4f821a08c3afecd04dc7cc685d99f6972248d8e69e359","sha512":"590195ec9732854765898ae8884dd22127bdcbe16cea0dd3a241c1ab57e49d3fa911e840a189e48b6220c0d66c7fdadab8e4c29a8c743424d1269cd55deaf27b","ssdeep":"96:1em6aFuo12PtRQBL+NE2SGJ4bp2Fgq0pesEsYJ9CJv7+0ahn0R2xz0NWa0pE/Lfl:3QRQ9MEM4bpaXuWX1qkLYsEAY","tlshash":"9ae1a060e9e4a0f01366c2833356ac33f59b311df6eab5f03255c2d89796b489517b1f","size":7270,"data":"","first_seen":"2026-03-11T10:42:57.600082Z","last_seen":"2026-04-04T12:09:38.653861Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1900.14e1382.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fab6715050049948331b8099adf01f0","sha1":"0010c0370c3a328f72f8c1dd90eac520ad982249","sha256":"4456216a6ca1932f6856639b407d760cdacdb6b7b8044378c758a42977bfb8fc","sha512":"b3d5a16954ab9175a2dfee13ab6160fec29f7ca892201e7c1741f14aea628b63b53bcba401274f5055645cd79f867c3533aa8662cb2218d204ddf0fd97026e21","ssdeep":"192:aKu4zItuq96A9YYL9fDC3lpuLEjAHXGTf8Ys5UgejIo9zJ:aKu4zIsNiC36A4XWZtH","tlshash":"6cf1759dfbc9793913a3b0b5b07f110b233726c568994489d229e7c02e3848e7257fad","size":7632,"data":"","first_seen":"2026-03-11T10:42:57.616557Z","last_seen":"2026-04-04T12:09:38.648689Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KNBMWP5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"280c0191270f368913ae363c0816e2c9","sha1":"3a2859a1a86d7f3150ffb810c8b14ef58271a644","sha256":"f0d34cc40d36ad2d1fac87891525375bb334ea1d90e4220b471c0540f7c57ed6","sha512":"e2bbff7f218b4cf0dd9cbb49cac17254bbe84601302f3397c19e60ee81480a339d685356f65ba00aba791e171856f6dd7df8494ca398ed4d7bc533714dc5529f","ssdeep":"6144:I3eqQO998DP9cGb/F8x/aGW+/5EiWTtcoPlgfWH:6v8CGbt8UNic","tlshash":"349419cdb3d6746643a3b478943f018ba17a29e2b84cc895f185dcd42e74a9a4273f7c","size":434345,"data":"","first_seen":"2026-04-04T11:25:41.312801Z","last_seen":"2026-04-04T13:15:06.907908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c4c3bf9e143f6ba189d71e3beec8b6c","sha1":"5487a64b360bc572873ddd6e8c8dc3e46a858b86","sha256":"75c43eef7caf755935420a7802d83ca8bb76c4ac3ed5dad4dce69ef10e8a1783","sha512":"1f0b5029b2e9647f96884906647463da7fa3fcf624a5d0b68b2fb8016e8672b0d50ddf1596b2ad521bffa25546f1e3a51a7388b6a3af9913733bc84a645feb86","ssdeep":"","tlshash":"7990045d70c1f0040c31575c1177110531174cd11434000ccd04d175355100fcc7d7cc","size":40,"data":"","first_seen":"2024-05-15T16:22:55Z","last_seen":"2026-04-04T13:15:06.913122Z","times_seen":790,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6009140e06ad0a033dfafbbadecddc75","sha1":"269877a97ae1a1c081b44331769b19bd74de2863","sha256":"b5e9a9527d5bb626e7ad6c10c44937ee530657535ff053bf197c4d84b12c3dd8","sha512":"0af8b8aab41905edc28f3e04364a107e6de50b895bd249d8e1183da218a8cedfb20e4466856377e51acc42b2fd2fbd4b8bb9b5ce4be9c86f28c6e2386ef609c0","ssdeep":"","tlshash":"a7b092d63a84583e06966227265eb28a39f1448299249c845528c990a528d8b985668f","size":117,"data":"","first_seen":"2023-03-07T01:18:10Z","last_seen":"2026-04-04T14:25:47.837697Z","times_seen":2792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bb8d42087ff0a1891ed64ce1a7fb43f","sha1":"de1cab48d35edfe3e3e3aae17286b9de64bdaecd","sha256":"479f5ba7f74f7c0c8c622701144d183a848df23b5d068830a272b3b6d9049e6d","sha512":"e543741ddfec16313d3eee52e745927b5fa43ddb119551dd6ca706e5a35b45304df875407a7f76540f0dd05af9b57c1af4add27fdc77ea19a7f7e6cb17bac997","ssdeep":"","tlshash":"4390021ab258c91606f08a14d17726ac551463a9002598d6446b28099c066d2010a270","size":51,"data":"","first_seen":"2023-03-07T01:18:10Z","last_seen":"2026-04-04T12:09:38.700095Z","times_seen":871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9284dacc9c4e6e489c456fb43f3d980c","sha1":"897ad1896e77a06bf32c85a8a3e6be684cd7a14f","sha256":"c97fe2c97ec3fb6017faa1746149381172eabb97c86e5fcd4b94178e3f415f83","sha512":"dd4ed962c1bab50ddf72ab21457a6a8f9abc51a7aec3bcde947fbfc1c4f956ff367e14c297ac652453ecd12bf5f6cd69f1167a22e9ba43b5d3797ee84f97fed0","ssdeep":"","tlshash":"88e0c648fb64c3b3298d08362666b200088200e2841b98124aebc8c82b30ed8208250a","size":307,"data":"","first_seen":"2023-03-07T13:57:01Z","last_seen":"2026-04-04T13:15:06.915277Z","times_seen":948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/2.f34159d.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efa8efd7a51879b91b38ade78f07baee","sha1":"866b785632119405f1efc94bfd357935f32d5620","sha256":"ce49acb7c4147c32532b8468d977807926a2d23cbaad5487d5004668d1f1ac6e","sha512":"36ff5ec5210e25b93f4e344a5e8f7636ac54310b7f81ca3ccb20b90e2867737956e66c187db28da5ca5d99549cc573aa89db8521787322687225b52429fff1aa","ssdeep":"768:veg1X0qGV2p5vZkC3F7FKVn0mdQGWyvd4YD/1+aIH8:nkqGV+F7FK50AQGWyF4YD9+aIH8","tlshash":"c953538af6c7f0650293e5e8807f102af33e7a99341e8424f666d9d53c6d6489133b7e","size":64452,"data":"","first_seen":"2026-03-11T10:42:57.554669Z","last_seen":"2026-04-04T12:09:38.679425Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/14.f703ae8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac33f8827ca019c8923b2d3a3cf89330","sha1":"6d5978e546a9ef4b26b8e3f9aedbf53bf456fbb2","sha256":"27308205b23c0a70ed4e572bbde00166aa4f13e85f853c5db883b12154f7c7ee","sha512":"673d29e27b0263a7f4d7f636149edd9c93db9d58fd89596da4d521e717ced5285c6ded9d252aeb26a0604bb5b4ea2219b546bfe0e0465bbb5f89cbbc9c56b279","ssdeep":"96:ZR8nTPVMY/a/4OJhBuRAUPpggt/NSaqFaqLVxEVhWL1QQ9K4a:ZMTPVMY/agOJhvBFA+L1f9K4a","tlshash":"ffb10e98f156e4b2075607d0b9569c62f20c082ee6afb2fb7a2182c32530f4dc11af73","size":5439,"data":"","first_seen":"2026-01-20T11:53:12.864518Z","last_seen":"2026-04-04T11:25:41.285235Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/44.a092ccf.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a1b45f1081cc5f46a5a0240caf36f1e","sha1":"a9499accb7c52e8abdbeddac8f280a64fa7a223b","sha256":"5930621d00fa98d39fb50e53ff58a30535c374c7fea52548cfc2bd7336bc9d0e","sha512":"6e4ef571f824f8dcd70bbe2e61b0c147d5256143119f442e28332b8e902ba1d552cb501ed794b7156400e75b809f24b18dc4c6d543c2a27350d247db7f78a811","ssdeep":"768:JWytW3MSCqFAQuf+CoIqrKXQ3bmIMseG4NWRIZcFKU09I:JXlWkG9IsjmIn4NG0K","tlshash":"edf2b65985e62c7a4bfe02c5b0f3494c804c0206f25bbcae75e79ad632187dab1c7d6d","size":35884,"data":"","first_seen":"2026-03-11T10:42:57.589671Z","last_seen":"2026-04-04T12:09:38.672525Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1893.b70621e.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f491fb4c2dd86eb8c4d3b7c050962d0f","sha1":"cd166af811f540eb6168585a3066e594002345a9","sha256":"66c8e0ca954d2ab197ec659c49164ba3fd46ef5184aab97aae8058b41bca90ab","sha512":"7ac42142f1624a486be11a70e471d1e55243829e01e956deb18300071471bfcc8e5012e248bcf06814788f8d1aec80454869c74e488602a5146387c0545a85d9","ssdeep":"","tlshash":"ff018eed5302946503a39c964b3f7b63b19c21071e8695a45db3cae8376e94ad051cf8","size":779,"data":"","first_seen":"2026-03-11T10:42:57.594949Z","last_seen":"2026-04-04T12:09:38.659499Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/260.0ef7ac4.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e1b549a0ab320441521c440816f8d1e","sha1":"d42dc3eb0216a88a8530467622f34049fab4f726","sha256":"5d89ec5f4c13fcdacd2c4b67763bbaac5b6caf958cf0d03b7d9533acdd1108aa","sha512":"9064e60504dd2c6bb6d3c4bbf3428fe57feddb6b0d528e64a13f1c06cf8a4bc1aab5b50efb95b1f990ab0638a3fe0d8ac0851fb5725138d0de6eafd97a4d3aa6","ssdeep":"384:rVL1+CX2RJQWRYWNs/nVd3ZQnmPP5sYmCgVcPKpcvJ590mp:SJQWRzu/v3uO5swgVcypcvJ5amp","tlshash":"0142fc7b9911793b65a36040feb37c16b6ba2f55d5aa5410c6f389bb0392cc0b403f97","size":12454,"data":"","first_seen":"2026-03-05T13:51:48.545106Z","last_seen":"2026-04-04T11:25:41.266253Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1.0c9bbb8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6b5d4ad7c15d9c2328045c73e6a7ad","sha1":"abc70e92183e41e2d640a648f7e2f49df3f51037","sha256":"6385200bb55a8991db09b835663333ed727d338f4ac24f2b794f615daccc190a","sha512":"8ae16ed25a9b6c72fa791987103f36c2f529f515e1a73aa14b21547bc4aced0e4eeae59e6a2013e4425ff6c1ca4aa0c8d329875b8c2fffe82908961a06739a9b","ssdeep":"768:dde3fpImXMv07cAo0eWfn+6IkKqIszSbgng+HQ:dvmcv0gtaf7zwgS","tlshash":"db33b68effc6e40d0762457595374223f23e7a8a1549e061e643cc81791de8bb322f7a","size":51992,"data":"","first_seen":"2026-03-11T10:42:57.614111Z","last_seen":"2026-04-04T12:09:38.677783Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/22.f8ef576.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8727cf0ee1588d8c0059151064c7699a","sha1":"421a33524ee3f78f355ecde662d3ca65072889e2","sha256":"1424b955ca100ca5b7bdebce4e4cbe3e8d344de47ffffe9b1ce89442db9520db","sha512":"563b6672b5ba7d95057afbd04cfc0bb54314d65763f275f97523be8f3c8c0a149ead62bc2e569bf66f995c9c8f11116a7ced3ec5d53339f8d7eda8a69e474d33","ssdeep":"96:C2PmYruNkAXRZzUyOTYQ33bhMDbVkDvNdcAhXhHUOOJna/ylAmcvCyLDD77cAb:C6ruusPqZwa6lA5vCAnncAb","tlshash":"66e16537e651f4750b224053e9164833b2be066df23960f179bac5da18d2b46621fb3f","size":7162,"data":"","first_seen":"2026-03-11T10:42:57.591562Z","last_seen":"2026-04-04T11:25:41.294347Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/362.3bcc766.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b8eaf9c047f34105e42827acbf8b33","sha1":"9c16213684e9650632f2c921f69fa53ed1831c37","sha256":"5f025c1dae9a42546cefe800c7c38b6a0e67fb6a14fc1959a4ecd18c87afe661","sha512":"15b8fb8a8f83f14b8e0976d8430203b8bf9f6ece1740e54ba61328e49d53580d3f08f445da74fd1873ae23ae90ca09271c294f4242e21abc4733c4d9ffcd33f2","ssdeep":"","tlshash":"c5412323b189d5f20bb341800115117ef3746669f745f4f0b3abcae619e98459113a6f","size":1922,"data":"","first_seen":"2026-03-11T10:42:57.549957Z","last_seen":"2026-04-04T12:09:38.645998Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/runtime.e24e54d.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1871a7457a5194209f78a5d521d22b","sha1":"408581144a00048776bdcc1eeacbcd9e53727420","sha256":"485dd14b3632869c9cec52ba07efff9aff32c6eba23fae12cfc7e22425f1018b","sha512":"0cf0bfb60a81c952161b566e723801f984bc3a2104a30b1a609470e7cc6e1cf987bc3ed6ca9e8d1060f8f36acb47462d284dd49c74e760de45fc22ecb927d2ef","ssdeep":"768:xByNhsWUf1cKUOIPXwlicJ/BNGyUtJZWenEPQhvSb5fYtrCz2:xByN8XUOIPXwEcJHGyUtTVCevSbJgey","tlshash":"0c330cc9fa3e8f942f6e59836d85129014087c9d7cb1f8b1d2edfad50410a7470b6aee","size":53645,"data":"","first_seen":"2026-03-11T10:42:57.608835Z","last_seen":"2026-04-04T12:09:38.673397Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/16.aca1bab.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1547edefabbe4501ee199eb2065d142d","sha1":"b64594e2031b199235e77f7ad9f3b12365e8c3df","sha256":"f1a019664a83be324e8c787601db61b31929890c2815367b8297f9c3bfc80118","sha512":"ae55b13450f40f297b40d2a4b2f9b5c2cbb64bd6729401b5ac9a6f3bf80bfea4379f647b9afe6dd50d46dedf789b66c12435384c2fd65222e6eae0ad9bebef79","ssdeep":"768:h1ulaxz5I5Uxc23ldlpBEzfbDb1Cqi9UuTw43q2uQ68Q0sloCDDcMJj4Q:h3c6ldlpWzfbDZCqZeszPBb","tlshash":"bd93dd9932a90b2b13be60fd99f641936c7f3b5637759c02f8a1e612a7113ad303d217","size":90359,"data":"","first_seen":"2026-03-11T10:42:57.603485Z","last_seen":"2026-04-04T12:09:38.668455Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/0.706e729.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8772757ea909192eeb9ce2f62e912b27","sha1":"71243227dc83f1fe987923b91d4274a0f44483d3","sha256":"98ca61e0720e067533a63f1931b6d961bf473ef21448c180c20db0d236820645","sha512":"2807a832c6b29dd74cc08eb7726fa955f362e49e226e2275093a2b6b7e2102b1cc25ac54053990c1e0c5a2d8c18117acc07b1f6db493a83821fa3a29ad6f3ccd","ssdeep":"384:7gwDakELxg02CaZdsruVKMMamaUX+C7SdVsLS82oPYBaZK3Y7cC:ykELxgx7XJmaj+4B2Hv","tlshash":"baa2e7cab6a4b0a203e771f040af590bb3bb6529744d8460f750e8e56c7921f9637f2d","size":22065,"data":"","first_seen":"2026-03-11T10:42:57.543377Z","last_seen":"2026-04-04T12:09:38.676081Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1.0c9bbb8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1.0c9bbb8.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2LLEaBLrWR8b7bXfy3DZPzGOfSXwa2YRKkJyQXwdRL9X0E_QT8x-vUyvNoNMFHm2LbEJfc6Qc\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:27 GMT\r\nx-goog-generation: 1774965146997689\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 51992\r\nx-goog-hash: crc32c=a2oohA==, md5=LGtdStfBXZwjKARcc+anrQ==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:27 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 39\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E4Br5Q99kY4yk66e1umsxrab6G8C%2F7QM5pT1dEIi58c9RYX17RU0z2BCpP8NfCESn77DKVMQ%2FFrNH3g5EHaG%2BTCj0MHi9%2BJPBv8mqMmjhsgj7%2B4YIq5MXXZp1ZPt%2Bw%3D%3D\"}]}\r\ncf-ray: 9e6ff36e2f4135a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":51992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51990), with no line terminators","md5":"2c6b5d4ad7c15d9c2328045c73e6a7ad","sha1":"abc70e92183e41e2d640a648f7e2f49df3f51037","sha256":"6385200bb55a8991db09b835663333ed727d338f4ac24f2b794f615daccc190a","sha512":"8ae16ed25a9b6c72fa791987103f36c2f529f515e1a73aa14b21547bc4aced0e4eeae59e6a2013e4425ff6c1ca4aa0c8d329875b8c2fffe82908961a06739a9b","ssdeep":"768:dde3fpImXMv07cAo0eWfn+6IkKqIszSbgng+HQ:dvmcv0gtaf7zwgS","tlshash":"db33b68effc6e40d0762457595374223f23e7a8a1549e061e643cc81791de8bb322f7a","first_seen":"2026-03-11T10:42:57.614111Z","last_seen":"2026-04-04T12:09:38.677783Z","times_seen":54,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/0eef623cf41b20b6c8c6382d55ac5b601757677321.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /0eef623cf41b20b6c8c6382d55ac5b601757677321.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 157922\r\nx-envoy-upstream-service-time: 70\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: 0eef623cf41b20b6c8c6382d55ac5b60\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":157922,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0eef623cf41b20b6c8c6382d55ac5b60","sha1":"7ba739369ed26d1f3a6e1e49583d885bc0978839","sha256":"0189921d64ef19ec172d1e2dd4e6da686c7d732b323b8865f8b9eb498471217b","sha512":"946b74a6bb49ddec5c58458b4b00e5693f8ddb2228881b341290ab8a746df7df7302035adc2d9a63a0d44b97fde43d1cb382bb5270bcfb215b24c0380aadfa40","ssdeep":"3072:8nemHbYugaY3WTu5xQ/1Esn6O7tiL3zB6/WtQC1dbN:8eegaY3WK5i/1tn6OZi7oRoN","tlshash":"54f313912063c254e8caedb85abd18273fd73566647e2a4eb1fe94dc137323280b6573","first_seen":"2025-11-29T14:56:43.978576Z","last_seen":"2026-04-04T11:25:41.256206Z","times_seen":7,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":283,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/browser-toolkit/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:13.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/browser-toolkit/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 152\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58; bannerManual=true; was_visiting_landing=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":152,"data":"{\"isEnabled\":false,\"idVisit\":\"50923a29-6550-4057-a01e-a61d97d7d96c\",\"sessionTokenType\":null,\"clientDate\":\"2026-04-04T11:25:13.470Z\",\"gpcStatus\":\"false\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:13 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 30\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWmojJhyShgYDiB5v7ILGR6DlRBs3nglfmPH25fVsRetBa%2B%2F5%2F9IZZLGJDdlI4fhH2xvUCpdQTIyCJsGPg39BBkPagmg4GoCRRgUGr6jmnWkCFRQTWs85nC2mssIkw%3D%3D\"}]}\r\ncf-ray: 9e6ff37f3b4f35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/dd54ce43763db1cebf6fd26978b83c931757677318.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /dd54ce43763db1cebf6fd26978b83c931757677318.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 127452\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: dd54ce43763db1cebf6fd26978b83c93\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 0\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":127452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd54ce43763db1cebf6fd26978b83c93","sha1":"58c93319a880cd338981a68c3d94109566918585","sha256":"e839d1ff5d31e7536b7958a7cd8002d99b23353f8c1e06836502e38fb2e33936","sha512":"e5d6950e9e54e7670a93632de9da01bb436233e3b2feab66ddcdd8b1e56a970bc0ae9933bdc86cbb5da64f0072f6fce6385af211a98bbaeaf4e14a77354e1bae","ssdeep":"3072:unemYIz68WxzGtA3sylHhwZcZ5yVQyrmQKIiO9JliWse:ueRmWRYONeeiQy6/IiO9JliDe","tlshash":"12c31279c3e62604dd7f8e78af1a10f4b3ab43f9883dd6a924f0908e85d3429e4de045","first_seen":"2025-11-29T14:56:43.994762Z","last_seen":"2026-04-04T11:25:41.258485Z","times_seen":7,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":164,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/83a0a3a335b8671f17afe8603570f9721757677322.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /83a0a3a335b8671f17afe8603570f9721757677322.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 114222\r\ncontent-type: image/webp\r\netag: 83a0a3a335b8671f17afe8603570f972\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 30\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":114222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83a0a3a335b8671f17afe8603570f972","sha1":"f59c3dc2543e55cffd272cf6298b533703a8c939","sha256":"09eaea507c7f6cd43a0c6b560ae13ea1d36b214e10a66a2c5c713b41d84c6510","sha512":"bae183839e51f2de86027137ac196c2794c7ab14b935007b05e573436b3d324d75ee436ac1ef1b2fe21b3b6d3778d139c0eff0daa00740fed7df11c9cbc6f40c","ssdeep":"3072:Jnemrtmc8ubH15GEnLOZ9lHj0CSBbecAaGIx0ukh6Yt9:JeiYCH1QeqZPHIC1cyITi6YH","tlshash":"e3b312f416acc42acedb0035db10c6d76c5b61d4d3c96b7311287de19f28b572e8a9b8","first_seen":"2025-11-03T14:58:22.234404Z","last_seen":"2026-04-04T11:25:41.26205Z","times_seen":8,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":219,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/f2d4f3877deef9a3b0a3ab02586b60a71757677311.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /f2d4f3877deef9a3b0a3ab02586b60a71757677311.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 2314620\r\nx-envoy-upstream-service-time: 57\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\netag: f2d4f3877deef9a3b0a3ab02586b60a7\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 0\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2314620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"184672451dec9861931cdda9c3e10efc","sha1":"2a2406d3e122ce3415fb82dc6cd95929234208c3","sha256":"a86fc550185020106d81b5abc9e287817e56ad22ff3014575483573946a5a0fe","sha512":"b94f94dce1ba1adb9618adec8fd0cb29fdd65bad310c1e684271c047d8ba7c34315d8b8ff20fb00d1f38bb6b1a36446810b0890360883cf1a28d955449e12038","ssdeep":"24576:Aatk0twGAL+xy7cNcFcAmXm3JvOesFGs1KWabCygvJ:AaGtbL7jQqnsF0bS","tlshash":"bf2522f19194b7a3e278f75d61344de273cdcf98b482d03b48d56f2b8a6a11a83035ad","first_seen":"2025-11-29T14:56:44.002062Z","last_seen":"2026-04-04T11:25:41.263551Z","times_seen":7,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/44.a092ccf.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/44.a092ccf.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3P5vW_KvErS-qEoC2fzNr-7F4tLfh5OZE_OFYry6ja3nQTXJS3jjY-AsZa3HzGg267q1TOirBO1QQOmg\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:19 GMT\r\nx-goog-generation: 1774965139421972\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 35884\r\nx-goog-hash: crc32c=p96TXA==, md5=OhtF8QgcxfRqWgJAyvNvHg==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:19 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 32\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Or74XjsLR4Kc%2FPO152nytZ%2Bbalx4f2i1G0Lv797KOai%2BPI1nY2pabG9Nr2Cjgy%2FTBG4WZbyyEtT%2BqITih%2FV%2F6xw8xs1H8o02RaizOQIai0FVf65C5wLbZGFRqMcBoQ%3D%3D\"}]}\r\ncf-ray: 9e6ff373c87b35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":35884,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35468), with no line terminators","md5":"3a1b45f1081cc5f46a5a0240caf36f1e","sha1":"a9499accb7c52e8abdbeddac8f280a64fa7a223b","sha256":"5930621d00fa98d39fb50e53ff58a30535c374c7fea52548cfc2bd7336bc9d0e","sha512":"6e4ef571f824f8dcd70bbe2e61b0c147d5256143119f442e28332b8e902ba1d552cb501ed794b7156400e75b809f24b18dc4c6d543c2a27350d247db7f78a811","ssdeep":"768:JWytW3MSCqFAQuf+CoIqrKXQ3bmIMseG4NWRIZcFKU09I:JXlWkG9IsjmIn4NG0K","tlshash":"edf2b65985e62c7a4bfe02c5b0f3494c804c0206f25bbcae75e79ad632187dab1c7d6d","first_seen":"2026-03-11T10:42:57.589671Z","last_seen":"2026-04-04T12:09:38.672525Z","times_seen":53,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/259420ba64cc5944c0b41ab9b218279c1757677319.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /259420ba64cc5944c0b41ab9b218279c1757677319.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 132100\r\ncontent-type: image/webp\r\netag: 259420ba64cc5944c0b41ab9b218279c\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 80\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":132100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"259420ba64cc5944c0b41ab9b218279c","sha1":"f9a116c5c8662da737f32b852c20d2b3dfbb60e9","sha256":"0495164ae868271f97babdce5b493a31d2c67dbc7dd95484d6eee4f99e271534","sha512":"48855fe2773e590786ae94ca6ba9f9ee4f3d6d898b3a2e114852e7f49c50a5a3a7efa0e562d1268f41fed4d1d20157702cb7d636214bc321dd948f122c533b47","ssdeep":"3072:nnem8tao0h6XIh4JvcxsYh29T+VEGsSsGZ5Pk:ne2oI6XDJ06y28VEasSk","tlshash":"f3d312980afabb71d095f3f6607ba3c63d7ee8f01ab65170001c32b9ca53de99955d20","first_seen":"2025-11-29T14:56:43.997751Z","last_seen":"2026-04-04T11:25:41.265431Z","times_seen":7,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":268,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:09.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 423\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":423,"data":"{\"sent_at\":\"2026-04-04T11:25:08.990Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"64b03d3e841543598878563effb4d449\",\"init\":false,\"started\":\"2026-04-04T11:25:07.785Z\",\"timestamp\":\"2026-04-04T11:25:08.989Z\",\"status\":\"exited\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/260.0ef7ac4.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/260.0ef7ac4.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:10 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG33zbMi0IzxtzLrWrb1z5R8CFzHpsj3BdxC54vU4g4mKbf4RRiJHlxvOEvD2AFQ9IbgQa-quZM\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:10 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:35 GMT\r\nx-goog-generation: 1774965155733457\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 12460\r\nx-goog-hash: crc32c=pQFWlw==, md5=X1WvhdpptO2y584e8fMX/g==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:35 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 38\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxcxNz8dgA375bb8QEVpcxDDGXbrtTWscQWuCCOaqZvag8Vky8ci2JxtVaQy5RPVsfF9iAqJF5sb%2FbJkYwXUtXC00iSYyaw87gtdn52laClTf%2BUECJ5Cb4A2t0FzLQ%3D%3D\"}]}\r\ncf-ray: 9e6ff36ab8fe35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12460,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12446), with no line terminators","md5":"2e1b549a0ab320441521c440816f8d1e","sha1":"d42dc3eb0216a88a8530467622f34049fab4f726","sha256":"5d89ec5f4c13fcdacd2c4b67763bbaac5b6caf958cf0d03b7d9533acdd1108aa","sha512":"9064e60504dd2c6bb6d3c4bbf3428fe57feddb6b0d528e64a13f1c06cf8a4bc1aab5b50efb95b1f990ab0638a3fe0d8ac0851fb5725138d0de6eafd97a4d3aa6","ssdeep":"384:rVL1+CX2RJQWRYWNs/nVd3ZQnmPP5sYmCgVcPKpcvJ590mp:SJQWRzu/v3uO5swgVcypcvJ5amp","tlshash":"0142fc7b9911793b65a36040feb37c16b6ba2f55d5aa5410c6f389bb0392cc0b403f97","first_seen":"2026-03-05T13:51:48.545106Z","last_seen":"2026-04-04T11:25:41.266253Z","times_seen":9,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/10.7e5a1ce.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/10.7e5a1ce.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1DW5O59GUXHMDHGyED_vKLwvbRqtR_6dYC6UjKFecBL3Sck6chFu0n_jVn3D6ud9vGcyPgtv4\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:29 GMT\r\nx-goog-generation: 1774965149274919\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7270\r\nx-goog-hash: crc32c=6sSyig==, md5=jPZaQIf5N/wiZlSu2ku2Fg==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:29 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 58\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBWctgQmqtXcglYh1J3c6nURV0Hd8SRd%2Fs9zUeEwklrk4lkStXdyTV5BLttoySETcrrDnEq%2BrXv8JR11LgC9jxNHbRcnH9orVYz08655NDWhIrg7gmm3N7OzT27org%3D%3D\"}]}\r\ncf-ray: 9e6ff373984135a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7270,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7270), with no line terminators","md5":"8cf65a4087f937fc226654aeda4bb616","sha1":"d59a2d907b2b249f1be9b2ff3005e9dfa2461d56","sha256":"bbd688898ceebcaf9fb4f821a08c3afecd04dc7cc685d99f6972248d8e69e359","sha512":"590195ec9732854765898ae8884dd22127bdcbe16cea0dd3a241c1ab57e49d3fa911e840a189e48b6220c0d66c7fdadab8e4c29a8c743424d1269cd55deaf27b","ssdeep":"96:1em6aFuo12PtRQBL+NE2SGJ4bp2Fgq0pesEsYJ9CJv7+0ahn0R2xz0NWa0pE/Lfl:3QRQ9MEM4bpaXuWX1qkLYsEAY","tlshash":"9ae1a060e9e4a0f01366c2833356ac33f59b311df6eab5f03255c2d89796b489517b1f","first_seen":"2026-03-11T10:42:57.600082Z","last_seen":"2026-04-04T12:09:38.653861Z","times_seen":40,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/13.be78989.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/13.be78989.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2q7UMu8zUTLYveMv63rObOpGJewZGGc1XgCJhE_1V3uoWiPNAGf8qv4de8RH9qWXKT\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-goog-generation: 1774965145308749\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 977\r\nx-goog-hash: crc32c=NeDvag==, md5=z8UEf8Mv49535UvzRRQ8AA==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:25 GMT\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OqOgzQYWXJkHKdKaApHJBO1D7pr6silKISRjDcoY5PBPEZXQ7cl%2Bi659Lx5gmMF4mq85vaOcSE7KLNtBj0Df3QTOFqhVrAvNETTNLz0aRftg1wy8rp%2BDnAfmr2QGAQ%3D%3D\"}]}\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 35\r\nx-gateway: 1\r\ncf-cache-status: MISS\r\netag: W/\"cfc5047fc32fe3de77e54bf345143c00\"\r\ncontent-encoding: br\r\ncf-ray: 9e6ff373b86a35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":977,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (977), with no line terminators","md5":"cfc5047fc32fe3de77e54bf345143c00","sha1":"ecd2b71aa642fe4dbde82194eeae5b5eddea57ef","sha256":"4d2a97c3c1596d2bc3d420997daf7b85b02a1c5285702145dd4bef5ae1ef26e8","sha512":"9ee0c55e886b2eb11fecb428c2b5c2a217bbf609ead3a6c91b39df011272a335d66e91891493738726c7a2feaa315c81ddbb0d048c424cc7fcaf3abc78a23818","ssdeep":"","tlshash":"07110e65d068a8f002974242522aa963f0a8206bf755a0f03d6fc0f92a64e5a9427f6b","first_seen":"2026-03-11T10:42:57.556184Z","last_seen":"2026-04-04T12:09:38.680192Z","times_seen":50,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/1292fd483f0290c79bff0ac6986d166c1757677317.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /1292fd483f0290c79bff0ac6986d166c1757677317.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 125424\r\ncontent-type: image/webp\r\netag: 1292fd483f0290c79bff0ac6986d166c\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 33\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":125424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1292fd483f0290c79bff0ac6986d166c","sha1":"d2fdca105afbc9d74fc0d6c0e61836f4b06700c8","sha256":"a16a79f9f4ead1e284355115b6e2ea88c1acb292dd24d1c3a7f5ef4e1976c888","sha512":"1972c70bcde685ead2bfff986d79d1e0407c335ed7379d072e37e40ede89f3a646aacab2c79d43dd6d3fd54ffd44fb9c8d3ac84d8d974a559b3307ac8f20665e","ssdeep":"3072:2xh1gMFf1/0zMWEttpDIl2JmJnbA2hZHe3Dz9MC85:2xh6Af12aIk6bAwHuDzI","tlshash":"8fc312ade60e8958d43e3a3c8c46845b34dc9f2927c9d625de488bcbe409ed708d42cb","first_seen":"2025-11-29T14:56:43.96587Z","last_seen":"2026-04-04T11:25:41.268836Z","times_seen":7,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":102,"dns":1,"connect":25,"send":0,"wait":225,"receive":183,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/7af6f14b782f51da142c6fb76a97ebc91757677318.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /7af6f14b782f51da142c6fb76a97ebc91757677318.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 98272\r\nx-envoy-upstream-service-time: 45\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: 7af6f14b782f51da142c6fb76a97ebc9\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":98272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7af6f14b782f51da142c6fb76a97ebc9","sha1":"3b9320f5d0a01a8d1df3b68031db1458f27ccf87","sha256":"10dde3ea221b8f5a12587623e484c3fa0d41e76f6e1e2f7ae73bd2c3b0e8ff9c","sha512":"b2c5481fd507baf4037a62753ac0339eb91ea36c5ef6d5897d57098c714cef5083689dcf30763b570b2044e99baaf122751cd300fbb9c3ca4c6a10fa96f2869d","ssdeep":"1536:0IsVw83ZFoq5z28/6SoMCJFhvitSPjbEHD0wwEYM4KS5VFWGpWU934dE5:0xh1K8poMCJFli3HRWxWGv9oK5","tlshash":"d5a312c5508066e9f63a0e36a617c00637bfae3a387f71d55828a8d0e732fa75c1f061","first_seen":"2025-11-29T14:56:44.01975Z","last_seen":"2026-04-04T11:25:41.269676Z","times_seen":7,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":223,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/ac516318783da5ff9a667bdfffd4427c1757677322.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /ac516318783da5ff9a667bdfffd4427c1757677322.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 205642\r\ncontent-type: image/webp\r\netag: ac516318783da5ff9a667bdfffd4427c\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 71\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":205642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac516318783da5ff9a667bdfffd4427c","sha1":"1fdc9998359962f09c17ecb4b32fc679819f86ad","sha256":"97523cf19b512c2b1855073acb15def458de3a9080310b52a7593c3f39381e5d","sha512":"95f2a8927218e684d1b32071c37c26e2d316ecb1a74d67b42b65a2c00e8d0e45542b176d5b5030caf99c37dc814213a1964cdcd6aec4ebd29b15a41ff63157e8","ssdeep":"3072:InemSfdTf/0nBGRjt4e9DS8IYSG1PIQm6kl0hyaJlr8Ac/Txp9pGlzYoPoJQXI:Ie7Tfcn4J/eY31P31kkKBT7ypYwE","tlshash":"801412103bf34607fe6d24ed12d561d1eab6b2a10c5636276910b09fbc514ad9c0bbfe","first_seen":"2025-11-29T14:56:44.000335Z","last_seen":"2026-04-04T11:25:41.270663Z","times_seen":7,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":271,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/platform/private/mirror/config","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /platform/private/mirror/config HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 401 Unauthorized\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: token=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.fanforus.com\ntoken=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; domain=.m.fanforus.com\r\nvary: Accept, Accept-Encoding\r\nx-envoy-upstream-service-time: 14\r\nx-gateway: 1\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4Sv0%2B1AZCDhAeh329cJ7QUhHxr5n0O8kKazpDLM95NFT0mpmLjPQO4%2FvjGwxoDi0F3YePIJ5RmYA5YBad7A%2BsB%2BHoPuyjHUqsfrEFG2ukrIsdIZ64mWajMtsp2OFA%3D%3D\"}]}\r\ncf-ray: 9e6ff374fa4a35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":105,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"08928303387a1c67d19abcbb4e4a0911","sha1":"5d8c2e792ae9efb2e3e43d4b79c14e1f48a5d24c","sha256":"82eda9a219b0d8de5b135dbae17c6064c332a978b0415528ebf3a899e8cd903b","sha512":"f0483237c2438038dfafe35f50b8e0e38cc23d4b7fd9296cc44e86e5d42ec3f62d7da064f2ca799f19b6bbdbf4ac80cb4a239562091463dec4f7f318f5685fe7","ssdeep":"","tlshash":"b1b0126751c03826bfd201adb50a511178e440559f9803934c8c073b46875b8480a100","first_seen":"2023-05-15T11:18:25Z","last_seen":"2026-04-04T13:15:06.875772Z","times_seen":872,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/70ef33c20f0d5b179c11edd6023f25aa1757677317.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /70ef33c20f0d5b179c11edd6023f25aa1757677317.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 172296\r\nx-envoy-upstream-service-time: 39\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\netag: 70ef33c20f0d5b179c11edd6023f25aa\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 0\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":172296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70ef33c20f0d5b179c11edd6023f25aa","sha1":"ec144c9a25d77d822de7e952887166f3be5ade23","sha256":"0877d112bb783ad58ccfacbec88080df3f809bd6388c11b8aa43973c2b52b6aa","sha512":"e5b8a854a0f191dc9792e3ed5cb83f77a9aefb84efc97d7fd6962fa28a8f95a6c233f18b52c4f0cc24af00114959f7dde6b26edf21f4c8a67d2b9806debc15b5","ssdeep":"3072:Zxh1HC9+VcdpI/2GowEoJJ8+65c2JiU7ilngNo3rbsRMKUDvE0:ZxhTck//65c4isGgy8GVDvL","tlshash":"45f312640033a934fa740eb86f468eb6f1fa814f971cf1b64a374840ad9387695bf06c","first_seen":"2025-11-29T14:56:43.98496Z","last_seen":"2026-04-04T11:25:41.273038Z","times_seen":7,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":128,"dns":1,"connect":16,"send":0,"wait":225,"receive":5,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/01be2303ab4bddc8c5bef72dff928b981757677322.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /01be2303ab4bddc8c5bef72dff928b981757677322.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 156376\r\ncontent-type: image/webp\r\netag: 01be2303ab4bddc8c5bef72dff928b98\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 44\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":156376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01be2303ab4bddc8c5bef72dff928b98","sha1":"2066384f3d048a1fc02cfc0f73d5b77af2a78ec3","sha256":"c49710b4bbbd28337e6a8724f5c66eed7d98f7b563e18ffbae44eb1d9e75809d","sha512":"c085129fa979aa0575d05de2be72d70f181e12be2c75cd6e4903ba5252addc655ec82064a42b12a7614872940149159813770289ecb1ce78d2c2ad3baf904e09","ssdeep":"3072:wnemFOkWARAh6N7f4+lVbMJeMkUtoHLKE7IgIOtY1nV:weIjpMJetHHZFt8nV","tlshash":"72e312c6f336a763c3a63034b380ba4f01c885614eac5226f179ff955e59385a8dbc29","first_seen":"2025-11-29T14:56:44.009202Z","last_seen":"2026-04-04T11:25:41.27404Z","times_seen":7,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":235,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/platform/geo/index","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /platform/geo/index HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-envoy-upstream-service-time: 16\r\nx-gateway: 1\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIkCX5%2Bu0UpEyLs%2Beu6j9sska4emVfUw5DdxZ%2Bns9kw3KN%2FsiPTNwnRx%2FIirwi67K8e66PE3NqKS%2F3%2B4%2FEWB5mBlNSpXeXoun%2BOpP2Uih5tpoBibnUqCag19boM4bw%3D%3D\"}]}\r\ncf-ray: 9e6ff374fa4735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":176,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fa4b413d08df5b4e0a26ba2023356001","sha1":"5b807a4f9c746eb9b40394a78bf883c5da0a41d5","sha256":"aaa8963ffc047555b1bd44c04b214ff51b1338d95ffade6c8e803b17f8b31dd7","sha512":"3a9fc69c661ac157946b2859a66bd390bd187fb831a6e5713f48daf5dd2981cf5680b46fc1576b51d83d75f4f10663de42da827ed06e3f1dd4c0b62c690e4180","ssdeep":"","tlshash":"fcc0806d14e58d09fd7fd3c8114dd413437d76044b6655c389dab664c2441dc2105810","first_seen":"2024-12-20T21:46:27.44585Z","last_seen":"2026-04-04T13:15:06.884548Z","times_seen":823,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1844.88923b8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1844.88923b8.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG0FBsfQJc-OkSxfGtQtbkK3184eTHOe8tFoWcBs8j-q0UzD27W1ANBRK8aJFtOQBRir\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:20 GMT\r\nx-goog-generation: 1774965140533773\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1725\r\nx-goog-hash: crc32c=rdTz0A==, md5=UE6q4YqWl/Pt11PuvSEGxA==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:20 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 60\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FLzpYkXSr9wobDC9laF5m4UAr6Zkmkx9m0b%2BIkdFhfkNImrL6yWQDTQsRtHBfOP2%2FaNySMgo0Kv5YUj7KQS%2BgupAFh10HEkfzdC3kmbWDzpblSVOHGLHEMOx6yoYg%3D%3D\"}]}\r\ncf-ray: 9e6ff375dbf235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1725,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1725), with no line terminators","md5":"504eaae18a9697f3edd753eebd2106c4","sha1":"caab43ec373a1a25e3731cacc8f34360dbc7d98d","sha256":"8fb7df16a8df2277f9d43aead1e28f6edfdbc879ad91057c2f3868a195a93a8f","sha512":"199ef6541ee857f3aea1bbd3707adf870c08d5dbd61fdad95e4c712c8684ca6aecbee2a7ddad2c7cbd622eeeffb4c85d4a466958ddef728ab913f0162e0b039c","ssdeep":"","tlshash":"bb3121157047e5b5cbde40d48126c876e1763b8c344ad8b036fa8cdd0aa0f69e22e67d","first_seen":"2026-03-11T10:42:57.617713Z","last_seen":"2026-04-04T11:25:41.275617Z","times_seen":24,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1220.a0684e3.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1220.a0684e3.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG0XRpIfc5z_rzI7v-cHX1v7YmkyGu2kXh07KDn06c_zSr2CPsD56-DzoNPtvlACuKZtlkmSvw\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:27 GMT\r\nx-goog-generation: 1774965147188850\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2959\r\nx-goog-hash: crc32c=PCEhBQ==, md5=uEkkVUGoE9+kRGImVWPIEg==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:27 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 65\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQM8rtOkL3fn2gIlKBaSewMqmq9Ojb2ngqvuVJaGmvxuPI%2FjqRjqalMOwPYJBW7lKlq%2FgD6Vnrdku7ljDdp2utcZOQRK9H7ICfyhaSFjETZ6BnTwjwx1fAAGU8olkA%3D%3D\"}]}\r\ncf-ray: 9e6ff3760c4435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2959), with no line terminators","md5":"b849245541a813dfa44462265563c812","sha1":"544ef810c39cdcbe4ccb9b19e5db78acd39d34be","sha256":"1e0218a15497efc0b2c48aab59108b53d96cb5d9cdf91c29f8faac545bc0c987","sha512":"28a27e46b70d8157f86d0d25199014c1da4b922f6982091dde67f577f0123cb561734550ca639309519343dc0a707ab23fcc7930b5809d2f6c79a445be98f707","ssdeep":"","tlshash":"0b516349f192e4b547af8080121e197bf225626ea350d8d07229cdd276e0e4da32ff6f","first_seen":"2026-03-11T10:42:57.580029Z","last_seen":"2026-04-04T11:25:41.276384Z","times_seen":7,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/webvitals/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/webvitals/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 293\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58; bannerManual=true; was_visiting_landing=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":293,"data":"{\"name\":\"TTFB\",\"value\":320,\"rating\":\"good\",\"idVisit\":\"50923a29-6550-4057-a01e-a61d97d7d96c\",\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"details\":\"{\\\"id\\\":\\\"v4-1775301912361-5299588394363\\\",\\\"name\\\":\\\"TTFB\\\",\\\"value\\\":320,\\\"rating\\\":\\\"good\\\",\\\"delta\\\":320,\\\"navigationType\\\":\\\"navigate\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:12 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 55\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r14J123lG0d9hTyhQrtEHb4%2BDhI52eeQrTwIw2j9ja%2B%2BtxCRIEQxyEWF3e3iqPIQY7%2Fp5pjvCbEzMNTMA1YUy3HV8Zfj8K%2FgUHbqtJbwSZSu6SbhrmE9Y%2F6ve3xlTQ%3D%3D\"}]}\r\ncf-ray: 9e6ff37888d635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/a53fc143181a204611e8805a40d90ee11757677381.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /a53fc143181a204611e8805a40d90ee11757677381.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 14610\r\nx-envoy-upstream-service-time: 20\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\netag: a53fc143181a204611e8805a40d90ee1\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 0\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":14610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a53fc143181a204611e8805a40d90ee1","sha1":"6639b26447580e19ec1626fbc03c46ce22a37227","sha256":"ca008407fb141c8b0e361dde2e0167e6b59bb62509530b1dd08aae30cda73cec","sha512":"e524626a0cd721a996d3d0a44b079141bb965cd4dbf39bd22767539fba8fa866631ba2fb7af7875677fede72d83d8283a104f45a838886ad0cc532a700d53a81","ssdeep":"384:ffwTUFWbs7fut1AmInUzt+ylR4OvglKakKfeCCBj0gZG:f4TUFss7mnteUzt+yr4OvG4lDG","tlshash":"2f62c0bc81949adae92e33b9bd378ff9f7d27845894d417243619438a027b613016d17","first_seen":"2025-11-29T14:56:43.987591Z","last_seen":"2026-04-04T11:25:41.278971Z","times_seen":10,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/7cf42a2d0b8061ce2e024117dcd7c5121702300976.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /7cf42a2d0b8061ce2e024117dcd7c5121702300976.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 2252\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Fri, 03 Apr 2026 11:41:22 GMT\r\nage: 85430\r\netag: 7cf42a2d0b8061ce2e024117dcd7c512\r\ncontent-type: image/webp\r\nvary: Accept\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7cf42a2d0b8061ce2e024117dcd7c512","sha1":"a5c4e547b46aa235e0bd86e2010a8a5baa200548","sha256":"273c4d8d8e561965c796336ec9f54ee554c3fa3757637959131d32f17e251a6d","sha512":"adc0af8c716bd215f5c51551e6b0642317d29b72c5d049f63d48d58fb3c38e4cc954d8413e3fce259b4a4d287af336e1a8c9f8e24b79505e2ca418eb59a47422","ssdeep":"","tlshash":"29413ca1442f119fdbc72ecf560635ac5677ad27341fca11233418f59e1d8e81e9be04","first_seen":"2024-12-20T21:46:27.440736Z","last_seen":"2026-04-04T11:25:41.280048Z","times_seen":220,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/vendors~app.404e1b8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/vendors~app.404e1b8.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2_jNqS4R3psLsnPyAfmdmzlKzRVmJ6cU_MycNheH8KjXiDX2_jne--frDql6uwuJooLUziC7U\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:08 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:14 GMT\r\nx-goog-generation: 1774965134716636\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 190185\r\nx-goog-hash: crc32c=fXCy9Q==, md5=yrwMbqmOo1BH5grQaCNvaQ==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:14 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ly6maer5S09lWMFBFQY%2BfdKAL%2Bj38IvrmBzwcqBeZcQONXwS%2BKqKYCgjwBgJm7nkqmFSgXVwOlDBeCIP%2BwHmUlsgS2eOziRcJxM8f%2FCR%2BQk7BZRpDWad3Mjk7RRafQ%3D%3D\"}]}\r\ncf-ray: 9e6ff35acc3c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":190185,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65485)","md5":"cabc0c6ea98ea35047e60ad068236f69","sha1":"c7cb64c9597b4430c96fcc95873cbc9d1cd30d15","sha256":"0758f5dc5422f2e9c1e13a0faeba758cc501ec14606108e7f3f0082800871177","sha512":"8d9a2aaef09f00bcf4e0f1e42b601178fc7cd61ae8928a24d31a38204d61609a5bb6461b380254f7696fb8d95613dabe7126700449850461006042c107710733","ssdeep":"3072:lX7RtswpC111VpMUjuNLGGvoo2PLYz0cnq:BRt14u0ZUq","tlshash":"ff04d5cdf695b07103e721b5407f550bf23ab858b80e8490e256e4e57cb898ea06bf7d","first_seen":"2026-03-11T10:42:57.587945Z","last_seen":"2026-04-04T12:09:38.664265Z","times_seen":54,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/webvitals/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/webvitals/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 294\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58; bannerManual=true; was_visiting_landing=true\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":294,"data":"{\"name\":\"FCP\",\"value\":4705,\"rating\":\"poor\",\"idVisit\":\"50923a29-6550-4057-a01e-a61d97d7d96c\",\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"details\":\"{\\\"id\\\":\\\"v4-1775301912362-2223536914589\\\",\\\"name\\\":\\\"FCP\\\",\\\"value\\\":4705,\\\"rating\\\":\\\"poor\\\",\\\"delta\\\":4705,\\\"navigationType\\\":\\\"navigate\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:12 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 18\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKzGBP7aaxrpH9pu9pqnPkZzzPN5cKcIBi8mpu4lYOB%2FA0SvPJCGwWo2bnrWEEvtRXA14RRYzHIhX02YGYrnkz6bf2AZP94tykOnrvs%2F7A5A08iMTr9wEgfFjk17aw%3D%3D\"}]}\r\ncf-ray: 9e6ff378d93435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/7.46.0/bundle.tracing.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.194.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sentry-cdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 09 Feb 2026 20:53:24 GMT","end":"Sat, 13 Mar 2027 20:53:23 GMT"},"fingerprint":{"sha1":"A0:9E:62:C1:92:F6:6F:ED:65:40:22:B5:BE:E9:04:7D:B4:B6:91:9D","sha256":"63:7D:8B:7A:93:7C:10:AE:E8:6C:43:B5:2F:69:BC:7B:17:0D:06:25:AA:F6:42:9F:F0:12:85:58:50:43:58:39"}}},"request":{"raw":"GET /7.46.0/bundle.tracing.min.js HTTP/1.1\r\nHost: browser.sentry-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-response-body-transformations: gunzipped\r\nexpires: Wed, 10 Jun 2026 09:36:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 30 Mar 2023 14:00:31 GMT\r\netag: W/\"ffe25425e944cb7d5cbaa534ec09c3c1\"\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ranges: bytes\r\ndate: Sat, 04 Apr 2026 11:25:07 GMT\r\nage: 1982963\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: Fastly\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 82741\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":82741,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65429)","md5":"5be6507084644ff1096237e60dabccf0","sha1":"eb880c4eb01758a72ddbb7cfe03f0ed64bec5db6","sha256":"8df41a67fc8dd45d4129a58dbc5186b4646eaad6d99bbb14782cf0db76f0d0d1","sha512":"10c33c4732d8746529fe96e744b3e4386f85f70cb5a04047aabb25d72366a163fc47025baf439b0fa9881f81e00d4622451fc8a68129f055b56681d6c9fcaca5","ssdeep":"768:/xvJ5NIlBZygE31EKG9cmyckfr34iG8saYJrWnADQBFVA5YJIRJ0Emrav51wSa/2:pvOkYLGQv51JiYxrbi50eNeTL","tlshash":"7b83c5cab1d2b03147d71ae1503a0101f73a5a50744bc1acba7cddea6da644fa2b6f3d","first_seen":"2023-04-27T01:47:28Z","last_seen":"2026-04-04T13:15:06.904171Z","times_seen":800,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":14,"receive":23,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/5.207b9ee.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:09.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/5.207b9ee.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:09 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG17eeWx-XKmwiZNMCzgmT30Ov7NpiWfD2kMovUW3pUGzem2UH19aKxpUCAVtOhmIW1m\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:09 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:26 GMT\r\nx-goog-generation: 1774965146634725\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 65496\r\nx-goog-hash: crc32c=b7MSZQ==, md5=OB8dyCjwPIRcjFp1Y0MaDg==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:26 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soajE5zCiywu3jhSz2sYZa4XgBsJCb9vhvrmK0qX3jL99o4XTKvP8T%2Bya12%2BSNfBZJY2whyh2F6dgq3tiXt%2FoRfsxA%2BejI1mfchWbxVdZUNROBvucgSxoIwfvZkmdQ%3D%3D\"}]}\r\ncf-ray: 9e6ff3639c5235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":65496,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65496), with no line terminators","md5":"381f1dc828f03c845c8c5a7563431a0e","sha1":"25fde8748634fe4f83af758f13bebfccdd5a9055","sha256":"d3e69833394cca725f607fd7dd8467264f6dda065db9295059cc5a8cbe037a70","sha512":"949f24241861787d5f1b19514aaa1fe75d660b634ad093cb090b5431f4c57de19ae66b4a64b6d9ecd73653e94f46f2d003a4556dd0b039a81e44be0b152d4b09","ssdeep":"768:9XYtERVuEtXNeleCCKXCfY+PKJfGOWKbxP7yNKRUzE8A3T0M3lrA26XHSRzrwKNv:NIdObK9+EbHrNCzfT/Ze","tlshash":"c353b7c8b5c2b4218363b5b1903f010bf37f6984b8ad6524e164a4e97d7498ee43bf9d","first_seen":"2026-03-11T10:42:57.593879Z","last_seen":"2026-04-04T12:09:38.678698Z","times_seen":54,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/14.f703ae8.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/14.f703ae8.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2BsbH5DVb762B_Go25Bd3EJP8mVWcF8aYPXSvAzS159hntQRr48ihZLw9hYXv5LPh1XQzxqUY\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:28 GMT\r\nx-goog-generation: 1774965148083128\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5439\r\nx-goog-hash: crc32c=mtMdeg==, md5=rDP4gnygGciSOy06PPiTMA==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:28 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 34\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IICc%2FepUuHazuTtINJUBk%2FUFMGap90UcfSzyFEbu123E01FDzbgkfJxm%2BLihaxq%2FX4Iw8WlitiPzlR7VpEa7kDCcBk6LhJjPn%2BQ48HAcibjy4rMkL3jqsOZ9GWBDbQ%3D%3D\"}]}\r\ncf-ray: 9e6ff373a84935a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5439,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5439), with no line terminators","md5":"ac33f8827ca019c8923b2d3a3cf89330","sha1":"6d5978e546a9ef4b26b8e3f9aedbf53bf456fbb2","sha256":"27308205b23c0a70ed4e572bbde00166aa4f13e85f853c5db883b12154f7c7ee","sha512":"673d29e27b0263a7f4d7f636149edd9c93db9d58fd89596da4d521e717ced5285c6ded9d252aeb26a0604bb5b4ea2219b546bfe0e0465bbb5f89cbbc9c56b279","ssdeep":"96:ZR8nTPVMY/a/4OJhBuRAUPpggt/NSaqFaqLVxEVhWL1QQ9K4a:ZMTPVMY/agOJhvBFA+L1f9K4a","tlshash":"ffb10e98f156e4b2075607d0b9569c62f20c082ee6afb2fb7a2182c32530f4dc11af73","first_seen":"2026-01-20T11:53:12.864518Z","last_seen":"2026-04-04T11:25:41.285235Z","times_seen":89,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"{\"sent_at\":\"2026-04-04T11:25:11.735Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"8833412cd0374358923fc68350d64db2\",\"init\":true,\"started\":\"2026-04-04T11:25:11.734Z\",\"timestamp\":\"2026-04-04T11:25:11.734Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/468a5877c6c05fc1eadd7ca7a04b49091757677318.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /468a5877c6c05fc1eadd7ca7a04b49091757677318.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 167636\r\ncontent-type: image/webp\r\netag: 468a5877c6c05fc1eadd7ca7a04b4909\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 66\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":167636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"468a5877c6c05fc1eadd7ca7a04b4909","sha1":"8d41b112637da5f9233c05ddf4073ce3ceee9815","sha256":"ea0b10e4d8380452aed32d71d306cb3983c4047c52de5caa23712e5b3facf3af","sha512":"1434a90c06dd7c17aa77a1f2e13f1a6eef45f01862316742459ff7b202260c6c24a9a0f18180350c7c8ba9decf987f74b94e99184aae65b006842f4ce1a3673b","ssdeep":"3072:8xh1k2hsfMHo7HTy3Fn5iqiMh+oxVOf6uFSEdR32yiuNsNACY3:8xhyrUHEz2tJxVOLUEdt2SsNvY3","tlshash":"a8f312ec2905efc3a292f5fcb39586d16067828937b8e35e4c747c1a3965a46cce3234","first_seen":"2025-11-03T14:58:22.273624Z","last_seen":"2026-04-04T11:25:41.285968Z","times_seen":8,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":57,"dns":1,"connect":28,"send":0,"wait":266,"receive":38,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/5c67c9ba828eae3437465caf80457cde1757677319.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /5c67c9ba828eae3437465caf80457cde1757677319.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 162152\r\ncontent-type: image/webp\r\netag: 5c67c9ba828eae3437465caf80457cde\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\nx-envoy-upstream-service-time: 103\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":162152,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c67c9ba828eae3437465caf80457cde","sha1":"3f18f92644b9ca594375b4bcad71912a64746e82","sha256":"5c2db5bf6f05700403c0f2f94a1a3ce708f3d162edfd640f102db83f0b3fdefc","sha512":"2a8c20c5c158badd62d1ea56a7c61152e365ed585197877905ffc6ae445fce90de56b30a764e22213963b40583e725db63c67bfc6ac571e746c182d46d27768d","ssdeep":"3072:Nnem4KyCm7L+thjGkKXQSZEAgAk1weVtiMjOtx1qmaBojrLc9:Ne+yP+thykKXQINReVcGKPq1aLc9","tlshash":"51f312a4bfbc5091b59efb38a3b05f9b5e866d0203b49b064d31f46033629c5bd0e5da","first_seen":"2025-11-29T14:56:44.007598Z","last_seen":"2026-04-04T11:25:41.286664Z","times_seen":7,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":282,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/eb5b8195851a4a166dbb8148e67e36191757677319.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /eb5b8195851a4a166dbb8148e67e36191757677319.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 98540\r\ncontent-type: image/webp\r\netag: eb5b8195851a4a166dbb8148e67e3619\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 48\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":98540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb5b8195851a4a166dbb8148e67e3619","sha1":"04875371326a2e36c113c612843ef55bd1429c86","sha256":"56971a97d71751e8ea9a0d16488e455720323b97105651cb1396e9a73df5abe0","sha512":"c3a73e12a1dc4f2cd11a2eaa528ab92661dd6ed0a952d738b72871a593aad2a19726d77e1fa4a8f8b26e388950dfd2f788466de18e2c32f62eee4376b995316f","ssdeep":"1536:DBPOQeRwyDDPYfVjH2jQkizLlNP2u1cCXJxrAXSbsjtDvqNG2+Z1:pnemIDPSDsQkivlNeu1cCXJ9b0iU2+Z1","tlshash":"b7a302b407f6c1a49c66a03736f76b994e8fef2365e01801c4926f7e37428d28e86d60","first_seen":"2025-11-03T14:58:22.223743Z","last_seen":"2026-04-04T11:25:41.287309Z","times_seen":8,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":236,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/a9efc4aa1ab30f6f0cc550e93368d9b51757677321.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /a9efc4aa1ab30f6f0cc550e93368d9b51757677321.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 108924\r\nx-envoy-upstream-service-time: 55\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: a9efc4aa1ab30f6f0cc550e93368d9b5\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":108924,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9efc4aa1ab30f6f0cc550e93368d9b5","sha1":"18731734de118f5e3e230838268a0661616dbdbe","sha256":"6bbee3da6c2249fa7ba8984667e17ec0ae7b83318f0193e28608bccb79d827d8","sha512":"e7f98367733d791f7458a969a9b07b71884760145626962aed026c5e7cf409f377cb4da3c37df7bd30ccb15792486d9fef8c93b9dc7db5bd674f8cd2e6302861","ssdeep":"3072:WnemBd9RoPUq3riXOthXKIgHGFOtaTYfW5oKxW:WeWk/iXoFKIg4CWXW","tlshash":"34b3022d0d7961b8e7e634723e80fb806a9cf4308a727b2460d97d4469d68d1c5fe836","first_seen":"2025-11-29T14:56:44.024751Z","last_seen":"2026-04-04T11:25:41.288157Z","times_seen":7,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":261,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"{\"sent_at\":\"2026-04-04T11:25:07.786Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"64b03d3e841543598878563effb4d449\",\"init\":true,\"started\":\"2026-04-04T11:25:07.785Z\",\"timestamp\":\"2026-04-04T11:25:07.785Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":121,"dns":15,"connect":26,"send":0,"wait":43,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/9fa4fdf5efaa3fc471af6214881f92c41757677324.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /9fa4fdf5efaa3fc471af6214881f92c41757677324.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 23474\r\ncontent-type: image/webp\r\netag: 9fa4fdf5efaa3fc471af6214881f92c4\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 37\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":23474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9fa4fdf5efaa3fc471af6214881f92c4","sha1":"74f31888b62914216c06f5ddb8af3bf7519c50e8","sha256":"c3b934977d0ff05469557d8c5f4969a0afaeea78383a9cdd1bf808c1f7fddd31","sha512":"0a17c8c84a8877ba7a0ca5a5d25ae19ddae68b531c4b9a5e03561c12d50e1f795bc90f27f253052a6dee55157f55cbe559e03da69c2235f811385f1a7ae50b83","ssdeep":"384:PwT81r/td1Fc+y3wWlDo/oFuIFJ10U+lCy355/AbLfNeaeDZvNuKJTa+CFtqLh/:IT81rDPcZI/oFuI0Cy3DAffdeDZvoK/","tlshash":"9ab2d09978f0a19fe329ab7004c73b8df2aa116c8465ce9991b161f2746ccc46b20cdf","first_seen":"2025-11-29T14:56:43.964928Z","last_seen":"2026-04-04T11:25:41.289623Z","times_seen":10,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":110,"dns":21,"connect":12,"send":0,"wait":197,"receive":3,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/d7d1e844e5641a2063087c17bf76034a1757677317.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /d7d1e844e5641a2063087c17bf76034a1757677317.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 178530\r\ncontent-type: image/webp\r\netag: d7d1e844e5641a2063087c17bf76034a\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":178530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d7d1e844e5641a2063087c17bf76034a","sha1":"f2ccc84b562104a472848d9ef925f5b1bdab1509","sha256":"b2276ac56bd1a6865ab8de19d1e583ea9254d87bab93ce7201e8aa1bb7bce431","sha512":"8ca4b4a0450156c8f441b5da6b7ee283225beb2921f58ed9e887bd225297cd18684b6eca53bf631156b09f9b3534abc3ee8ea73944460d03f6b1c6090db8ea71","ssdeep":"3072:0L3m8fJ/A2C78JQU96AQ1eTJRbPIzB0qLKXpR+rc739i6JZECK6MO+:0L3mgpg8eUndgq+I739xtmO+","tlshash":"830412ab9361a9adf00240780649ff4260ab4f712d1d8fc986d7ce3f6809b90579fe56","first_seen":"2025-11-03T14:58:22.245685Z","last_seen":"2026-04-04T11:25:41.290282Z","times_seen":8,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":88,"dns":1,"connect":12,"send":0,"wait":196,"receive":36,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/db091afad865b01ab39b4d14de200ce71757677321.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /db091afad865b01ab39b4d14de200ce71757677321.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 123788\r\ncontent-type: image/webp\r\netag: db091afad865b01ab39b4d14de200ce7\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 64\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":123788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db091afad865b01ab39b4d14de200ce7","sha1":"57ed18b9b1832c3620bc943ef6e256e636481d08","sha256":"2a5e9e2e1fa1208db5ce19fc328b5baf536d85fd830f84b3a0a9cc1332e804a3","sha512":"74fc9db811d1df7cf8312cec52e3aace41dd23ae4abddd88abf2632959379589f134b214cf9fff5c79751450baf0c547057b8c7ae35c2a4e2ee6cc0c8d246966","ssdeep":"3072:onemoYq+WF4OL90gQKxjDzHPXO2xufPW0:oebYFWF4OL90gp7vXO26PW0","tlshash":"d6c31299e71c3984cc82b770bd3959d0f9a5c0a14c77fd41aebc5e6d29739f6928a003","first_seen":"2025-11-03T14:58:22.307216Z","last_seen":"2026-04-04T11:25:41.291043Z","times_seen":8,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":268,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/svg/logos/white/fanforus.svg","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/svg/logos/white/fanforus.svg HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: image/svg+xml\r\nx-guploader-uploadid: AMNfjG0msBm2ZyOXk_rOUeJ9ghZjwBp9A7n2lWrHDI3_YUASOAROoModcwcPiHMq0gmCKgUpLJkTjZI\r\ncache-control: public, max-age=691200\r\nexpires: Sat, 11 Apr 2026 22:58:54 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:36 GMT\r\nx-goog-generation: 1774965156228701\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 20405\r\nx-goog-hash: crc32c=aqvf+A==, md5=8/AKMDTgP9aEVIzFMTAlLQ==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:36 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 31\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 44776\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cR3X6sbHYCxHKP3w5eygGMO92Dp1Ct12sH1pin5sb%2FXYaEy9dZYqfmDNN2fog%2BvPl6%2FWgC5W8xJgNi%2F3b9Y%2BOF%2FYpCXCta3kY5D4QtBmqjbUdVqA3hg5CDqmhzaGjQ%3D%3D\"}]}\r\ncf-ray: 9e6ff374c9f735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20405,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3f00a3034e03fd684548cc53130252d","sha1":"16e36e874e34ac2d395fad0be232729489339854","sha256":"6e2926020d084d1eec88ae17a05e4218ea3be3f8e3ba950c022dcc9c7a3ba69c","sha512":"81232454f6cf52e541c97e20441bf1248b0716318c3ba79a228900e5135726712d84519190ad42b9a29b6e2dfc24c7af35c025c086a624e35dd5aa19128cab82","ssdeep":"384:Ioz63EAp/iGOYefGCt5WrxhJ/vouAzb7KO4FEYY45DSBspqWN:Ioz60AiGOYef61hJYtKDN","tlshash":"e4920bec27f9a2e4a546f3f6cf1a50f93d2364f6ba15c529c394ad15b84206c8889dc3","first_seen":"2025-10-04T13:16:52.547481Z","last_seen":"2026-04-04T13:15:06.893846Z","times_seen":13,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/22.f8ef576.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/22.f8ef576.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1nASj-r7YLM71ipy_8yQroHS1q5tUilpsvcCTvyovLhr30t5S4fTOpBWfM5RwKhIGx\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:26 GMT\r\nx-goog-generation: 1774965146476107\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7162\r\nx-goog-hash: crc32c=foucAw==, md5=hyfPDuFYjYwAWRUQZMdpmg==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:26 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 26\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsaqlLD5MkRlk42bCRvtoEhDNHDdBojGLSkZFLM8CMXsfGlQo3ua%2FEhVagp0KUE5dhB7HaaGUgR1FiEdkISAIXKR5jZxzxRckJ1swdVQRY9AV3jj%2BabhZHHgxvfeCw%3D%3D\"}]}\r\ncf-ray: 9e6ff373a84635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7162), with no line terminators","md5":"8727cf0ee1588d8c0059151064c7699a","sha1":"421a33524ee3f78f355ecde662d3ca65072889e2","sha256":"1424b955ca100ca5b7bdebce4e4cbe3e8d344de47ffffe9b1ce89442db9520db","sha512":"563b6672b5ba7d95057afbd04cfc0bb54314d65763f275f97523be8f3c8c0a149ead62bc2e569bf66f995c9c8f11116a7ced3ec5d53339f8d7eda8a69e474d33","ssdeep":"96:C2PmYruNkAXRZzUyOTYQ33bhMDbVkDvNdcAhXhHUOOJna/ylAmcvCyLDD77cAb:C6ruusPqZwa6lA5vCAnncAb","tlshash":"66e16537e651f4750b224053e9164833b2be066df23960f179bac5da18d2b46621fb3f","first_seen":"2026-03-11T10:42:57.591562Z","last_seen":"2026-04-04T11:25:41.294347Z","times_seen":38,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/362.3bcc766.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/362.3bcc766.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG02MPKh8tOHh4fq5OHChfgpSqAdUR-QHahwCbkeS-eAtxUxk3RfKKbhn4IskbeWY75aeI8d9Jb2Fk4VwQ\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:17 GMT\r\nx-goog-generation: 1774965137061687\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1922\r\nx-goog-hash: crc32c=EtfyOA==, md5=QLjq+cBH80EF5CgnrL+LMw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:17 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 36\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4Eg9sdyJnOBF0zfolB8wFN4FncUaL7RBKW7kMhAxgqPUOfcIGg3yACiOAwlFTxhzCZdMWhdrwS4Crha55BNxUPGJfo27tJhfFJgn58bLlQfoFSsNLz%2Bfadriw8KHw%3D%3D\"}]}\r\ncf-ray: 9e6ff373c87535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1922), with no line terminators","md5":"40b8eaf9c047f34105e42827acbf8b33","sha1":"9c16213684e9650632f2c921f69fa53ed1831c37","sha256":"5f025c1dae9a42546cefe800c7c38b6a0e67fb6a14fc1959a4ecd18c87afe661","sha512":"15b8fb8a8f83f14b8e0976d8430203b8bf9f6ece1740e54ba61328e49d53580d3f08f445da74fd1873ae23ae90ca09271c294f4242e21abc4733c4d9ffcd33f2","ssdeep":"","tlshash":"c5412323b189d5f20bb341800115117ef3746669f745f4f0b3abcae619e98459113a6f","first_seen":"2026-03-11T10:42:57.549957Z","last_seen":"2026-04-04T12:09:38.645998Z","times_seen":51,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track-victoriadates.com/?c=9999999999\u0026m=000000000000","fqdn":"track-victoriadates.com","domain":"track-victoriadates.com","tld":"com"},"ip":{"addr":"18.211.60.51","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:13.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.track-victoriadates.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 31 Oct 2025 03:10:20 GMT","end":"Wed, 02 Dec 2026 03:10:19 GMT"},"fingerprint":{"sha1":"25:E7:A4:9A:03:23:9F:1A:62:A1:D1:9D:7E:2F:C2:3F:E1:85:81:74","sha256":"68:5B:3F:10:F4:B3:3A:38:C7:32:2D:DD:2E:3A:FE:5D:AE:B4:15:29:F5:EA:C2:8A:B0:0F:0E:91:62:0D:D8:CA"}}},"request":{"raw":"GET /?c=9999999999\u0026m=000000000000 HTTP/1.1\r\nHost: track-victoriadates.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nCache-Control: no-cache\r\nContent-Length: 0\r\nDate: Sat, 04 Apr 2026 11:25:13 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":246,"dns":21,"connect":93,"send":0,"wait":113,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"track-victoriadates.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1071.5fa049e.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1071.5fa049e.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1XUROqLQKmdMOX_LNIOqcZcsVVdjmozX7sC7aCcPZnow_WC22PxdSV7E7obuu1Xwes9NvjNgU\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:15 GMT\r\nx-goog-generation: 1774965135366892\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 333174\r\nx-goog-hash: crc32c=4naItQ==, md5=0+jysua3aYHBXOMUHMBPVA==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:15 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 23\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3c%2FGYr5sp3bXvmQ%2FpAHk5pnvxJ02F46eAQZ425VAmix3cCfeqEK1yxzfff%2BFYIcJdKwVutPPB31TcKBOSxKslOzNKNJ8L5RD6zAGo4yaSLE0f2F1M2hVijDp%2BSueDQ%3D%3D\"}]}\r\ncf-ray: 9e6ff36e2f4735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333174,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65513), with no line terminators","md5":"4af9af7ca15d63cfbf4cb828a7bbdd64","sha1":"d60c6dbfd9cef114e7f8c520689fe09ae91fdc66","sha256":"b5aa3ac85493f94d676bea63cb2751c5193c9db608da4de01f2cdc6d0b66340d","sha512":"4a9f37e7e307dd75126a2fee599f3d7ec6d04a3022286131422b4048c0c131e566cc7a0cf26b6d5d8bc7df271c7984c8c467f16617b1c6836ea8ab98b382fb44","ssdeep":"3072:KUk6gEqjE8Jq4oBRz/Jdz+VhK2wuGQHOwhsxaXvJDRd6ywMkDeT4Y2oXJJ+1:KU4EqjE8k4MRz/Jdz+VhjwJwh6aXvcz","tlshash":"d164f921f1d4b4b407a740a051274126f33d3a5eb60ae0a8fa6fd6e91794f45b227b3f","first_seen":"2026-03-11T10:42:57.605444Z","last_seen":"2026-04-04T11:25:41.297148Z","times_seen":7,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"{\"sent_at\":\"2026-04-04T11:25:11.556Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"83b436482d624577a476c99ce0b54474\",\"init\":true,\"started\":\"2026-04-04T11:25:11.554Z\",\"timestamp\":\"2026-04-04T11:25:11.554Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/choice/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:18.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/choice/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 346\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58; was_visiting_landing=true; cc_cookie={%22required%22:1%2C%22marketing%22:0}; cc_analytical={%22isEnabled%22:0}\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":346,"data":"{\"id\":\"f576d4b0-3018-11f1-b17f-d9e6974fe950\",\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"idVisitor\":\"bd82cd77-8f4b-47aa-8580-7da379baf2d7\",\"stepNumber\":0,\"eventType\":\"cookie_consent_show\",\"sense\":\"cookie consent eu, language: en\",\"response\":\"show\",\"landingURL\":\"https://fanforus.com/land/sp/26331650/\",\"clientDate\":\"2026-04-04T11:25:18.075Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:18 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 14\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mirwAtnoKR7v0%2B6%2FGqDVc5IhfzsJR%2BpisV8u16tddCzF2k8HK%2FXrDhf1P4NtokRR2SJlVUZMVQ5G59RWiyXEQPxtCjoW2%2FMJy%2BwVcD58r5mXkYKbzNwoM%2BDiCxzIEg%3D%3D\"}]}\r\ncf-ray: 9e6ff39c0fcd35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T11:25:07.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back= HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; expires=Sat, 11 Apr 2026 11:25:07 GMT; Max-Age=604800; path=/; domain=fanforus.com; samesite=lax\nid_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; expires=Tue, 04 Apr 2028 11:25:07 GMT; Max-Age=63158400; path=/; domain=fanforus.com; samesite=lax\nuuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:07 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 87\r\nx-gateway: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UU8DRsEmkUovkXVewLD%2BdJbRcbMezEWwlG1vIe139FTO1JpMBuPx2ElTy1TLt1nrlZSeE64A8oD6P9yUqOumnydV3bPt%2BJb1TJY7l5QMp1WNIm6wYT5dE2gcOl9XyA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e6ff357ff7c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":25939,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1631)","md5":"a826da179bab3f85199cddd7c91bb157","sha1":"9aadd73e21ba057bfcec46cb1541923582e25598","sha256":"6fc64e69d663a7c52edf10d6316d3f8a2e9e1e59397b4a8a1fa29eafa7dc1cc9","sha512":"a5eee4a61df8e514a0e537003e30235ccbe1014687a44eb77111903812b384d2173ed412961f7ebd3dc13b57d71773e77d4eb3e6dab856376c4b7a44685bf929","ssdeep":"192:8SuFe+70JScOswiWLYYxScSRs3lr0FKPwtSWds8V3Y+sl5CwpYT/VOUj8W:8Su1UIr0AP8SWd7IbC9","tlshash":"4ec2755e6dd3420a0332517c958f9050aa71ec23521ad9f5ff9c86ec2fc4698cab1be9","first_seen":"2026-04-04T11:25:41.297946Z","last_seen":"2026-04-04T11:25:41.297946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":51,"dns":28,"connect":1,"send":0,"wait":242,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:09.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 418\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"{\"sent_at\":\"2026-04-04T11:25:08.991Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"1ea1aa47f3844a6b8c4d34cccb4010f8\",\"init\":true,\"started\":\"2026-04-04T11:25:08.989Z\",\"timestamp\":\"2026-04-04T11:25:08.989Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:09 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/16.aca1bab.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:09.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/16.aca1bab.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:09 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2B_-pCh90VF9sBMaIno8B-80YJpt3qeoJR4lwdAHxhkYOhjMcowomMSrbpzFABWL5p\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:09 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:13 GMT\r\nx-goog-generation: 1774965133603235\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 90359\r\nx-goog-hash: crc32c=u3XSaA==, md5=FUft76u+RQHuGZ6yBl0ULQ==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:13 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beyJlYAvjKzeK9p6yiHq53w4RNa%2BeCHZeb1jestwz9fe%2F3DoYNglNhDcw5CWFsrFuTDKGBKkfdVjq94H5kPSd2%2Fhp0xJkuQCHCIHSORfJ1j7VohFU%2B7sUUpueEJvVA%3D%3D\"}]}\r\ncf-ray: 9e6ff3639c5635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90359,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators, with escape sequences","md5":"1547edefabbe4501ee199eb2065d142d","sha1":"b64594e2031b199235e77f7ad9f3b12365e8c3df","sha256":"f1a019664a83be324e8c787601db61b31929890c2815367b8297f9c3bfc80118","sha512":"ae55b13450f40f297b40d2a4b2f9b5c2cbb64bd6729401b5ac9a6f3bf80bfea4379f647b9afe6dd50d46dedf789b66c12435384c2fd65222e6eae0ad9bebef79","ssdeep":"768:h1ulaxz5I5Uxc23ldlpBEzfbDb1Cqi9UuTw43q2uQ68Q0sloCDDcMJj4Q:h3c6ldlpWzfbDZCqZeszPBb","tlshash":"bd93dd9932a90b2b13be60fd99f641936c7f3b5637759c02f8a1e612a7113ad303d217","first_seen":"2026-03-11T10:42:57.603485Z","last_seen":"2026-04-04T12:09:38.668455Z","times_seen":54,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/0.706e729.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/0.706e729.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1q9NTnfDaxAx9DwaFoNlkrIjrTQoOcmPqTHTW1Rldc0itqvLFBH0N7vDUR8fSmivaJe-eNUhM2OvHftg\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:21 GMT\r\nx-goog-generation: 1774965141491170\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 22065\r\nx-goog-hash: crc32c=lII2ng==, md5=h3J1fqkJGS7rnOL2LpErJw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:21 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 30\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJmhSDIxW73lCYsB7R2kjvtoPLLTdTGTyLEBPdo1V9huSLUHS%2FjfkkQvvydzv4VoGlbjS4aG74CbBIW%2Bn5t2XKHeDjQceMBfj6uNtAeOIkuuSHlmUtye8izJq%2FT4yA%3D%3D\"}]}\r\ncf-ray: 9e6ff36e1f2c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":22065,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22065), with no line terminators","md5":"8772757ea909192eeb9ce2f62e912b27","sha1":"71243227dc83f1fe987923b91d4274a0f44483d3","sha256":"98ca61e0720e067533a63f1931b6d961bf473ef21448c180c20db0d236820645","sha512":"2807a832c6b29dd74cc08eb7726fa955f362e49e226e2275093a2b6b7e2102b1cc25ac54053990c1e0c5a2d8c18117acc07b1f6db493a83821fa3a29ad6f3ccd","ssdeep":"384:7gwDakELxg02CaZdsruVKMMamaUX+C7SdVsLS82oPYBaZK3Y7cC:ykELxgx7XJmaj+4B2Hv","tlshash":"baa2e7cab6a4b0a203e771f040af590bb3bb6529744d8460f750e8e56c7921f9637f2d","first_seen":"2026-03-11T10:42:57.543377Z","last_seen":"2026-04-04T12:09:38.676081Z","times_seen":54,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/2.f34159d.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/2.f34159d.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3Og2p94IvDqhsosjxvhZJ0Lwi8RLaqra2nNshlX2mGuj6b7yGD_IJDRWXwH_T15QMK\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:21 GMT\r\nx-goog-generation: 1774965141623563\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 64452\r\nx-goog-hash: crc32c=LKc2QA==, md5=76jv16UYebkbOK3njwe67g==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:21 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 20\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdPU8YIRgSyzl%2FKKhegObmRHLDABfhFsIbvVGXLNmGw3%2FnyleQzPQD6ixrdP%2FZ4%2BWCWCc%2Bkk6%2F9ff340JMDPM7TbMBglZSMfvhDSwYCNNJyFP%2By7NOX%2BcIbLyd6kKw%3D%3D\"}]}\r\ncf-ray: 9e6ff36e1f3135a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":64452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64452), with no line terminators","md5":"efa8efd7a51879b91b38ade78f07baee","sha1":"866b785632119405f1efc94bfd357935f32d5620","sha256":"ce49acb7c4147c32532b8468d977807926a2d23cbaad5487d5004668d1f1ac6e","sha512":"36ff5ec5210e25b93f4e344a5e8f7636ac54310b7f81ca3ccb20b90e2867737956e66c187db28da5ca5d99549cc573aa89db8521787322687225b52429fff1aa","ssdeep":"768:veg1X0qGV2p5vZkC3F7FKVn0mdQGWyvd4YD/1+aIH8:nkqGV+F7FK50AQGWyF4YD9+aIH8","tlshash":"c953538af6c7f0650293e5e8807f102af33e7a99341e8424f666d9d53c6d6489133b7e","first_seen":"2026-03-11T10:42:57.554669Z","last_seen":"2026-04-04T12:09:38.679425Z","times_seen":54,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 423\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":423,"data":"{\"sent_at\":\"2026-04-04T11:25:11.556Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"1ea1aa47f3844a6b8c4d34cccb4010f8\",\"init\":false,\"started\":\"2026-04-04T11:25:08.989Z\",\"timestamp\":\"2026-04-04T11:25:11.554Z\",\"status\":\"exited\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/d37d9538de4d6afd6f97c7f1756e96221757677322.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /d37d9538de4d6afd6f97c7f1756e96221757677322.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 97626\r\ncontent-type: image/webp\r\netag: d37d9538de4d6afd6f97c7f1756e9622\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 57\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":97626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d37d9538de4d6afd6f97c7f1756e9622","sha1":"cae5ba3dcd48fdaca4746978417dff6ce8198a04","sha256":"2d0aa7c93677064516ca5c2213fde7ebda67325ad81babf17ede1e510788238e","sha512":"c4bdd43958840481521a81e44dbd39f4dcd55fe8670e25454f045c96559d9c0d29d404c02bae85f343e585416a9841c1343b4cbf1d79e1e423916be2aa800af7","ssdeep":"1536:8BPOQeRwexUe23EoJ0MwvMmEHMLoEksITn5BsmtwhkMdvFaEsxoff17pTMbFjGDU:cnemewUoJCMmEHM06ITn5LMd9lsxO7to","tlshash":"3d93122e91e2e2b1cad2137f4398cb466eefd6549e235f5a9627303ccb61de8041c9d0","first_seen":"2025-11-29T14:56:43.968479Z","last_seen":"2026-04-04T11:25:41.30137Z","times_seen":7,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":264,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/a9687f76e13df7a13f1c672797fac90f1757677323.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /a9687f76e13df7a13f1c672797fac90f1757677323.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 90500\r\nx-envoy-upstream-service-time: 64\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: a9687f76e13df7a13f1c672797fac90f\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":90500,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9687f76e13df7a13f1c672797fac90f","sha1":"9f3151755b7b352ad58dc0fb24bf8642dfdb903a","sha256":"68e3b02588c50f5ca19170f79f94fd009cb28e126f59a7bde03ed0928f7575af","sha512":"0d208f6f3d5c891655b2b2ccc3ed2252835797f2819000d71a973870bdfe62e3d18f92bac03c74899c160c686d4a630ab20f0b58383cc010296e7f21d658821a","ssdeep":"1536:OBPOQeRwN6poM1Va9W4zEOlRlJAaRRp0ggq2AGR58pPBnIylaiUGRYyUuFd25B13:2nemWoM1Va04IOzB30ZSq8p9O+Cu25b","tlshash":"a69302bfd3b4a96ad8dde3714b91c117412ef00a392c6e6b4676e1050b0baff9d02907","first_seen":"2025-11-29T14:56:43.969834Z","last_seen":"2026-04-04T11:25:41.302886Z","times_seen":7,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":265,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/e610d3929f259ff8a3c467d6df75f1f21757677323.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /e610d3929f259ff8a3c467d6df75f1f21757677323.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 117072\r\ncontent-type: image/webp\r\netag: e610d3929f259ff8a3c467d6df75f1f2\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 66\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":117072,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e610d3929f259ff8a3c467d6df75f1f2","sha1":"80e2a8bf06b6936fb4c3dd63f619cf2f0473d329","sha256":"ada7b5890d37620ec535e530560f98f53a6a44a40cbcf0c817e28190f023a521","sha512":"08243be07720d07d6524da5cc1ae9fff9cb8ec2488eb05ddeb0bc298a1c75f8f3fe3d23d9e3e778d859568b28986323215f044228e0124945491270e6296c0d2","ssdeep":"3072:anemRn28l13+k/Cr1ScPOUzuih0Wsi/k2JoC:aev01pCr1ScOi57JoC","tlshash":"b1b313301bfd9bbbc97369be7a22069929ce71159e56d4db8c325143ca0dbd440eb0ca","first_seen":"2025-11-29T14:56:43.980136Z","last_seen":"2026-04-04T11:25:41.303667Z","times_seen":7,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":273,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/choice/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/choice/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 323\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":323,"data":"{\"id\":\"f1bcb2e0-3018-11f1-b17f-d9e6974fe950\",\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"idVisitor\":\"bd82cd77-8f4b-47aa-8580-7da379baf2d7\",\"stepNumber\":2,\"eventType\":\"backstep\",\"sense\":\"Back button clicked\",\"response\":\"back\",\"landingURL\":\"https://fanforus.com/land/sp/26331650/\",\"clientDate\":\"2026-04-04T11:25:11.822Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:11 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 16\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBUAw%2BgmWhyI1svBzvjMgK77Vb3rLSYGxbFWla6%2BXaa3kXH9AENny6TdppiU4zY70M0xk7S%2FISEH%2Frj5V6JBqV8%2FGSf1uS9m3W8%2FffMDccqSuoq0qh9n91wTfPGx%2Bw%3D%3D\"}]}\r\ncf-ray: 9e6ff3750a6235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/js-chunk.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/js-chunk.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:07 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1wHI4PGsjS67UzzbI5lLkt26S45X1eRRizYgHuLheO38iacbDYn479ZU0Cy-md4XM6\r\ncache-control: public, max-age=691200\r\nexpires: Mon, 06 Apr 2026 22:50:24 GMT\r\nlast-modified: Thu, 26 Mar 2026 08:31:17 GMT\r\nx-goog-generation: 1774513877760536\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7088\r\nx-goog-hash: crc32c=Qfy7dA==, md5=06q7ZSgaAxPYpkSIwDsabw==\r\nx-goog-expiration: Wed, 24 Jun 2026 08:31:17 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 35\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 477283\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GOiTLY67i%2BbB7MSR1z%2BZWqIidsqrvIDotHQ6jHq0xzueKDWwpj4o2uxkAizbasAz7S8JQOmWWfl3f1Xj4SAhUhZf0w%2F%2Fn7YI3XZrHaCZGYTbfcSm11tya0KbeSaoA%3D%3D\"}]}\r\ncf-ray: 9e6ff35adc4835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":7088,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6983)","md5":"d3aabb65281a0313d8a64488c03b1a6f","sha1":"d2075d6433436ff2b0a445675a23a84f2aa7b169","sha256":"380f56cbba459ca472ea5d303b6d168cf79b6e74dbc735837fef40f08591db6c","sha512":"51171e9b5f69c742e956454f37705d9f5c19cbcf9b09bac050b70cadb0561acb53782b4eb3ec84df52414debaccad6f17f0343c068a2d8c987e6e09687bacdbe","ssdeep":"96:VbUeZtI15J0Idq081frSyMvLmNwQUJi7tDyGqBNyQjLTSQ6HZ0xKwqy6D8ifhDwE:pUeqhRkfr7Mv6PQwxQqmowejhUD7s","tlshash":"49e1a6dcb385f3755366a876a03f7106e73e39491818b930828ed4817e75d4ee922f9c","first_seen":"2024-06-22T10:44:55Z","last_seen":"2026-04-04T12:09:38.680987Z","times_seen":670,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/3.a1b7253.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/3.a1b7253.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3c8fEFB394kp3C9UX6Jenwwtui8r2TpGPnqJU4tFEBcaoDPXF7lhACxiLEJcWl0cGGPLzFnQw\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:25 GMT\r\nx-goog-generation: 1774965145624951\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 23393\r\nx-goog-hash: crc32c=1rS10w==, md5=zt4TNZrWngkMCOUmMyjXIw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:25 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 31\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KLIZtK68vMCwGwwTyskEo37jffp3gPkyNQcd3WyHgPoeE5mZLBr%2B11WbiMPYADU7gzvCNREIfOwbCLMQNJTDQtQHPrEVeEyiEFwGdARzw7jbKPuWMqJmDFStI9YyA%3D%3D\"}]}\r\ncf-ray: 9e6ff36e2f3c35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":23393,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23342)","md5":"cede13359ad69e090c08e5263328d723","sha1":"e290841dba090e56d977137e742533929e0d8767","sha256":"8662f8b7a4286c8191343ad1d1c0922d502282057c223916287d9e232e28e487","sha512":"fde0c69df920b2844e69983f43015adf2613b2409149171189e460d2cb68a5ac9d744bc20e282049ceec88bbebca2ef19a95802f54ca3741e3505207ed2c5fdc","ssdeep":"384:rRCCIEAJucUv8OlM65vV54rBXEOBriSARU2wAA+Euh8aOsGsfMbY8:rUCbNv8+M65N54REOBriS5AA+E28a2Iu","tlshash":"73b229ad7811b8355bea42e550bf550eb17d145a200880a0e7daecf468befd96037f2f","first_seen":"2026-03-11T10:42:57.567539Z","last_seen":"2026-04-04T12:09:38.676944Z","times_seen":54,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1837.eb9a318.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1837.eb9a318.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG0CBEaqNqAqMoWR7B8OlP7B3pv9v4CbTUVrVVSbuOuB_zkOcqxhsQjn2K_GtQA3Psgl2SZ_fnc\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:31 GMT\r\nx-goog-generation: 1774965151346120\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3276\r\nx-goog-hash: crc32c=sn+4qw==, md5=L5QD5Q3qscrTP6/VJWXKAw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:31 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 26\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HH5akqgqCWvnhZUqA%2BRh%2FgFGMRbyVVhSc6tWDbaY1HWkxtr3%2Frg33%2BGHqzbZhZ2hio4KFTSQ4GH6IB082XKp2TfniDOd3jJ%2BhbZlYzbWg5XJpmH%2FA6fzjQPxCtrhyQ%3D%3D\"}]}\r\ncf-ray: 9e6ff375ec0735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3276,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3276), with no line terminators","md5":"2f9403e50deab1cad33fafd52565ca03","sha1":"6b765dd22c6fa74fc480ab9a820459cdc455c8de","sha256":"dc073a3778b23aa6207d040bd25fb8e5ade0c98ffc2f8d7456be2bdae470cb97","sha512":"ba5e9c20c620edf59cd4b95c1ff068b5b1768658c8498763030eff811fff7e4efcb41eb456f16e265fa829b869f10d2feb262f79b29e7536dd13e2f651032383","ssdeep":"","tlshash":"8d6130eaf9728429437140c0a03f8965f12f395c6789d18d7ad24cd97a60f9da100bbf","first_seen":"2026-03-11T10:42:57.590596Z","last_seen":"2026-04-04T11:25:41.306335Z","times_seen":7,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/favicon.ico","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:12.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58; bannerManual=true; was_visiting_landing=true\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 12:55:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 13:34:30 GMT\r\ncache-control: public, max-age=691200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnwQn7g8uym0HABaYfeoww308mzvhypQAqzyjnSSY0j0QY%2BeFcGzeaw0EMHuVuAQlxbOMNRdn4sXZcQq2UElYSWjQn%2FS50yTaro0qrJqt3K%2BEo67xOct%2Be5FmL8hgQ%3D%3D\"}]}\r\nx-envoy-upstream-service-time: 1\r\nx-gateway: 1\r\nage: 78642\r\ncf-cache-status: HIT\r\netag: W/\"69ce6732-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9e6ff37a2b6535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0928c85037260abcfd31f8544c481e37","sha1":"1c5effd6d29b7f1f8143a8e506482a89b43ab451","sha256":"a61f22f20342d801a0510b07024089f25af251182cd4bdd38d425461106b9e9a","sha512":"a3cb3204bc16b64017ebf8602d4517effc7c1a23ccdac7d4ea56a2084ff947a2fe7bccb162c45b56246d247b1c86b742b5a5385a1ce1c65f157b8349f9554a10","ssdeep":"96:NlfLXVb1/WKOTwcaycvIx7b5yJ7fvlqxij1m7:NFXvVowcayP7b5yJf1m7","tlshash":"f1910b0b158f2446ccc2cf3455ceb253dab7fe2972961c0620adb5f6d2bd62322a2747","first_seen":"2025-10-04T13:16:52.48832Z","last_seen":"2026-04-04T13:15:06.907338Z","times_seen":13,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/8.91ba656.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:08.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/8.91ba656.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG2EFsU4mEi6jhsxh2mNHSBOjzzN8WaJOXDBvIMZBqx5XnnhdZjXTDKlYWtCBnGIewg\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:08 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:25 GMT\r\nx-goog-generation: 1774965145457353\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 15688\r\nx-goog-hash: crc32c=lv6S2w==, md5=ywt473jVBkythm4/uZIOEQ==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:25 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 21\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uo373qG61I8KnFwn%2BS6EIgA2BZTdtaFY%2FK4MJg1347JZ1RStS%2BZotpMRiiqME3hl8hhCVl7s2ygPdp1ynCtQImmHjxyUxCxM3j%2FwX6FotspKqDVnCfIJYy%2BpK6nnA%3D%3D\"}]}\r\ncf-ray: 9e6ff3601eb435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15688,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15637)","md5":"cb0b78ef78d5064cad866e3fb9920e11","sha1":"c2f109887178863f6492a4f48b8688c7dc8111e9","sha256":"832e6d5fe43f599c0171028d25bf427f9c325520635301ccdb83d9d963f5db12","sha512":"99d9d6d7ef3f7f64692053e98672f886d8ed997ab664c7ac44ee67a4cb410caed262a15b9040f9344f8c2d16bc012d0ff9d467bd0bcc96d1b029ad29ae7a4c1f","ssdeep":"384:/tt7dN7JbcQzyzB7tb2o/bonPOtGgIFk5:/rtcQo900bCOAgIA","tlshash":"c66253d8b5e5f06543a376b4803f100ff23a39a9649da4809750d8f6bc7858ea167f2f","first_seen":"2026-03-11T10:42:57.55326Z","last_seen":"2026-04-04T12:09:38.644042Z","times_seen":54,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/scheme_493_scheme-391-json.e858fd4.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:09.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/scheme_493_scheme-391-json.e858fd4.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:10 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1A8i6c8u7laI6VQv47lK7NoYsg3mtE7VQLNvZBT_j1zWA3GoBAQdeNykcanHRNvuaMm9ptRCI\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:10 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:26 GMT\r\nx-goog-generation: 1774965146544864\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 45450\r\nx-goog-hash: crc32c=kw/IcA==, md5=7p7HxoJpBqFFeIyOcItB7w==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:26 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 31\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhEg1K1YmescteberXhuPFx45m0T3lvNyH4nx%2FlMlDSMdD1J5A2tWk31oGWlDqXJX6fcUunZ6wFPuEHk6QWMVbaa9s52NdQkkJZrhrAKb4FeXpelo031pd84n1gddQ%3D%3D\"}]}\r\ncf-ray: 9e6ff367ab7935a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":45450,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45359), with no line terminators","md5":"ee9ec7c6826906a145788c8e708b41ef","sha1":"4e2634694a87f32a59906adf11108a790113e741","sha256":"9603753109bb4bbde5f33757a7e9a846fc79b805f61bc2960069da3455d505d7","sha512":"f5083958e101b2bc0f1a48e045603ec8295f88ead7e5fe7495916d26061ca4b562f10485f5c8edb4c30885f3af34b94442a4e7fcad648c77dc84b9ffff25409d","ssdeep":"768:fvxnPS9XJhe+vGmHNcshjt5YO5RXHmSXH8Nh+N3g7LJVOEv:xae+vLNcshjt5YO59kNh+tg3JVOEv","tlshash":"c4138d6773452c282f35d7d18c5d682ec19eb27badc9eb89a3048dc01b947e7112a8f7","first_seen":"2026-03-11T10:42:57.548833Z","last_seen":"2026-04-04T11:25:41.310167Z","times_seen":7,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1729.9ff0bea.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:10.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1729.9ff0bea.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1AAINTQYrwGRSPrBCNdDLU2-Egc99-_48QpxvE8Apj_7W5gcxy9BP8dlayHP8r-Es\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:11 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:13 GMT\r\nx-goog-generation: 1774965133730284\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 64636\r\nx-goog-hash: crc32c=RpcB9w==, md5=cY0gXfMjudDsreLMcCLLYw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:13 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 33\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTdBmlOHoKOLL2zUOzCwLDUkHHM%2BWi07JWrtkRaRydtfMLKGLNX2bTLJFNMCi%2F7jLQ7v52PaSn6CkXC6rpbOzRB9sP%2FxurRq3zAVrum%2F6qDP1b2HOB1vyGRknlLLLQ%3D%3D\"}]}\r\ncf-ray: 9e6ff36e0f0635a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64636,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (64636), with no line terminators","md5":"718d205df323b9d0ecade2cc7022cb63","sha1":"6d670dc57422abe3f8b62cfa0f25fef3670f75e1","sha256":"5952cb6df37aac809e8dca7c648d1507e27db33fe73b9e218fb298ca807aad77","sha512":"f478746696ff8d613af4a8f6faa16dc140adc85a2c0c7b18a79542c5741a1dd8f1de80123a4b9bc8f4347d490c0c60a502d9ab838d90075fd35fba42da115a1d","ssdeep":"768:uQWmPGGpBQGdpTCQ7QroFyt2TYiYePYMHwMY+Y3E3EabpyeD:xFq4TYiYUYMHHY+AE","tlshash":"bc53c6674645341eb23bc633f8c57a5d2028c553ee230dbdf6966a2ac7862c6237339d","first_seen":"2026-03-11T10:42:57.565667Z","last_seen":"2026-04-04T11:25:41.311122Z","times_seen":7,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/9d80323316e3147ce868f6c8b2ab49b71757677320.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /9d80323316e3147ce868f6c8b2ab49b71757677320.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 199938\r\ncontent-type: image/webp\r\netag: 9d80323316e3147ce868f6c8b2ab49b7\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 35\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":199938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d80323316e3147ce868f6c8b2ab49b7","sha1":"854afc06cf96c4dafb00f19890943c9394860582","sha256":"601c22163474e8b42371a56c810e3729a3b22d6f0e7fff29055421f1a11b5b13","sha512":"00e65f7f563470151e3acc0650a7782651f576d660326cc7be788fcd0ba585773ab8b6705b23b54164da3c428e89daaf46af254fb006bb2ca8ffc3c11eb7425c","ssdeep":"6144:pezeSZNrLBnoGO0tPlMoGVLO0kXU0lPWOsd/4ZQ:pezf3NEUlMTOxRW1d4Q","tlshash":"5814120f0eae827dd356c3b2bbfc5cd5167be8a1849c9a5638712520b3174e4ba4713e","first_seen":"2025-11-29T14:56:44.013559Z","last_seen":"2026-04-04T11:25:41.312061Z","times_seen":7,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":199,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/choice/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/choice/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 323\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":323,"data":"{\"id\":\"f1bc64c0-3018-11f1-b17f-d9e6974fe950\",\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"idVisitor\":\"bd82cd77-8f4b-47aa-8580-7da379baf2d7\",\"stepNumber\":1,\"eventType\":\"popup\",\"sense\":\"Why miss your chance?\",\"response\":\"click\",\"landingURL\":\"https://fanforus.com/land/sp/26331650/\",\"clientDate\":\"2026-04-04T11:25:11.820Z\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:11 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 14\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTRYWPGPE8J3RQoapETYBhnrE3vKaMh0UAbsgLwrNA9PoJ5kpECa%2B4TQ4S1JhHZ%2FZBFLJt2iwbxZbPqY9g9AzWsvEET%2BQfqpZQFKlN0J22C4r0OLBYfpgP5szGQTlQ%3D%3D\"}]}\r\ncf-ray: 9e6ff374fa5235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KNBMWP5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:18.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtm.js?id=GTM-KNBMWP5H HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 04 Apr 2026 11:25:18 GMT\r\nexpires: Sat, 04 Apr 2026 11:25:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 04 Apr 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146191\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434345,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12524)","md5":"280c0191270f368913ae363c0816e2c9","sha1":"3a2859a1a86d7f3150ffb810c8b14ef58271a644","sha256":"f0d34cc40d36ad2d1fac87891525375bb334ea1d90e4220b471c0540f7c57ed6","sha512":"e2bbff7f218b4cf0dd9cbb49cac17254bbe84601302f3397c19e60ee81480a339d685356f65ba00aba791e171856f6dd7df8494ca398ed4d7bc533714dc5529f","ssdeep":"6144:I3eqQO998DP9cGb/F8x/aGW+/5EiWTtcoPlgfWH:6v8CGbt8UNic","tlshash":"349419cdb3d6746643a3b478943f018ba17a29e2b84cc895f185dcd42e74a9a4273f7c","first_seen":"2026-04-04T11:25:41.312801Z","last_seen":"2026-04-04T13:15:06.907908Z","times_seen":2,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":83,"dns":5,"connect":21,"send":0,"wait":21,"receive":26,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/app.2301f84.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/app.2301f84.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3O9eKCYE7V_YRCX9u7N80bHJLE_qbHEbOljlqb-x9JrWaJKbKJXKebEWeYuZVrj0b2omIVConu_YX83g\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:08 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:22 GMT\r\nx-goog-generation: 1774965142152126\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 127123\r\nx-goog-hash: crc32c=174BPQ==, md5=C3xxIzQHFIuXPTJZ1+Ma5Q==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:22 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 23\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9INHD%2B2X9v3soF8TFK4743pSGzPgae1c%2B0%2BC2zXOm4ORb4ucb6geikCjB%2B92zdq2O%2FC3%2FUXXmPhZYbr6BHlYcdyerNzI%2FN3JmiBIjLTNrwnT7dLurzm%2FokCP7K8Wpg%3D%3D\"}]}\r\ncf-ray: 9e6ff35acc3d35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":127123,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65366), with no line terminators","md5":"0b7c71233407148b973d3259d7e31ae5","sha1":"5d9c468f63a86e15fabb74d0066b09f26b9d18ee","sha256":"65c23a088fd4512e4912afa1e7458c390a4b7153def8e3f8f47f578bc4eea14f","sha512":"cf575d3dead589d16c622f5197e53b85db446e254a0c63e929f58c8e07b39012f0f47c409cf9829288b8817581f913dd3d707b66ba4c344800fed886084c9d77","ssdeep":"1536:V2fLLWazlcaBoXwWKE57Asvj+Az2d3lnC9kejNtabt:V2jfq6Em6KVdVC91qbt","tlshash":"d7c34c5d76c8710902e30261b6db0247f23897d1f129c45ab545c2ab22d9ecfe37bf6a","first_seen":"2026-03-11T10:42:57.552119Z","last_seen":"2026-04-04T12:09:38.652851Z","times_seen":54,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1893.b70621e.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:08.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1893.b70621e.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG1whvXxHJ8t-ZVWCDzbucHBVLFsJsIBfopFTaCQh8COumNbUhSiijg3PVoGWl0VNnFP\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:08 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-goog-generation: 1774965146787213\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 779\r\nx-goog-hash: crc32c=HY2Udg==, md5=9JH7TC3YbrjE07fAUJYtDw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:26 GMT\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJ0Oj63ilLGGhdtb3OjAVeHR88ATUY3RDJhGrqmzVOMKNpUXCdY7dNOKQKjAtNIHROrB9BuY8OotKb0GdT8EKCLaW0alck6gPHi2Nq36s7fHflwjJBi7mbz7cqJbyw%3D%3D\"}]}\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncf-cache-status: MISS\r\netag: W/\"f491fb4c2dd86eb8c4d3b7c050962d0f\"\r\ncontent-encoding: br\r\ncf-ray: 9e6ff3602ec435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":779,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (779), with no line terminators","md5":"f491fb4c2dd86eb8c4d3b7c050962d0f","sha1":"cd166af811f540eb6168585a3066e594002345a9","sha256":"66c8e0ca954d2ab197ec659c49164ba3fd46ef5184aab97aae8058b41bca90ab","sha512":"7ac42142f1624a486be11a70e471d1e55243829e01e956deb18300071471bfcc8e5012e248bcf06814788f8d1aec80454869c74e488602a5146387c0545a85d9","ssdeep":"","tlshash":"ff018eed5302946503a39c964b3f7b63b19c21071e8695a45db3cae8376e94ad051cf8","first_seen":"2026-03-11T10:42:57.594949Z","last_seen":"2026-04-04T12:09:38.659499Z","times_seen":54,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 11:25:11 GMT\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7fbc57b14bea8d6561fdb50fc9c3008c","sha1":"9c9ed86aaf4ca655f083c9c80db324d053d3dd11","sha256":"d90d7d2947e295cba230edef392df55e276c2f3c87e04908d093aeb005da805a","sha512":"d70400de88d9d540ba4e871b2c2c4b997f81bdf1765150d65c2ab18a959c9efa4f910735b3873d43e1eabc646c078533972106c111a4838357f866b44cf57c40","ssdeep":"192:+foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uxzBY:+QOkTltULv1qY49GnDu6SqY47","tlshash":"9f420c910417144096835dd233de7e34ee0fa6616044c0baabfd9bdbeecad69a3b435c","first_seen":"2025-09-17T08:42:41.023406Z","last_seen":"2026-04-04T13:37:00.701197Z","times_seen":3767,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":89,"dns":1,"connect":21,"send":0,"wait":38,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/c9fbf6e38ec98470b893459e478e86d31757677323.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /c9fbf6e38ec98470b893459e478e86d31757677323.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 158342\r\ncontent-type: image/webp\r\netag: c9fbf6e38ec98470b893459e478e86d3\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\nx-envoy-upstream-service-time: 23\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":158342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9fbf6e38ec98470b893459e478e86d3","sha1":"85d761c0e45ab0e9eb64b1427bc8e26524ffbe34","sha256":"8a71e68542012f7b158db54cae7deb806b8d4f22873933772f055c0905436d3f","sha512":"00a56121e58b710a1d48f7b2ea3d717f88dcd1c785b0d9797f14a988a2a546f50f77f28abf1eeb27caf1ebbccfc6828cbfaa8dfded21a3861fdfb124fc22d898","ssdeep":"3072:KnemaFqIczM/bTMbr4n9EllSylqcRHF5JJ29csI6hbud3arbNVxwde1y+54:KeGIUMb4on9Xy1ZJQ9cslh+3arJuEc","tlshash":"75f31249e7aee2d1ce19353c2087ee1299dee3952646e2ef00e5c52cc12e541daf20f3","first_seen":"2025-11-03T14:58:22.225442Z","last_seen":"2026-04-04T11:25:41.317752Z","times_seen":8,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":213,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land/track/visit-device/","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"POST /land/track/visit-device/ HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 315\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":315,"data":"{\"screenHeight\":1024,\"screenWidth\":1280,\"browserColorScheme\":\"light\",\"browserLanguage\":\"en-US\",\"reducedDataUsage\":\"off\",\"internetSpeed\":null,\"connectionType\":null,\"networkLatency\":null,\"deviceMemory\":null,\"tabId\":\"0199833a-fd33-4318-a2d2-bfe819b1745b\",\"clientDate\":\"2026-04-04T11:25:11.807Z\",\"displayedLand\":\"/391\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nset-cookie: uuid=ac6348e6-400e-410a-b5a5-363d062fde58; expires=Sun, 05 Apr 2026 11:25:11 GMT; Max-Age=86400; path=/; samesite=lax\r\nx-envoy-upstream-service-time: 17\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://fanforus.com\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cr9Mjdyp5h0RQ3de1Y5VmUpkbFBOcCQQHid7jry5Eoiq1XUlwIgEnxiRCfOCUbwEhcKHP%2B9Wv10sAWRr24%2BszS3bCgR4KYBJn6quheIhIahqb9rbsE70vUH4GTJFQ%3D%3D\"}]}\r\ncf-ray: 9e6ff374fa4835a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 29 Mar 2026 00:37:47 GMT\r\nexpires: Mon, 29 Mar 2027 00:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 557244\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T14:49:58.460268Z","times_seen":199214,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/ns.html?id=GTM-KNBMWP5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:18.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /ns.html?id=GTM-KNBMWP5H HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: *\r\ndate: Sat, 04 Apr 2026 11:25:18 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 92\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"503957084b1a48219ecf52a5b81ca4cd","sha1":"54bf6901325ffea201bbe2087f45f728c4cabb90","sha256":"1508490e2a7f3949d866ce8f032895224c55a02eb24f9ada50c7cb79a4c887c8","sha512":"e7753743951c15e9a74e647b09126c86ecf2709022da49484f2fa7ab4c509ff88654e0d4a51c6c10f7ad7ca964dc010c26e262685a14ac83812e5c399931c955","ssdeep":"","tlshash":"29d09b4fd0013404d92052b05cc2776414516544f5e58d536582f4355d44755cd53158","first_seen":"2024-03-14T06:12:33Z","last_seen":"2026-04-04T13:37:50.275898Z","times_seen":7861,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":71,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o4505715306201088.ingest.sentry.io/api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0","fqdn":"o4505715306201088.ingest.sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"34.160.81.0","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ingest.sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:C7:A0:3C:30:51:F2:AE:98:2C:88:9F:C7:8D:24:55:ED:C3:34:BD","sha256":"78:73:F7:3D:EE:58:1B:F8:9A:1E:17:AB:A3:70:00:86:76:EA:4E:AF:AB:F4:7B:34:5F:FA:39:D8:3B:5D:F4:B5"}}},"request":{"raw":"POST /api/4505781260189696/envelope/?sentry_key=093dff7018224d01b3c6a545e8e7b39e\u0026sentry_version=7\u0026sentry_client=sentry.javascript.browser%2F7.46.0 HTTP/1.1\r\nHost: o4505715306201088.ingest.sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fanforus.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 423\r\nOrigin: https://fanforus.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":423,"data":"{\"sent_at\":\"2026-04-04T11:25:11.734Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"7.46.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"83b436482d624577a476c99ce0b54474\",\"init\":false,\"started\":\"2026-04-04T11:25:11.554Z\",\"timestamp\":\"2026-04-04T11:25:11.734Z\",\"status\":\"exited\",\"errors\":0,\"attrs\":{\"release\":\"tds\",\"environment\":\"PROD\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-04T14:49:43.141813Z","times_seen":554336,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/fbf1ee8505505426ee2bfa411d7d3a3a1757677317.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /fbf1ee8505505426ee2bfa411d7d3a3a1757677317.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 92094\r\ncontent-type: image/webp\r\netag: fbf1ee8505505426ee2bfa411d7d3a3a\r\nvary: Accept\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\nx-envoy-upstream-service-time: 54\r\nserver: envoy\r\nvia: 1.1 google\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":92094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fbf1ee8505505426ee2bfa411d7d3a3a","sha1":"07054face7a84eed478d977975152c1f00b83c8a","sha256":"7824228e410ac3297d0839629598e470b9a07395595af22983fb2aeb73605e36","sha512":"ecd850be051456581f7f170525789946a6d09deb04955b14e765d0380fc4ede918fd5777cd3a90500c1899f92d9afabce3fcd451adca70c6bf17c6d7588034a6","ssdeep":"1536:aIsVw83ZFoq5zcWhLQF32L22y1ckuekHnxjakOGIDoyuVQU9BTXc4W93CpTtfiyi:axh1xhcdfenxHDIDokUM6Agu","tlshash":"009312e74b184696e06610384b45a84febac20397f252777b464ef5ba774cae4c432cf","first_seen":"2025-11-29T14:56:43.973559Z","last_seen":"2026-04-04T11:25:41.319952Z","times_seen":7,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":97,"dns":1,"connect":27,"send":0,"wait":232,"receive":5,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/432e6706381835de2b9ef176a58c84401757677320.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /432e6706381835de2b9ef176a58c84401757677320.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 105418\r\nx-envoy-upstream-service-time: 38\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: 432e6706381835de2b9ef176a58c8440\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":105418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"432e6706381835de2b9ef176a58c8440","sha1":"bc440546406c725c61e9cfcfdf5413d513c87b21","sha256":"b5d757364c72fa9fcbfe84a421c0b05617d3fa0bc6b1d3516f1ab4b62905217e","sha512":"e397770ee0966f26c818b820e43ec5d03f2b8f4a0259084fd15e5845c4bf49d5cf811d812374441c3581f4058b0b6067157dde037bac3e1c0826a67da97e0fbf","ssdeep":"3072:enem2otwHMGUYRpn3Xb0/dj2gkpdHOi5zYuT:eezuwMn6pn4ra0IYS","tlshash":"40a312f50739073bf456367203c9344769e539b265a0e406fdd0e08eedb2cd1f92aaa9","first_seen":"2025-11-29T14:56:43.966891Z","last_seen":"2026-04-04T11:25:41.320712Z","times_seen":7,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":219,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.gstatvb.com/93bf573c05aa565e28d7de7200f1a4081757677320.rng.webp","fqdn":"i.gstatvb.com","domain":"gstatvb.com","tld":"com"},"ip":{"addr":"34.149.142.180","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"i.gstatvb.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 02:23:05 GMT","end":"Sat, 27 Jun 2026 03:17:19 GMT"},"fingerprint":{"sha1":"79:68:66:F6:35:1F:72:7A:ED:1A:20:F0:26:3A:80:2C:F1:77:54:8D","sha256":"AF:AB:4A:45:50:41:D6:F2:84:0B:E0:8C:2C:6D:8E:1A:86:7E:C6:E4:01:76:BE:3B:FC:E5:68:7E:5C:25:04:44"}}},"request":{"raw":"GET /93bf573c05aa565e28d7de7200f1a4081757677320.rng.webp HTTP/1.1\r\nHost: i.gstatvb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-length: 99218\r\nx-envoy-upstream-service-time: 59\r\nserver: envoy\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 11:25:11 GMT\r\netag: 93bf573c05aa565e28d7de7200f1a408\r\ncontent-type: image/webp\r\nvary: Accept\r\nage: 1\r\ncache-control: public,max-age=43200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":99218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"93bf573c05aa565e28d7de7200f1a408","sha1":"b3529c29bd623f878118e2e7248623f5ae31e6a2","sha256":"755393af12e6addafb4355785e3f277783d4a32d030616fe9fe063c3765c0439","sha512":"0fffffdcdf61b09f619dba1d4379d88e8fb45eb4b37568d91d6692f74005f005c9378f0d8a0537ba0c11dd969c3d890de45ea3a7aea372e56cc080a0262d0c72","ssdeep":"3072:+nemYy4T2hcMbYr1nONOVY3EaqpU+y8h58:+e9y4tMsr1SHuy8/8","tlshash":"78a31235e828e75bc82e70353ff6520a2bade2b108ed50a21bf47903e7dd903c069315","first_seen":"2025-11-03T14:58:22.28653Z","last_seen":"2026-04-04T11:25:41.321391Z","times_seen":8,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":258,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1900.14e1382.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1900.14e1382.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3uei5eAKj7YdWt92GJhijkTNjtoV1bXsHeWxGlCto4LkmiruIu8T5jQKKy-Onxg4H-deRhEh8\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:19 GMT\r\nx-goog-generation: 1774965139081380\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7632\r\nx-goog-hash: crc32c=xIiRQA==, md5=f6tnFQUASZSDMbgJmt8B8A==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:19 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WumjzV21VVLmf8YiGfSXa%2FYLfe8%2FRMABsSLVcxnNFlQVwlGlKiDLyMRtjx2cJdoVNG18s6p41hEeOGqDvVUzBAQGu4oqkBvgCdeImYx9mGBficliP8ZyrdVjfwEXgw%3D%3D\"}]}\r\ncf-ray: 9e6ff374fa4435a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7632,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7632), with no line terminators","md5":"7fab6715050049948331b8099adf01f0","sha1":"0010c0370c3a328f72f8c1dd90eac520ad982249","sha256":"4456216a6ca1932f6856639b407d760cdacdb6b7b8044378c758a42977bfb8fc","sha512":"b3d5a16954ab9175a2dfee13ab6160fec29f7ca892201e7c1741f14aea628b63b53bcba401274f5055645cd79f867c3533aa8662cb2218d204ddf0fd97026e21","ssdeep":"192:aKu4zItuq96A9YYL9fDC3lpuLEjAHXGTf8Ys5UgejIo9zJ:aKu4zIsNiC36A4XWZtH","tlshash":"6cf1759dfbc9793913a3b0b5b07f110b233726c568994489d229e7c02e3848e7257fad","first_seen":"2026-03-11T10:42:57.616557Z","last_seen":"2026-04-04T12:09:38.648689Z","times_seen":54,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/1841.956f009.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:11.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/1841.956f009.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2=%7Bclickid%7D\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\u0026id_visit_prev=50923a29-6550-4057-a01e-a61d97d7d96c\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:12 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG25S0pdbnGq14vXzdxRzSKM9CaQgR3vbRKO68JMwCps_vVtS3dK7CEIBmJz3M1n7TKY58itnM4\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:12 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:12 GMT\r\nx-goog-generation: 1774965132277421\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 6886\r\nx-goog-hash: crc32c=0kWu6A==, md5=+9d6sHxIG5suGxWTSq1GoA==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:12 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 28\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4d7trmDbL1UdSQZeeH%2Ba1GDOl3FF%2B1Xjz%2F%2BgUz1Pv7QZ6h3xB9edw4AC3iIFIJf3or%2FJy8C9RqCrYmASHjrw6mjCJMRwMiq8NDJtwghlAxu%2BVyfAJj8N01Tgijp26Q%3D%3D\"}]}\r\ncf-ray: 9e6ff375fc2e35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6886,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6886), with no line terminators","md5":"fbd77ab07c481b9b2e1b15934aad46a0","sha1":"c22200ee1d17f8a58794656b60918f6975f82318","sha256":"315f297408ecfbdb4c04a9bb7e3330909e133ad09a667e91f9eeb1aeb9347f60","sha512":"87fc5c64ee47d28fdf90b763e71387aa6c38e29fda38b8e4f7299e4ff6e5f3dddc418786a5658395668a47ff6786f03ad56602b83eb513c6ab0ec0cc45c270b2","ssdeep":"192:WH09dS7nq/0s/lStk0nWb8aQFDDTqGhb4XHncQ:GV7nq/X/l10+Rc/TsXHj","tlshash":"38e1a527f489e4b4562350c1417f48b2f22965dda5dd84a8f8efcddc2368e0a643637b","first_seen":"2026-03-11T10:42:57.618719Z","last_seen":"2026-04-04T12:09:38.649967Z","times_seen":40,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/land-static/landings/_nuxt/runtime.e24e54d.modern.js","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:07.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /land-static/landings/_nuxt/runtime.e24e54d.modern.js HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: text/javascript\r\nx-guploader-uploadid: AMNfjG3XMUE-zE38EcHVRA07A4A8qQDUMIte7xApsCae7prD1Vamvek9JNY4-Lu6NeO3_4QS\r\ncache-control: public, max-age=691200\r\nexpires: Sun, 12 Apr 2026 11:25:08 GMT\r\nlast-modified: Tue, 31 Mar 2026 13:52:31 GMT\r\nx-goog-generation: 1774965151832656\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 53645\r\nx-goog-hash: crc32c=GvNCcQ==, md5=Sxhxp0V6UZQgn3il1SHSKw==\r\nx-goog-expiration: Mon, 29 Jun 2026 13:52:31 GMT\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 27\r\nx-gateway: 1\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JY%2BcuBWicC0l3IbiK4GCVBEhGTco%2BxaYrneeAjkh0d%2FXWNmrGDYl7UbTKed1EpfdIzgl4sCu5ZrDMByIiTcsr4mWiA1exeOTB80Py9YZipMsW48DoN6GMd460YvwVg%3D%3D\"}]}\r\ncf-ray: 9e6ff35acc3535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":53645,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (53645), with no line terminators","md5":"4b1871a7457a5194209f78a5d521d22b","sha1":"408581144a00048776bdcc1eeacbcd9e53727420","sha256":"485dd14b3632869c9cec52ba07efff9aff32c6eba23fae12cfc7e22425f1018b","sha512":"0cf0bfb60a81c952161b566e723801f984bc3a2104a30b1a609470e7cc6e1cf987bc3ed6ca9e8d1060f8f36acb47462d284dd49c74e760de45fc22ecb927d2ef","ssdeep":"768:xByNhsWUf1cKUOIPXwlicJ/BNGyUtJZWenEPQhvSb5fYtrCz2:xByN8XUOIPXwEcJHGyUtTVCevSbJgey","tlshash":"0c330cc9fa3e8f942f6e59836d85129014087c9d7cb1f8b1d2edfad50410a7470b6aee","first_seen":"2026-03-11T10:42:57.608835Z","last_seen":"2026-04-04T12:09:38.673397Z","times_seen":54,"resource_available":true,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fanforus.com/favicon.ico","fqdn":"fanforus.com","domain":"fanforus.com","tld":"com"},"ip":{"addr":"172.67.69.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=","date":"2026-04-04T11:25:08.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fanforus.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 06:31:49 GMT","end":"Tue, 09 Jun 2026 07:31:36 GMT"},"fingerprint":{"sha1":"1F:9A:4B:5D:51:07:6D:F8:8D:0F:3E:8B:0F:F1:1F:F4:AE:EB:98:E2","sha256":"15:E5:03:D6:38:9E:CD:5F:FB:12:C7:16:19:6A:2E:31:3F:18:74:BB:5F:A6:4A:88:72:6C:8C:21:16:F1:81:A9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fanforus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fanforus.com/land/sp/26331650/?partner=745\u0026subid=1385-185738910\u0026ip=35.243.23.128\u0026site=13573\u0026sub1=4890\u0026sub2={clickid}\u0026sub3=\u0026sub4=\u0026sub5=\u0026offer_id=1385\u0026clickid=216196568\u0026back=\r\nCookie: id_visit=50923a29-6550-4057-a01e-a61d97d7d96c; id_visitor=bd82cd77-8f4b-47aa-8580-7da379baf2d7; uuid=ac6348e6-400e-410a-b5a5-363d062fde58\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 11:25:08 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Apr 2026 12:55:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 11 Apr 2026 13:34:30 GMT\r\ncache-control: public, max-age=691200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hq%2BY6C5bh8ybsTBTfYW7qss0JBE3Fn%2BGcbPTYdC44Sg%2FZEyCGKXOkZOBMIwh1%2FtuTcNnFRHWTz9N0mDFMhNdh2VeEZQfR97R%2BYD3c6170%2F4NdWndDvH2f8nBaT%2BIzA%3D%3D\"}]}\r\nx-envoy-upstream-service-time: 1\r\nx-gateway: 1\r\nage: 78638\r\ncf-cache-status: HIT\r\netag: W/\"69ce6732-10be\"\r\ncontent-encoding: br\r\ncf-ray: 9e6ff36168b235a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"0928c85037260abcfd31f8544c481e37","sha1":"1c5effd6d29b7f1f8143a8e506482a89b43ab451","sha256":"a61f22f20342d801a0510b07024089f25af251182cd4bdd38d425461106b9e9a","sha512":"a3cb3204bc16b64017ebf8602d4517effc7c1a23ccdac7d4ea56a2084ff947a2fe7bccb162c45b56246d247b1c86b742b5a5385a1ce1c65f157b8349f9554a10","ssdeep":"96:NlfLXVb1/WKOTwcaycvIx7b5yJ7fvlqxij1m7:NFXvVowcayP7b5yJf1m7","tlshash":"f1910b0b158f2446ccc2cf3455ceb253dab7fe2972961c0620adb5f6d2bd62322a2747","first_seen":"2025-10-04T13:16:52.48832Z","last_seen":"2026-04-04T13:15:06.907338Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}