{"report_id":"0cce8fe3-3854-40e4-b9b5-21d4b8d68555","version":6,"status":"done","tags":[],"date":"2025-12-08T11:02:19Z","url":{"schema":"http","addr":"i64cl3er5t.com/?serial=41929\u0026creative_id=242\u0026anid=wbpui44ucqe7pbnejq8c0ss0","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"title":"Онлайн казино: Более 4000 игр и быстрый вывод средств | ЛEОН","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"65ed4a45e7aea1b20091c1c594f7fbc5","sha1":"bcc25afec9ecf5b7a1a419293a8529ee93b92cf2","sha256":"da91d6965cfb5d451225b5d4726c77b2cb737e7f87b704a2d8da93cc15986f9e","sha512":"72c8808f1b490347af83b860dcd4901af19b21631e64ddc6536ee8c1282d5c7a5901cc4f2e5ad2ed902b157acec449f88046fc1336c30d5c71c3179b4cf59118","ssdeep":"","tlshash":"b1f059a32c51970d46910bccc0e0ec1889087b675540ec90b1fe5169bb87adb8c1d5c8","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i64cl3er5t.com/?serial=41929\u0026creative_id=242\u0026anid=wbpui44ucqe7pbnejq8c0ss0","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-12T11:02:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-08T11:01:51Z","timestamp":1765191711,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.27","port":38143,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2025-12-08T11:01:51.294827+0000\",\"flow_id\":540503114219435,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":38143,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-12-08T11:01:51.294827+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"leon59.com","ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"domain_registered":"2025-11-29","domain_rank":0,"first_seen":"2025-12-05T21:32:03.023666Z","last_seen":"2025-12-05T21:32:22.097455Z","alert_count":0,"request_count":23,"received_data":2454473,"sent_data":26526,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.intercomcdn.com","ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-12-08T02:04:28.479201Z","alert_count":0,"request_count":3,"received_data":1893390,"sent_data":1350,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"track.liftdsp.com","ip":{"addr":"65.9.46.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-16T05:39:57.442139Z","last_seen":"2025-12-06T09:34:06.073812Z","alert_count":0,"request_count":2,"received_data":10251,"sent_data":2516,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-07T22:13:56.807982Z","alert_count":0,"request_count":18,"received_data":495946,"sent_data":9727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":2,"received_data":898789,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-07T22:17:02.440237Z","alert_count":0,"request_count":2,"received_data":152102,"sent_data":1800,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn0.match2one.net","ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-08","domain_rank":743950,"first_seen":"2018-10-09T19:50:01Z","last_seen":"2025-12-07T06:34:30.560133Z","alert_count":0,"request_count":1,"received_data":5877,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","ip":{"addr":"172.66.40.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-01","domain_rank":0,"first_seen":"2025-02-23T03:47:42.85381Z","last_seen":"2025-11-25T15:02:29.451345Z","alert_count":0,"request_count":1,"received_data":1238,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pixel-us.r2drtb.com","ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-07-08","domain_rank":5001008,"first_seen":"2024-07-30T23:22:43Z","last_seen":"2025-12-06T14:31:30.700624Z","alert_count":0,"request_count":4,"received_data":1951,"sent_data":1856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ps.l.liftdsp.com","ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":602474,"first_seen":"2024-10-13T05:47:12.053455Z","last_seen":"2025-12-04T11:03:40.288076Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-12-01T05:26:55.506152Z","alert_count":0,"request_count":5,"received_data":23826,"sent_data":2607,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.6","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2025-12-08T05:39:41.603244Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":737,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i64cl3er5t.com","ip":{"addr":"172.67.167.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-23","domain_rank":4837675,"first_seen":"2025-10-18T07:34:49.497184Z","last_seen":"2025-12-02T01:31:16.569237Z","alert_count":0,"request_count":1,"received_data":41535,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"108.157.229.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-12-08T00:51:28.648704Z","alert_count":0,"request_count":1,"received_data":8328,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-07T22:19:21.122082Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":788,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnimages2.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2025-11-25T11:42:19.499829Z","alert_count":0,"request_count":43,"received_data":2622239,"sent_data":19741,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"d1cr9zxt7u0sgu.cloudfront.net","ip":{"addr":"3.164.247.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-05-17T11:07:13Z","last_seen":"2025-11-25T15:02:29.712815Z","alert_count":0,"request_count":1,"received_data":183161,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnimages3.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2025-12-06T12:31:59.571558Z","alert_count":0,"request_count":1,"received_data":4582,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"leoncasino.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2022-07-05T10:57:06Z","last_seen":"2025-11-22T11:34:39.252627Z","alert_count":0,"request_count":103,"received_data":10105053,"sent_data":47667,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-07T22:21:54.576585Z","alert_count":0,"request_count":2,"received_data":1688,"sent_data":4084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pool.liftdsp.com","ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-12T16:56:20.115696Z","last_seen":"2025-11-27T15:28:10.687887Z","alert_count":0,"request_count":2,"received_data":920,"sent_data":1126,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","size":334482,"data":"","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","size":1836,"data":"","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.CBKTq9mE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"45eb20741e03cd96fca2fea13d766af2","sha1":"5531748e71ccebbe3a7a46efcde00fa1b285c064","sha256":"024bd164949d09788850fb55975749b8ed87200d6cc0ae835c945e52e384a4ea","sha512":"5a4f4f5624d7c27c199b99cd97627cef03e429fb9ca96c1b608300b57dffd3d38a1e3d617dddd4f85de05c45345e4c8f81cb6d871b73a50388a4528a8d703fda","ssdeep":"96:rvqwLxhma0uGzXt8IAs0uGzLsJdvawL8ZuGzhrMvrrPAXxwWSTxOj:+w9w4UpJUL2dJUSjrYBwLx4","tlshash":"c391a74d3c7ee4b0abee589fe1690c099e2d0fa611654d4194bf04bb26b7850e252827","size":4613,"data":"","first_seen":"2025-12-08T11:02:52.85175Z","last_seen":"2025-12-08T11:02:52.85175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.BEE9ZDcH.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a7bd42ef3f60752bcb84e981bb64155","sha1":"c6c7eaf2e9d2624cf4384334d87ad9037f791f5d","sha256":"e0384e3824abd034d5991432074ffed9464df3f44f60662848d39e0de939c3e4","sha512":"5dd7766f1db6731170de71c99f4424906b6728d6f8c99b37c45e4a13f8faa94c093a1273fb656f889eca14f044abc9ce20960ec3a9ce96fd2a1c666ccac15bb7","ssdeep":"768:TmxQXAHxtes/ZYq+O8EGkZGm4bHXQNOc3D59HW2NaS9jCm:axQXbO8EGi4bHXCOyD3HWFFm","tlshash":"21e22a2832a57e3181abe5bdd0a1383055294a5a92134ec0b7bcbb7551fe9b94337f0f","size":32591,"data":"","first_seen":"2025-12-08T11:02:52.828601Z","last_seen":"2025-12-08T11:02:52.828601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.Jkg4s0ck.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c57f958c52aa2aff636c2e33d4c66c8","sha1":"2af49bca6680859356311a61fc139339738a30c9","sha256":"d9b9a07af711aec0788c1bf0cfe2e7dc2b3dd6c2770424fcb2f6fbe7bed8f3a7","sha512":"7bc5fa2c4640b8258ccdc181a37d4cc89d655ee2ff123d8968be41bb6297d261f121ebd5d95381c86c91ba076476fd8c7f0de83dcddc0c410044954ff3d363e6","ssdeep":"384:PrU19C5tNFoHRRYptNLzODCM2aw4hDtGP4ljNMFBu:PrU19CPNSHROqCM2HSGP4lRIBu","tlshash":"09b2870b32bd9ff911a655a9c4813020892c8ec692715dc1d9ffcf65264ce62d1b6bcf","size":23612,"data":"","first_seen":"2025-12-08T11:02:52.814325Z","last_seen":"2025-12-08T11:02:52.814325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.7dqxrSMJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2efe63944b901f59760467fead768839","sha1":"54e35837b163bd9e167f7a678331ee89a789fe7b","sha256":"ac3309a950624e4cbeb2fee3315e60bc90ae0f4e173a24534d5f645c09673b9a","sha512":"b7aaf0ef097b86af4a6a0223f2c3d8788f6c323dd92ba91ef4b4747f47d82410812939feffd337d088e8046f7ac90d5b15227d35763d2a4387e810e58144b043","ssdeep":"384:8ORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6n:8ORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFD","tlshash":"de6209f170ed657043e616e0a0b70106e6e9512830c9c4e0f59fcafe45eb980a967f7e","size":14743,"data":"","first_seen":"2025-12-08T11:02:52.838938Z","last_seen":"2025-12-08T11:02:52.838938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.CXyVz8sh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd9cf4e799b1f070df55240bc5484fe6","sha1":"819a3fba1a1c63ccb83244fb240b1847552aeb6c","sha256":"42845ae9476767a05866b954b568985b8a777b7e37207680c4a0c70113d017ea","sha512":"27af04ef3fbd059249d18451f378c036f3dd49a2086854774402449bf9dd026a22f4b993436d526d894cd601c83eec08559bed1159ec9dc400ab014fbd8a30a8","ssdeep":"1536:WWOoUHOVrDC8EYfZz//EVkbZBHS+/jIyUEJ5jYQ2UjL:WKVrOvY5/zBIyUEJ5J2U/","tlshash":"ce63620ded0c54faa3e650b9f0f54e0a5518ae47f2784580bab5cc1f9488fa8a36f74d","size":69092,"data":"","first_seen":"2025-12-08T11:02:52.769369Z","last_seen":"2025-12-08T11:02:52.769369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","size":1836,"data":"","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"16b5b7be76bc6dec6f96bcd121af7317","sha1":"0ad27237adb212ef7886f8eaaa095f51597e795d","sha256":"8dce00856ed8e17b4398dfd3de9d7b52b5de1d2265dd6829640fbc3db65634d7","sha512":"0e1db92fe8cc9c36d695d19222dfda7f8bdba7d58130fc56741b64c2483762efed0e569cde608ce9dc54817ed87b9360f60243c367abdd2d087fa6c790691f0d","ssdeep":"3072:2ZThR9YYyG6r4wF/dBe1wDiGIeoQ3tzsIbVSVub:2ZThR9YYzwFd0wDiGnoqb","tlshash":"81d3e6c872e3f06283e22470002f440af27e6d69949cd4a4f6a5d4f53df995a8637f6e","size":130608,"data":"","first_seen":"2025-12-08T11:02:52.812621Z","last_seen":"2025-12-08T11:02:52.812621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.PZXRoakp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"31ac6147e646df21022341aa61f2a539","sha1":"259bd24cf58654d1491f15ad18f4dfdca801d6a8","sha256":"68c5fa433e317768c07a276ca3729d4c3fb0ceb6d7b5cf0fabb8a99545709615","sha512":"9e8d6f171a85121a5142074a9cec9d705216d96a6dff6a8849535b54b7e261098dae05c2a0b5d8fb242459c5330182c6782c1d7a967c9b30e00e883062b05ae5","ssdeep":"768:H61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/R:Azmp7QA/BPWUR","tlshash":"d403fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2025-12-08T11:02:52.791651Z","last_seen":"2025-12-08T11:02:52.791651Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CcFJMwXR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8c712ca0adee1ccf00ed08198a8ca900","sha1":"6d1f2358df476146582ede0f7b5dbc91a5f2b2b9","sha256":"013de0f0bda2d68fb28bfafe093793e3be92974f4f3747e7c4b82b16ca0ee742","sha512":"c5e843c069f083f6e6b3fc186cf5a1788cf0653280853921ddb01980b5c34b930d82c6a1575033ead8b6a4913191b70c5155b3d835c509e29781eaef704642d6","ssdeep":"","tlshash":"a461939b6206e770c02620a4d02f2810d95c06cdb3b47594acbd54aed9a243ae07bf5f","size":3397,"data":"","first_seen":"2025-12-08T11:02:52.799103Z","last_seen":"2025-12-08T11:02:52.799103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"394bcfb2947ebbe4c75dd1cef148fb2f","sha1":"6a715721befdf0fa3c032d90c7602bf309e3afdb","sha256":"35053a1dafea49a795ee0aa24310d98d6d4f4e450db2e2136d14a86dd4ee43c9","sha512":"d3df1503d9b990744131f6191c000b824823baedf1de33a91b5efec3059d5fb4b3657df166bf7fc2b1ae4bb34835579de1de632ed1af091a8899ff4105f5bdd6","ssdeep":"6144:AN3UyF5R6fq/nXUBL5uz2opBh/5OVJdrrSUI:0Uw5RJH/5OVJdfSH","tlshash":"a274c619ea116ee336f5381eb16a2ae370325b113b55c27600da5f393e2f80cf5275b6","size":342668,"data":"","first_seen":"2025-12-08T11:02:52.848863Z","last_seen":"2025-12-08T11:02:52.848863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fe740d55.d.m.Bfeuh4iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"af58c1c3e121bab976472a8e215cc058","sha1":"7cbb4ce134afc23d048d007b22a4ec77b0d43787","sha256":"8d19864cc331e1665d48abe033393571134340a82d6e0156b1e5846300da8ea6","sha512":"b11673c8030773821915aea8b204cbe2d2dd1b932f5c2751052b670c5f63cba0643176c2c43a2e09573a19b8a166c399bbabf8c84e6a25e90cb763b238f599e6","ssdeep":"384:gQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2if:gQdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgR9","tlshash":"f3b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d5d92bbf6d","size":23639,"data":"","first_seen":"2025-12-08T11:02:52.839777Z","last_seen":"2025-12-08T11:02:52.839777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7bdd72e8.d.m.Dg6D--ca.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0d1dbd912093f8c1d2cc068307a5972f","sha1":"67854c0655b7b5c1a49732c580c629393689d08e","sha256":"b2dd4fbfb3c41be04dfb03d3a0c89c971d379db151a986917b12112c281180ff","sha512":"6d03e0748cfce42670429d539e88773b538f6a7b505aca2270ccefd7372a044bd6c405442b6fb6327276044e5af6963551d3a22a5898ec8f9c6e074fcd00c4e3","ssdeep":"3072:u8NbFH3qLe5FEwSwXwOlczFAaugR6iVHcVHl2po3y5HL9QYl3tx4C4JdErZ4O5L1:TLFDgOuFRDV8/2pA/M","tlshash":"93244ba4738ab43547c451a4902e1b22f17a9c6a545cd018faedcef61fb8446637ef3c","size":224135,"data":"","first_seen":"2025-12-08T11:02:52.85977Z","last_seen":"2025-12-08T11:02:52.85977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"de67a6c6aaaf800dd47099cb738c73da","sha1":"dbfad2730311def8f2720b5a8e0a669d09d41d0d","sha256":"acf908b14f29165de87dbc1c3ec37b7f04935cb917921ec280b8c4e3ab7af31b","sha512":"0c50673ce74683ef2377c054805c7438a18d6da1c60a37f0e157c2eb635800ff904104b5b4de7c96474c3cdada07b8f63c3e31b1e9a8293d76440c65872360f7","ssdeep":"","tlshash":"07f0270e9cc507a457f810c453bbff1df29f210c985d8665c3c68892761af9798363e8","size":484,"data":"","first_seen":"2023-12-10T15:49:15Z","last_seen":"2026-03-29T15:19:13.506535Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.CXyVz8sh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd9cf4e799b1f070df55240bc5484fe6","sha1":"819a3fba1a1c63ccb83244fb240b1847552aeb6c","sha256":"42845ae9476767a05866b954b568985b8a777b7e37207680c4a0c70113d017ea","sha512":"27af04ef3fbd059249d18451f378c036f3dd49a2086854774402449bf9dd026a22f4b993436d526d894cd601c83eec08559bed1159ec9dc400ab014fbd8a30a8","ssdeep":"1536:WWOoUHOVrDC8EYfZz//EVkbZBHS+/jIyUEJ5jYQ2UjL:WKVrOvY5/zBIyUEJ5J2U/","tlshash":"ce63620ded0c54faa3e650b9f0f54e0a5518ae47f2784580bab5cc1f9488fa8a36f74d","size":69092,"data":"","first_seen":"2025-12-08T11:02:52.769369Z","last_seen":"2025-12-08T11:02:52.769369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","size":28371,"data":"","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.BneLucUJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0d27d34788232d8cf7b06755474a1b86","sha1":"060f91c781d4e347b60138f71d6162ed2a88c99f","sha256":"9e6e76be3b262ae3f5c9dae49e44ee98e1accf9e93b3f6d618149a638c9a5632","sha512":"78198bb2e2a2d1f70bee581eedf106d2d5eebda0e3f400ebf5638df67cc0f225c8c40229ed1c4dd8920f1f3563560c9e7b5d504c3936e8ae87d0d3785ce94ef4","ssdeep":"6144:CLZHeVelwC1a9G/74YL7pe8EmzZopGHjWJBphB2hbhtyIUZeuCOAMc:iZHJwCY8/logjWx6Oe","tlshash":"6bd44b597151783647b640e9906f0a06b33a2a2e5448c89cb26ce9ef39fdc4521bff7c","size":617369,"data":"","first_seen":"2025-12-08T11:02:52.816558Z","last_seen":"2025-12-08T11:02:52.816558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.mN2qVtXy.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f79903c24fa84c1ceddcae8d89bc12ab","sha1":"e8f4447472cd11ed5febe2223a1a99aec4fc014e","sha256":"9a562b772865249e0ac2e32cf435a765aacde0e23091039b6f773801efceda82","sha512":"cd9c0894d1f23605c61c05a7a42a55e432f84b0d1dbce53fef82815e95d26f01a483e2dce8bba937edc19916a6dee489c61ea3458511080f3dbda02f8017199b","ssdeep":"","tlshash":"fc71e9cdba09aaf993f21ca5b4360406d7325e95ba7005c6d15f1eff2252844b42be53","size":3821,"data":"","first_seen":"2025-12-08T11:02:52.881659Z","last_seen":"2025-12-08T11:02:52.881659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"66e7c6c8081291d8dca6f7f6c29f98c6","sha1":"b70aefe75b9a11850ea8cc3a40d33b49f2829d3d","sha256":"9fa46408df2e716c5bd7458a0b1e3f15e8055f13463c5e44ad0c6e0a8db49c32","sha512":"d079e6c8375ed01cf98af2567d30d81c0567551e231b487ba1886ef9f7c3a837a150b16b27483fe13da7030628e68a42d962374427d0987b653c6e0cbef1902a","ssdeep":"3072:kxy1KAsfvMrhItMBhYJCzv+ekhowG8sXB9BZSeW7tO:xLsXMrhItKhYJCzre89BZSeW7tO","tlshash":"05040b166a4838ff4f710d2e5b2a7aa4a1330d98fa21c033d2b69f3e2f5b411f197595","size":186006,"data":"","first_seen":"2025-12-08T11:02:52.789988Z","last_seen":"2025-12-08T11:02:52.789988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.aljHbUuO.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"042dc1f35bb02182dc0e0613e6684ff7","sha1":"ebdd8ee03283504efbf38bfc7ec1cd5de819748b","sha256":"29f6c63be10f606f921feafe6c6dabbb9db5cca766a98c67aa4b3ed022dead9a","sha512":"6be19dc148c84a1eb6b54cf89f6a01412e15f9fe0417ca0270702200c2e9c1dc5ed83817a93a3f2240fc5ded0c9ea999af9bb45d6fbc7aff2ad35a240817ed65","ssdeep":"","tlshash":"b141a7ba7081b43cc37e80bee472919557246790727798e1906e21ac0da8c86c1b8f9f","size":2289,"data":"","first_seen":"2025-12-08T11:02:52.875861Z","last_seen":"2025-12-08T11:02:52.875861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47542f5453b926ee31b84dcec583f01","sha1":"a98be511b95f998eb3f3524eb98351da0283f769","sha256":"215c51760bb486283b7da84887bc192f3dd0697ca55556af3c570222488767fb","sha512":"c57b1e4a0e522dd714f5eddf1c2c2e851d03d3055b0590f37d3de8e9168962660adf38639779650ee2246ed322d79609e64dc253ae5eab3baaf94a670abd6a6f","ssdeep":"","tlshash":"a0f0c01360937471cf3368b8271f4365d99b406f89d25869f7bf8412af35e4460abc1c","size":571,"data":"","first_seen":"2025-11-15T07:52:07.145608Z","last_seen":"2026-03-29T15:19:13.505302Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.2f04decb.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db2c25bfe5f970b964bb191b217f6f51","sha1":"23cc274405f013f2525a366f79f9755156794926","sha256":"282e5f08681e6e0b73da7b34f2a46838abdfd5964fbfb452a409fc44bcff810b","sha512":"8c5b46b74b3e1032087cd5abe370874749f0e85abcc86a88ec87ffbb0db228c7db82a3bcf07be088f71713fb2c2efeabfd74fcad63a9b4c429347f0fdaae185a","ssdeep":"12288:0oCxupD8sn9RCMvmS70VYk6uREii5nUCi1tG:njmMufYkT1tG","tlshash":"1c35b5ccb2d2f06a43976575812f200bf33ea995b54e8050e669d8d1bcb858d9237f7c","size":1093125,"data":"","first_seen":"2025-12-08T11:02:52.89724Z","last_seen":"2025-12-08T11:02:52.89724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-ru-json.4bf48036.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd48423d414a6bc994d02f747543632","sha1":"44be0f9e75a3e8e16a01427a78734aa712be17f7","sha256":"127ae62e55fbea663da4a258a545d6b2144b7b5a58a8a52c168732bcabddee43","sha512":"1ad48947aa63e0917adb377a506b0837bebe77ac684161f7ddea35b670582ebfec55d0c50a0336421979a12fe56c47d574cb09785939119149c1e583e51ef08d","ssdeep":"3072:VeBr/fmo7P+2kHC4bJt6SeiUQKXlWyTbAWlPkcPzPGWIdVQY/SMDkgvW5P4W97qW:Ve5/fmo7Pgi4bJt6SeiUQKXlWAbZPkcn","tlshash":"f2b3ce64595968ee0206b06bcc087e0a7ffa45ff3fd6935629b45c3e35e6160c23e70a","size":109770,"data":"","first_seen":"2025-12-05T19:21:20.950645Z","last_seen":"2025-12-09T08:35:06.835484Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"16b5b7be76bc6dec6f96bcd121af7317","sha1":"0ad27237adb212ef7886f8eaaa095f51597e795d","sha256":"8dce00856ed8e17b4398dfd3de9d7b52b5de1d2265dd6829640fbc3db65634d7","sha512":"0e1db92fe8cc9c36d695d19222dfda7f8bdba7d58130fc56741b64c2483762efed0e569cde608ce9dc54817ed87b9360f60243c367abdd2d087fa6c790691f0d","ssdeep":"3072:2ZThR9YYyG6r4wF/dBe1wDiGIeoQ3tzsIbVSVub:2ZThR9YYzwFd0wDiGnoqb","tlshash":"81d3e6c872e3f06283e22470002f440af27e6d69949cd4a4f6a5d4f53df995a8637f6e","size":130608,"data":"","first_seen":"2025-12-08T11:02:52.812621Z","last_seen":"2025-12-08T11:02:52.812621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","size":334482,"data":"","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DXB529iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e699317ce7b4a579eddc1c9a9b1e4d28","sha1":"e8215e45bd5259e132553850dc1b9a68d71e986d","sha256":"53ab24c88c52e4343b206def7db98d7ce4fb3f4859ea58f2365bffbb200ac4e1","sha512":"e38c28da9cfa174b2239c359982b4016a3d78761330b02defffe86bacbfdf2efd3195d2aea992b5689823a7bb872552955cdfd5c43d711d601474e697c350cf2","ssdeep":"96:ctPSp8IIOnUV9SU0DDrJJQh9eC97Ae0E0hbDO92pli56ZCp0NY72T4n58daJ0w4i:cNSp8y4SFHrJJQh9eC97Ar3O92pli56c","tlshash":"e1b1c82ecf0942f882c758f6e0e64e4a505dea87f13c0604b9a5dc6f9514fe5931bb8d","size":5462,"data":"","first_seen":"2025-12-08T11:02:52.792706Z","last_seen":"2025-12-08T11:02:52.792706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.CMaR6KUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1a72264b2d64ca59f20a79f7cff6fa6f","sha1":"1ff6880f00158d59964a10c2923a38efe91d22ae","sha256":"0109a66218d7fa9f8c83bb631a57f87bcbf27198e77ef025c892a0637b251690","sha512":"122e4f000f3fd6cb5eb287128108545a5c2d61a22ffcf3b42fc9a781ee2c77670512c8be64d695eb1e660874e1ed162280a474df30566fa9d85ac1f623297ab2","ssdeep":"96:uX3K+a+8Toj1uqF0sMUZZFk621AJ9uk8SisBBGwyW:IZySsqCsTk621AJ9B8c2wyW","tlshash":"8eb1020b7625b3f986ad2a28d9c422309a3d6fcd631404d1fafec0197249679c5b5bcf","size":5424,"data":"","first_seen":"2025-12-08T11:02:52.859024Z","last_seen":"2025-12-08T11:02:52.859024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7bdd72e8.d.m.Dg6D--ca.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0d1dbd912093f8c1d2cc068307a5972f","sha1":"67854c0655b7b5c1a49732c580c629393689d08e","sha256":"b2dd4fbfb3c41be04dfb03d3a0c89c971d379db151a986917b12112c281180ff","sha512":"6d03e0748cfce42670429d539e88773b538f6a7b505aca2270ccefd7372a044bd6c405442b6fb6327276044e5af6963551d3a22a5898ec8f9c6e074fcd00c4e3","ssdeep":"3072:u8NbFH3qLe5FEwSwXwOlczFAaugR6iVHcVHl2po3y5HL9QYl3tx4C4JdErZ4O5L1:TLFDgOuFRDV8/2pA/M","tlshash":"93244ba4738ab43547c451a4902e1b22f17a9c6a545cd018faedcef61fb8446637ef3c","size":224135,"data":"","first_seen":"2025-12-08T11:02:52.85977Z","last_seen":"2025-12-08T11:02:52.85977Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"04839915ba2bf62c92348cbf677d6f02","sha1":"39e09668d038653c47a329a4ad5ba97884344de8","sha256":"c4876548cfbd16f1142097fa6414d0e8206eefb539306001eea0c0a7adff34bc","sha512":"e9e26eb0a5b19ee834d683be8954ab90fb7fd315b6b79ba5f62c282c09b502e914c2c020252e6cdd8bf4018a7c08888cccbdfa1d81e2e4ddaba7f0c3c20088db","ssdeep":"3072:4TvqbcLVJ7lQAIToVpH7RrfIEuPOIZbkHp7kEkfAipTlW:IjplrXuXUkHfAiO","tlshash":"7564e64d72f827b5458370f1b63e1932b270e013340c4d993d9d2299afa6618eee6fb5","size":330150,"data":"","first_seen":"2025-12-08T11:02:52.837495Z","last_seen":"2025-12-08T11:02:52.837495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","size":28371,"data":"","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.7dqxrSMJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2efe63944b901f59760467fead768839","sha1":"54e35837b163bd9e167f7a678331ee89a789fe7b","sha256":"ac3309a950624e4cbeb2fee3315e60bc90ae0f4e173a24534d5f645c09673b9a","sha512":"b7aaf0ef097b86af4a6a0223f2c3d8788f6c323dd92ba91ef4b4747f47d82410812939feffd337d088e8046f7ac90d5b15227d35763d2a4387e810e58144b043","ssdeep":"384:8ORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6n:8ORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFD","tlshash":"de6209f170ed657043e616e0a0b70106e6e9512830c9c4e0f59fcafe45eb980a967f7e","size":14743,"data":"","first_seen":"2025-12-08T11:02:52.838938Z","last_seen":"2025-12-08T11:02:52.838938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CDhE89Uv.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"def06a369fad4b62470787f94b8b619e","sha1":"397a4ea7f95d9ecc1a8c1a1fe8445c23162afbfd","sha256":"bed9687a141975dff52bb149c801fefcd03bb535407a287fd765cbd9f605779c","sha512":"ebf34f7d9b61ad585ff17d95ca6529766ecf138ce911099c36d5841973de61445c86e388d3c5609c6cad25200917ac0bb014530106222cc5e09bf5a96e4b9cd7","ssdeep":"24576:NC21o8yGEH6LAD+ddsdaDajxd7OpaA7Dued5mx7hXGwTOjmA83I8PvQHhyo678BE:NC21o8yGEH6LAD+ddsdaDaXOpaA7Duei","tlshash":"47556c89b649747683f71499a0ab0440a23c0b41f56488d1f5fc8e7e2aaed349377f6f","size":1288858,"data":"","first_seen":"2025-12-08T11:02:52.899776Z","last_seen":"2025-12-08T11:02:52.899776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a01e6f7bce6dbf5d77e90a118c93b0e","sha1":"0dd49694ef9f526b54037573927940d4f49410ee","sha256":"633fe888d0ff0434ff5676b91027d7f70c3af306567d4f1b7d5f30fef585c184","sha512":"bcfd3614437320134d84c7aa5239c54f0ceb14caa75f2bc4199dd14487d248f32638037b41ea918fe8ed8f9d34f18a4dcea0a114499759bfd0d17b70ce2bd228","ssdeep":"","tlshash":"6de028da74110c7570ed05f533b1a11875431108780a5c23ddfdc9142c189c74c134cc","size":341,"data":"","first_seen":"2023-05-07T16:21:54Z","last_seen":"2026-03-29T15:19:13.493938Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d7e7e5a3a81fc9eb32ad2bec6259571c","sha1":"1ad9e5ca8d4303c3bc3509dc9673016d2677b5f0","sha256":"21414262f94d462ef16cbe6532a905e530473d43d676b92d915f16c3edd35b41","sha512":"2e7dcecb46607d0d5e91d9b45ab428b06459e27b2c3a8a24c2696c715d90cd2ece1e2e178e3d442debc5afcc0014a68ecc66eeccd30e66fb037a6768a7843655","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwm:zGmWr9di6ZPK1oUVc8hbS0N664r","tlshash":"597329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","size":78915,"data":"","first_seen":"2025-12-08T11:02:52.843704Z","last_seen":"2025-12-08T11:02:52.843704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"65.9.46.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","size":9327,"data":"","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"66e7c6c8081291d8dca6f7f6c29f98c6","sha1":"b70aefe75b9a11850ea8cc3a40d33b49f2829d3d","sha256":"9fa46408df2e716c5bd7458a0b1e3f15e8055f13463c5e44ad0c6e0a8db49c32","sha512":"d079e6c8375ed01cf98af2567d30d81c0567551e231b487ba1886ef9f7c3a837a150b16b27483fe13da7030628e68a42d962374427d0987b653c6e0cbef1902a","ssdeep":"3072:kxy1KAsfvMrhItMBhYJCzv+ekhowG8sXB9BZSeW7tO:xLsXMrhItKhYJCzre89BZSeW7tO","tlshash":"05040b166a4838ff4f710d2e5b2a7aa4a1330d98fa21c033d2b69f3e2f5b411f197595","size":186006,"data":"","first_seen":"2025-12-08T11:02:52.789988Z","last_seen":"2025-12-08T11:02:52.789988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.D_Z2xyWs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e98948343aecaf65e0075217d58bda5","sha1":"44f2bb2790f601503ea83129968fad84b6951898","sha256":"72b93e16482ec38e02ec59438c0dbf985113cf316e0204463a2d89d87b1a6216","sha512":"5fd0e24585e13466a0eede2a9c7464813c479564bfb968cb664db1cc8117b13ca4fff2cfc93a9c1aa7c186ad1aa96a9879d918abd2b4c7bcb8031b4ace76a66b","ssdeep":"","tlshash":"e431210bdc04ecb5e68b88eec0240402810f7d56f3e5caa8d2ad62fcc7751a99115b75","size":1711,"data":"","first_seen":"2025-12-08T11:02:52.825818Z","last_seen":"2025-12-08T11:02:52.825818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4fc1b3b772e24bdbb6f1e325bb6cfd9","sha1":"44968da966a23d55de467e7049d36725db5facf9","sha256":"46e4459bccf5faa0598469ebfcad2ae5a43ea41e0de061b4de18622de4050769","sha512":"46fe4a5805635e44d27bd595157e1925a46c4e5890996f443c73e84d3ac30515d3ea7fa600b3d4cd1230a7b147af406053f6102d33c0b79c9ec641a7d82be6db","ssdeep":"","tlshash":"97e0268ab0a112bfe66d92d4f601bb552b655911f58a37b7a44e38ae600e38355c092c","size":336,"data":"","first_seen":"2025-12-08T11:02:52.906023Z","last_seen":"2025-12-08T11:02:52.906023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.BEE9ZDcH.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a7bd42ef3f60752bcb84e981bb64155","sha1":"c6c7eaf2e9d2624cf4384334d87ad9037f791f5d","sha256":"e0384e3824abd034d5991432074ffed9464df3f44f60662848d39e0de939c3e4","sha512":"5dd7766f1db6731170de71c99f4424906b6728d6f8c99b37c45e4a13f8faa94c093a1273fb656f889eca14f044abc9ce20960ec3a9ce96fd2a1c666ccac15bb7","ssdeep":"768:TmxQXAHxtes/ZYq+O8EGkZGm4bHXQNOc3D59HW2NaS9jCm:axQXbO8EGi4bHXCOyD3HWFFm","tlshash":"21e22a2832a57e3181abe5bdd0a1383055294a5a92134ec0b7bcbb7551fe9b94337f0f","size":32591,"data":"","first_seen":"2025-12-08T11:02:52.828601Z","last_seen":"2025-12-08T11:02:52.828601Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fe740d55.d.m.Bfeuh4iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"af58c1c3e121bab976472a8e215cc058","sha1":"7cbb4ce134afc23d048d007b22a4ec77b0d43787","sha256":"8d19864cc331e1665d48abe033393571134340a82d6e0156b1e5846300da8ea6","sha512":"b11673c8030773821915aea8b204cbe2d2dd1b932f5c2751052b670c5f63cba0643176c2c43a2e09573a19b8a166c399bbabf8c84e6a25e90cb763b238f599e6","ssdeep":"384:gQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2if:gQdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgR9","tlshash":"f3b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d5d92bbf6d","size":23639,"data":"","first_seen":"2025-12-08T11:02:52.839777Z","last_seen":"2025-12-08T11:02:52.839777Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.DK1wTDFI.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"72391357aa9d97d9be0828fd9ebb6b8a","sha1":"6c40fe4a60ef9cd3f5be9e144f8ed6659ad195e7","sha256":"7834fced6a80b514c1eb304058e3d8251346fd1d7d849e0fc0455108da344bfa","sha512":"380d306febd0b610f706e71cfea54b8231f99258f6af0e6ba88a298001b570ff5de1d73271b8c411dfb575f36f0641f43c3729e2871caee54ebbbad97cdc41fd","ssdeep":"1536:lU7od4j0bJdiUQbM9uvtmiC9vUJxmUlcDlElc7T1:lefjyeHwl8cV","tlshash":"a1433bcef972227077fb1160a46f0402613a67017419c4e9bdaf9ed42b92984d6e3f7e","size":57920,"data":"","first_seen":"2025-12-08T11:02:52.846224Z","last_seen":"2025-12-08T11:02:52.846224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.CEJblBb-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b072041727bba6fdfe48e93e4d7ecb3","sha1":"3f33b4ce4cb0ceab31ce29c0c46dbd1a0ef10174","sha256":"02a6f1961425174447de3809e5765ae6db1423c3104ad722f872f1d181716a2b","sha512":"3c4afddaf26112f36bfb566e1764a0c0591c5aaa1c4bb715edf66ab03d5c20991c82379863239f353ec6316813af7c8e87d29beb7353f078050997d4ca3b661e","ssdeep":"768:goui6kdsTKD6tV3qOMEkPDaRc8PEG2ZUJ/8sWjUhyF14Rvl:gxmdsme7NNkn8VS4h5Vl","tlshash":"42c208dc7a1128f3d6e7448dac120501a07a5a4165b40ac2e7bdcbb639dfc1067a3be7","size":26728,"data":"","first_seen":"2025-12-08T11:02:52.809354Z","last_seen":"2025-12-08T11:02:52.809354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc6b0e0b03d3446a8c2870ed674b8c77","sha1":"c6986dd3070cb4bcd32e1e83cf06e253d9877495","sha256":"6889bd65b39c3eba8e3198015d9746d2fd8196db4c064bd736a07095a029eca9","sha512":"ff780f0d9389e7e542569a58df95e2ce7c7484bed64c26795919019b5b16eb7e1bd2c9b9a1984ebf1da5ede23ece0f492d966ee365e66f6e4fbdc89b593840c0","ssdeep":"","tlshash":"f0113b5b5ed02fb2938303eb2c2f48c6fe15cd6438d2489e541095d63ce0519c76afb6","size":1000,"data":"","first_seen":"2025-10-14T16:37:55.419115Z","last_seen":"2026-03-08T12:35:28.060284Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","size":5052,"data":"","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","size":370,"data":"","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.5ri6CLcs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e14110362dd64004cbf9c5b0819ce51e","sha1":"ac0b3d5527cd9947635a2927903453b595312ca2","sha256":"7b1eed55ca6dd2863d24ad01ce7518323ea849ace6c9993bd9202fc50d9fd38e","sha512":"f8e73e1ab5d6cea498bb52eb0721faf6ef7d4a5c77571e59c1936930d7a85b67dd8d61c0a528f0b6e89ab619ec2ec21e398748c7ba5b84b5c99edf2e8d21c797","ssdeep":"192:ZvzfBTNwcZi1xZgJYUq8BoYSjo+tYP1F/yQ6OdZYWEdK3n1HemtO6Anl/qKxoLa1:JzfBTN4xZgJTe++tk6lWEd4njFIk0","tlshash":"0172841ae2858c312257c6fa41742940f24dce851269c6a5b5fcd9fd9eb1c2fe03e7ac","size":16672,"data":"","first_seen":"2025-12-08T11:02:52.799982Z","last_seen":"2025-12-08T11:02:52.799982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b104f410e577555bf713d14b3e61cb5","sha1":"5648bba8e164d96ee568ece5fabc7ca82c7629e3","sha256":"1f83c86cadf595b7e55a7e9234b32b6afcb8c724c454a1a959190257e2f36581","sha512":"a692f8417a24c3ca7c87701f1845eafd88e600c7c317c422a3df01954a98bb1a0134cd4e3f0579e07717ed87b203fc7a246aff84e829afb4c911536a1b781309","ssdeep":"","tlshash":"fa1110b93230707dd5a30ac3a5eea746367694144407cce450e4ca4c7764dbd1af2e78","size":949,"data":"","first_seen":"2025-11-14T01:20:21.025653Z","last_seen":"2026-03-29T15:19:13.507196Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7bd11ec719726840f2c06573e258516","sha1":"a00bfc1d071a981a1eefa03af815e760231a2faf","sha256":"6897ca6cfbd1b0e9f58d4f353905974139e46d1589865ba67350ccf4c4c4f309","sha512":"7a29e1777ff847f7a4601156acd8be35ed262578e661c0e22309c723aff506b05a74d49fd7a14db54fbaafa994327ac8c22221efe3db0b1dcb36b25aec11a6c8","ssdeep":"6144:jjCSbHpgtuEaxpWGwVWSayqW7R5U6k/bbqt3H3ch/+j:pFtSwW7z3cs","tlshash":"c5b4fbce77d4a87ac3a65520643f060a657d20e2b24c9490f0daccd42f7997971a3faf","size":500588,"data":"","first_seen":"2025-12-08T11:02:52.823525Z","last_seen":"2025-12-08T11:02:52.823525Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","size":96750,"data":"","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.CMaR6KUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1a72264b2d64ca59f20a79f7cff6fa6f","sha1":"1ff6880f00158d59964a10c2923a38efe91d22ae","sha256":"0109a66218d7fa9f8c83bb631a57f87bcbf27198e77ef025c892a0637b251690","sha512":"122e4f000f3fd6cb5eb287128108545a5c2d61a22ffcf3b42fc9a781ee2c77670512c8be64d695eb1e660874e1ed162280a474df30566fa9d85ac1f623297ab2","ssdeep":"96:uX3K+a+8Toj1uqF0sMUZZFk621AJ9uk8SisBBGwyW:IZySsqCsTk621AJ9B8c2wyW","tlshash":"8eb1020b7625b3f986ad2a28d9c422309a3d6fcd631404d1fafec0197249679c5b5bcf","size":5424,"data":"","first_seen":"2025-12-08T11:02:52.859024Z","last_seen":"2025-12-08T11:02:52.859024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.CBKTq9mE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"45eb20741e03cd96fca2fea13d766af2","sha1":"5531748e71ccebbe3a7a46efcde00fa1b285c064","sha256":"024bd164949d09788850fb55975749b8ed87200d6cc0ae835c945e52e384a4ea","sha512":"5a4f4f5624d7c27c199b99cd97627cef03e429fb9ca96c1b608300b57dffd3d38a1e3d617dddd4f85de05c45345e4c8f81cb6d871b73a50388a4528a8d703fda","ssdeep":"96:rvqwLxhma0uGzXt8IAs0uGzLsJdvawL8ZuGzhrMvrrPAXxwWSTxOj:+w9w4UpJUL2dJUSjrYBwLx4","tlshash":"c391a74d3c7ee4b0abee589fe1690c099e2d0fa611654d4194bf04bb26b7850e252827","size":4613,"data":"","first_seen":"2025-12-08T11:02:52.85175Z","last_seen":"2025-12-08T11:02:52.85175Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.Jkg4s0ck.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c57f958c52aa2aff636c2e33d4c66c8","sha1":"2af49bca6680859356311a61fc139339738a30c9","sha256":"d9b9a07af711aec0788c1bf0cfe2e7dc2b3dd6c2770424fcb2f6fbe7bed8f3a7","sha512":"7bc5fa2c4640b8258ccdc181a37d4cc89d655ee2ff123d8968be41bb6297d261f121ebd5d95381c86c91ba076476fd8c7f0de83dcddc0c410044954ff3d363e6","ssdeep":"384:PrU19C5tNFoHRRYptNLzODCM2aw4hDtGP4ljNMFBu:PrU19CPNSHROqCM2HSGP4lRIBu","tlshash":"09b2870b32bd9ff911a655a9c4813020892c8ec692715dc1d9ffcf65264ce62d1b6bcf","size":23612,"data":"","first_seen":"2025-12-08T11:02:52.814325Z","last_seen":"2025-12-08T11:02:52.814325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BLbK3QMi.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"daae8f03958df720c465c8ab3e7e1ef5","sha1":"336dc04874acbafe72d472e45965fc45aa7c3ec2","sha256":"c26d1a75fb8fc7e23f0cf79287f3159d5638c829a42561a648eb0b75d1a620e9","sha512":"dac7065460fb5ce38b707d1daa29ce21a4c203b87bfe45af5b13a1fc6353f3d7af7559cd36e619bea04e2238bf2ae3640455d1eff296a43643286c998806f213","ssdeep":"768:1NDC21lR7qT8CT1JqMPMS0K9KL5svEoESs4erHzcViB+8RgZB5Vph:zNzEx3qMGxrzOph","tlshash":"31b2f9c132927571838694f2e6330252e33a64543806a4bdb9bdb9db7981d877b73bf0","size":24689,"data":"","first_seen":"2025-12-08T11:02:52.82002Z","last_seen":"2025-12-08T11:02:52.82002Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.mN2qVtXy.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f79903c24fa84c1ceddcae8d89bc12ab","sha1":"e8f4447472cd11ed5febe2223a1a99aec4fc014e","sha256":"9a562b772865249e0ac2e32cf435a765aacde0e23091039b6f773801efceda82","sha512":"cd9c0894d1f23605c61c05a7a42a55e432f84b0d1dbce53fef82815e95d26f01a483e2dce8bba937edc19916a6dee489c61ea3458511080f3dbda02f8017199b","ssdeep":"","tlshash":"fc71e9cdba09aaf993f21ca5b4360406d7325e95ba7005c6d15f1eff2252844b42be53","size":3821,"data":"","first_seen":"2025-12-08T11:02:52.881659Z","last_seen":"2025-12-08T11:02:52.881659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","size":375,"data":"","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CcFJMwXR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8c712ca0adee1ccf00ed08198a8ca900","sha1":"6d1f2358df476146582ede0f7b5dbc91a5f2b2b9","sha256":"013de0f0bda2d68fb28bfafe093793e3be92974f4f3747e7c4b82b16ca0ee742","sha512":"c5e843c069f083f6e6b3fc186cf5a1788cf0653280853921ddb01980b5c34b930d82c6a1575033ead8b6a4913191b70c5155b3d835c509e29781eaef704642d6","ssdeep":"","tlshash":"a461939b6206e770c02620a4d02f2810d95c06cdb3b47594acbd54aed9a243ae07bf5f","size":3397,"data":"","first_seen":"2025-12-08T11:02:52.799103Z","last_seen":"2025-12-08T11:02:52.799103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","size":1926,"data":"","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.BrnQZCIe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"493d5f043be02358a6d7a9cca21c4c6a","sha1":"58ef21d1a0c0fbfefcb518ef3104f2a01b52b19a","sha256":"4950025d194fc855b4ea7a2fa3d59198d7963bf3d2d83611bc101ff4c507f1c4","sha512":"0f9e3d1fe47bcc1ea82187e2a06a52a2b37bdfd4497fb2b5269c2383309d238fa47a9e38af8378260935fdf7be7d0c88194ad1cc068766ed56035e5ccb7a3c29","ssdeep":"1536:pXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPP:p2YMGB2C62PmQJDbPP","tlshash":"b87363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2025-12-08T11:02:52.775884Z","last_seen":"2025-12-08T11:02:52.775884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.K__QARGc.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"45a9f1adc4a1d87995fedde58f6af145","sha1":"9706d271821f3547344e39b37839064f90dbae44","sha256":"905b3c53f8831a7b96cf41c5f1f05b3cdd43a36d3e1677d705707503b44803dd","sha512":"f72fd978ef1e031953bd57e764ec7631ea8caebd261deb72b49a233cd896af08e714b69699aa5328faa51084ba0969bbd6e039489194cf7a02b67b7d3a19c8ba","ssdeep":"96:eW/NAavcByHGC5mTNOURJSwmSiQ5ZpJLZej/g4sc9GDhJKTAoExYnkIOVWbMvqdG:p5H8RZ/mozqVxW0tjHOwsLKWa9aL","tlshash":"3ac1ca9d7fbea57116da05a120aeb047d37950d8f0198051e06c9ab83913ece89f3f4e","size":5927,"data":"","first_seen":"2025-12-08T11:02:52.815686Z","last_seen":"2025-12-08T11:02:52.815686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.1L8Rf5dw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fd022401d4fb0de8541e6c0d02c2ec8","sha1":"4ea77def8a80b442aa6ae38a9e711918201acf18","sha256":"e463196c3ff3b951ef41ce14b044d3083a40e10ca19e7a9e2992ff678eb2574c","sha512":"45a0ebb5d2b1bcb0b3b3936c16af9df780447c22fbb1045097b00ca990414c62d12582bab992b2f7738a9f18c81255105fcfa5bbb9da7eb2f80e60408c8b4b46","ssdeep":"","tlshash":"f251930f997a2873558520fae85710320619d25c3698a0a8f3fe754715bbc9a233bf9a","size":2966,"data":"","first_seen":"2025-12-08T11:02:52.88255Z","last_seen":"2025-12-08T11:02:52.88255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"04839915ba2bf62c92348cbf677d6f02","sha1":"39e09668d038653c47a329a4ad5ba97884344de8","sha256":"c4876548cfbd16f1142097fa6414d0e8206eefb539306001eea0c0a7adff34bc","sha512":"e9e26eb0a5b19ee834d683be8954ab90fb7fd315b6b79ba5f62c282c09b502e914c2c020252e6cdd8bf4018a7c08888cccbdfa1d81e2e4ddaba7f0c3c20088db","ssdeep":"3072:4TvqbcLVJ7lQAIToVpH7RrfIEuPOIZbkHp7kEkfAipTlW:IjplrXuXUkHfAiO","tlshash":"7564e64d72f827b5458370f1b63e1932b270e013340c4d993d9d2299afa6618eee6fb5","size":330150,"data":"","first_seen":"2025-12-08T11:02:52.837495Z","last_seen":"2025-12-08T11:02:52.837495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"108.157.229.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9c86dbc93b69b44e08dbc35c025b18b","sha1":"b6faabdf02f5b19acb37fbf0b9e69649d3f05613","sha256":"e2010d107ee2f7843ac9364ce608f1ba749a5e0807e03f1cfb913bd148ff957d","sha512":"1f8d762aa831bc441c484d69948c62eec66ebbda6a3f61ab5cd7d4e57c4f6c7db224d6b4e0870aa018ab12cd93a790af40afea7d45cbbb04615e205715a2e939","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfposG/zfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOxG/MSdZ935pqUP","tlshash":"bbf174eeb6c2793806a31566623f770c7f3b6544284944a0d066c8c8797adcbc12bfad","size":7591,"data":"","first_seen":"2025-12-08T11:02:52.861115Z","last_seen":"2025-12-08T11:02:52.861115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.8287c992.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c76c558c1c9812afdfe44df66ae6561","sha1":"20cd11b21f09dc237e70ea70190fc4ca443fb72b","sha256":"c1f4c0b604b7fbf3fa27f28fd81fbbefb3ae58c2b69e9c58bf80d5688158f55c","sha512":"78bfab0c85af69764e38b7b3262960e68043e6af3fa3cbe4f147e328887eb6235602379c287527d76da09f20a1154911d399f5496da24d94d57c432346d823fd","ssdeep":"6144:ext8LfzpXe7RvofOq1BrFZGlk5j+kfFd+oNEf9upydrhOoDiOX:Ct8LfzpORwfH2k5jfFUkEFupsp","tlshash":"3fe43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","size":687197,"data":"","first_seen":"2025-12-05T17:13:33.975291Z","last_seen":"2025-12-08T11:27:40.19839Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"394bcfb2947ebbe4c75dd1cef148fb2f","sha1":"6a715721befdf0fa3c032d90c7602bf309e3afdb","sha256":"35053a1dafea49a795ee0aa24310d98d6d4f4e450db2e2136d14a86dd4ee43c9","sha512":"d3df1503d9b990744131f6191c000b824823baedf1de33a91b5efec3059d5fb4b3657df166bf7fc2b1ae4bb34835579de1de632ed1af091a8899ff4105f5bdd6","ssdeep":"6144:AN3UyF5R6fq/nXUBL5uz2opBh/5OVJdrrSUI:0Uw5RJH/5OVJdfSH","tlshash":"a274c619ea116ee336f5381eb16a2ae370325b113b55c27600da5f393e2f80cf5275b6","size":342668,"data":"","first_seen":"2025-12-08T11:02:52.848863Z","last_seen":"2025-12-08T11:02:52.848863Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f680bc346c1aaba304e0958b8a88e4e","sha1":"5368b5b2698da77de2bdcbd48c7bbba43c0ba49a","sha256":"d407ec1da164ed9d59e5bf3a2e4e147808443b807b7778b308169a907bd2660d","sha512":"82fee1d0c990af301df05c1445a3618f6df31a6b9f208b9d014b05cf5450582e4e5fe7575c8eb0fa5af7217f32883cbdfdc682f7c5b4353a8199c7498c26a3a9","ssdeep":"","tlshash":"69e07d85e0e052ffeab952d4f601bb553b655921f48e3ab7a44e3c9e600d38355c1d2c","size":332,"data":"","first_seen":"2025-12-08T11:02:52.910441Z","last_seen":"2025-12-08T11:02:52.910441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","size":1926,"data":"","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a4ecbaf9e0a66b1626f683a1c5ede07","sha1":"c95c400f9293e88b57f8a38d4b6ce7217f30b8e4","sha256":"ea4454e72220e53d66de0f6d43dc4eb7ef4fdbda27a6301dcd7b0e4b9e4d2b16","sha512":"779de5e39ac2f4214926b90ff5deed38506cafece36de38812ca933e2917fef74e99310d2b74ccc225d04c6f43eed8da0e2f67ad4d352bd74122c1e07d764333","ssdeep":"","tlshash":"20418e6f39f1102241a3b17c0b9bd25273338303580eeea43e5c13557f969aa89a7f8c","size":1956,"data":"","first_seen":"2025-11-29T08:32:41.81426Z","last_seen":"2025-12-16T11:25:19.892071Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0405848403cfa0429fa2f47699697d01","sha1":"22cf713e2fdc92058a39d8506e8356242b205f63","sha256":"97740baa921c33bc558c28905646b56e7325b9426b03eaa3b91ec71a02838c6f","sha512":"a56ff3a1b91e93451ac022605c28603977cca89740bb22ceb91acf9c333d86ef4432ecb370a79de5657e3b14e62dc759ad13a560dddfb83f31173c4381468c88","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJZ:dxtL7PD4hsy312IhALo3aS++FwIaGPf9","tlshash":"6d72a4e93183b53593eaa9e7403b010af33c3944344f9494f6adaac63d7651352b3e7a","size":16135,"data":"","first_seen":"2025-08-05T20:12:01.845926Z","last_seen":"2026-01-25T14:09:20.083097Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.5ri6CLcs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e14110362dd64004cbf9c5b0819ce51e","sha1":"ac0b3d5527cd9947635a2927903453b595312ca2","sha256":"7b1eed55ca6dd2863d24ad01ce7518323ea849ace6c9993bd9202fc50d9fd38e","sha512":"f8e73e1ab5d6cea498bb52eb0721faf6ef7d4a5c77571e59c1936930d7a85b67dd8d61c0a528f0b6e89ab619ec2ec21e398748c7ba5b84b5c99edf2e8d21c797","ssdeep":"192:ZvzfBTNwcZi1xZgJYUq8BoYSjo+tYP1F/yQ6OdZYWEdK3n1HemtO6Anl/qKxoLa1:JzfBTN4xZgJTe++tk6lWEd4njFIk0","tlshash":"0172841ae2858c312257c6fa41742940f24dce851269c6a5b5fcd9fd9eb1c2fe03e7ac","size":16672,"data":"","first_seen":"2025-12-08T11:02:52.799982Z","last_seen":"2025-12-08T11:02:52.799982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a4ecbaf9e0a66b1626f683a1c5ede07","sha1":"c95c400f9293e88b57f8a38d4b6ce7217f30b8e4","sha256":"ea4454e72220e53d66de0f6d43dc4eb7ef4fdbda27a6301dcd7b0e4b9e4d2b16","sha512":"779de5e39ac2f4214926b90ff5deed38506cafece36de38812ca933e2917fef74e99310d2b74ccc225d04c6f43eed8da0e2f67ad4d352bd74122c1e07d764333","ssdeep":"","tlshash":"20418e6f39f1102241a3b17c0b9bd25273338303580eeea43e5c13557f969aa89a7f8c","size":1956,"data":"","first_seen":"2025-11-29T08:32:41.81426Z","last_seen":"2025-12-16T11:25:19.892071Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.GP_QzcML.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"da3e89138c3278064cdbab9d2bc1c614","sha1":"1258128ea7571fd68d60cce7bb3197ae3c72fd7d","sha256":"602b47a9d557805e6e550699afe8acbc9ff0747657ddb384990f977451e5ca0d","sha512":"426a2ed89a6331e4fdfed0fd9205eb0af1a0f8933ae4881d6e8823567b80140ac0d4d2cc15dfaa843c1d7b84a324c7ce1dfc4004b0bae1f08ddcb1176a20c6a5","ssdeep":"384:wB4O6X3LgUudXm98KNK9lCEe6woDOpXxM1wfRTEy1hl6qgwmQbk9QzOWpUJtbFRU:wBCL9udW8KNKFDOpBMSWyd6imQbk9Qz7","tlshash":"82a22bb7236293b246ab018a50770543d31407d5f508c4f17afeadae35b58a2e326f7e","size":22698,"data":"","first_seen":"2025-12-08T11:02:52.836715Z","last_seen":"2025-12-08T11:02:52.836715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.D_Z2xyWs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e98948343aecaf65e0075217d58bda5","sha1":"44f2bb2790f601503ea83129968fad84b6951898","sha256":"72b93e16482ec38e02ec59438c0dbf985113cf316e0204463a2d89d87b1a6216","sha512":"5fd0e24585e13466a0eede2a9c7464813c479564bfb968cb664db1cc8117b13ca4fff2cfc93a9c1aa7c186ad1aa96a9879d918abd2b4c7bcb8031b4ace76a66b","ssdeep":"","tlshash":"e431210bdc04ecb5e68b88eec0240402810f7d56f3e5caa8d2ad62fcc7751a99115b75","size":1711,"data":"","first_seen":"2025-12-08T11:02:52.825818Z","last_seen":"2025-12-08T11:02:52.825818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"631036c478b6a0b0aaa7d71707779f0f","sha1":"94053f2e94b305e3dda29c04d3ce22346a8336cf","sha256":"0c390ae44fb3e39f9e23de7e61857f53e78be006a2c17cfcd0e583d073fa3762","sha512":"a62202769c20f2ed1686a8fa7c619fc9ae2cf0c3cf33ba268f901422dcce0f910f1ced698eba91c9348863f385c16e9bfa4392c3e220c1fa7d589750fd35a8f4","ssdeep":"","tlshash":"c3f00255790b513d47a3607047ffc20b2827a0a711c1c849d916c8b81fe5ac8c59fbef","size":625,"data":"","first_seen":"2024-03-29T05:33:40Z","last_seen":"2026-03-29T15:19:13.502083Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d7e7e5a3a81fc9eb32ad2bec6259571c","sha1":"1ad9e5ca8d4303c3bc3509dc9673016d2677b5f0","sha256":"21414262f94d462ef16cbe6532a905e530473d43d676b92d915f16c3edd35b41","sha512":"2e7dcecb46607d0d5e91d9b45ab428b06459e27b2c3a8a24c2696c715d90cd2ece1e2e178e3d442debc5afcc0014a68ecc66eeccd30e66fb037a6768a7843655","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwm:zGmWr9di6ZPK1oUVc8hbS0N664r","tlshash":"597329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","size":78915,"data":"","first_seen":"2025-12-08T11:02:52.843704Z","last_seen":"2025-12-08T11:02:52.843704Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6808b734a8226f932ccbed46abd4c3","sha1":"e99369c89962018d66d6d9d6ab2e044957a72c83","sha256":"e906c2f60e55c9f55751ee306c0c8d68f1b4b5dafadbdfba9f866b116b01c299","sha512":"8eb79da7d960c77acedc69726b2d30bf7aa2db055bc89869c0309e8f07bf9df2d76d9f2a3c2314c7fb27dda571c8bab56ec2dfd518710e7159c5fd42b75f01fc","ssdeep":"","tlshash":"b3f0970e9cc503a043f800c483bbff1df29f210c881c8264c3c78882760aa9398323e8","size":487,"data":"","first_seen":"2023-11-07T14:36:47Z","last_seen":"2026-03-29T15:19:13.501559Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BLbK3QMi.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"daae8f03958df720c465c8ab3e7e1ef5","sha1":"336dc04874acbafe72d472e45965fc45aa7c3ec2","sha256":"c26d1a75fb8fc7e23f0cf79287f3159d5638c829a42561a648eb0b75d1a620e9","sha512":"dac7065460fb5ce38b707d1daa29ce21a4c203b87bfe45af5b13a1fc6353f3d7af7559cd36e619bea04e2238bf2ae3640455d1eff296a43643286c998806f213","ssdeep":"768:1NDC21lR7qT8CT1JqMPMS0K9KL5svEoESs4erHzcViB+8RgZB5Vph:zNzEx3qMGxrzOph","tlshash":"31b2f9c132927571838694f2e6330252e33a64543806a4bdb9bdb9db7981d877b73bf0","size":24689,"data":"","first_seen":"2025-12-08T11:02:52.82002Z","last_seen":"2025-12-08T11:02:52.82002Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.K__QARGc.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"45a9f1adc4a1d87995fedde58f6af145","sha1":"9706d271821f3547344e39b37839064f90dbae44","sha256":"905b3c53f8831a7b96cf41c5f1f05b3cdd43a36d3e1677d705707503b44803dd","sha512":"f72fd978ef1e031953bd57e764ec7631ea8caebd261deb72b49a233cd896af08e714b69699aa5328faa51084ba0969bbd6e039489194cf7a02b67b7d3a19c8ba","ssdeep":"96:eW/NAavcByHGC5mTNOURJSwmSiQ5ZpJLZej/g4sc9GDhJKTAoExYnkIOVWbMvqdG:p5H8RZ/mozqVxW0tjHOwsLKWa9aL","tlshash":"3ac1ca9d7fbea57116da05a120aeb047d37950d8f0198051e06c9ab83913ece89f3f4e","size":5927,"data":"","first_seen":"2025-12-08T11:02:52.815686Z","last_seen":"2025-12-08T11:02:52.815686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","size":6067,"data":"","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.yixB_qvP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"75a83e4fbe7307ff3f8f265ce4f2e95e","sha1":"84a7279d2da55860fbfeb9692ae0eb6d87cc33e9","sha256":"b04a2a74aa48b239066eeac8d155b53abd0e0cfa3734f6c9295c3beebe276fa1","sha512":"b5ab342dff2297c3dcc209818fec79e5124199d99deab12718b264c8df76bf2901eed99f69c1ce1a054a53c9b0f0598659910d4584c06f8466fe45d2acbdd521","ssdeep":"","tlshash":"7b4122ada468bb766a438594f2644053113b36f3a244085c76ee3ee8d3ef542f261f35","size":1893,"data":"","first_seen":"2025-12-08T11:02:52.878846Z","last_seen":"2025-12-08T11:02:52.878846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.DXYjurDe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"acf6699c9a7b8a34a8f52fedf1fc1202","sha1":"d03d5a3f7a0f913c246f5724fff3f59ee2c07574","sha256":"11e8946af03a205179dc1887a14d863bb3a0a03656510cf2ea22b69e8ea455f0","sha512":"7516b49d734751851d42df85d7963314e27b7427d3991a8391102651c20eaf74d9f42fe3051016c81487c70ab3e27755ed65dea0010264c03d486b8d610fabeb","ssdeep":"12288:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5f9A1q:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4j","tlshash":"f6844c54b2827138d7b618fd912b098177680f417019d8e4f07dae7e78a6c1893bbe7e","size":400573,"data":"","first_seen":"2025-12-08T11:02:52.771679Z","last_seen":"2025-12-08T11:02:52.771679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.CEJblBb-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b072041727bba6fdfe48e93e4d7ecb3","sha1":"3f33b4ce4cb0ceab31ce29c0c46dbd1a0ef10174","sha256":"02a6f1961425174447de3809e5765ae6db1423c3104ad722f872f1d181716a2b","sha512":"3c4afddaf26112f36bfb566e1764a0c0591c5aaa1c4bb715edf66ab03d5c20991c82379863239f353ec6316813af7c8e87d29beb7353f078050997d4ca3b661e","ssdeep":"768:goui6kdsTKD6tV3qOMEkPDaRc8PEG2ZUJ/8sWjUhyF14Rvl:gxmdsme7NNkn8VS4h5Vl","tlshash":"42c208dc7a1128f3d6e7448dac120501a07a5a4165b40ac2e7bdcbb639dfc1067a3be7","size":26728,"data":"","first_seen":"2025-12-08T11:02:52.809354Z","last_seen":"2025-12-08T11:02:52.809354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0405848403cfa0429fa2f47699697d01","sha1":"22cf713e2fdc92058a39d8506e8356242b205f63","sha256":"97740baa921c33bc558c28905646b56e7325b9426b03eaa3b91ec71a02838c6f","sha512":"a56ff3a1b91e93451ac022605c28603977cca89740bb22ceb91acf9c333d86ef4432ecb370a79de5657e3b14e62dc759ad13a560dddfb83f31173c4381468c88","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJZ:dxtL7PD4hsy312IhALo3aS++FwIaGPf9","tlshash":"6d72a4e93183b53593eaa9e7403b010af33c3944344f9494f6adaac63d7651352b3e7a","size":16135,"data":"","first_seen":"2025-08-05T20:12:01.845926Z","last_seen":"2026-01-25T14:09:20.083097Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.GP_QzcML.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"da3e89138c3278064cdbab9d2bc1c614","sha1":"1258128ea7571fd68d60cce7bb3197ae3c72fd7d","sha256":"602b47a9d557805e6e550699afe8acbc9ff0747657ddb384990f977451e5ca0d","sha512":"426a2ed89a6331e4fdfed0fd9205eb0af1a0f8933ae4881d6e8823567b80140ac0d4d2cc15dfaa843c1d7b84a324c7ce1dfc4004b0bae1f08ddcb1176a20c6a5","ssdeep":"384:wB4O6X3LgUudXm98KNK9lCEe6woDOpXxM1wfRTEy1hl6qgwmQbk9QzOWpUJtbFRU:wBCL9udW8KNKFDOpBMSWyd6imQbk9Qz7","tlshash":"82a22bb7236293b246ab018a50770543d31407d5f508c4f17afeadae35b58a2e326f7e","size":22698,"data":"","first_seen":"2025-12-08T11:02:52.836715Z","last_seen":"2025-12-08T11:02:52.836715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DXB529iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e699317ce7b4a579eddc1c9a9b1e4d28","sha1":"e8215e45bd5259e132553850dc1b9a68d71e986d","sha256":"53ab24c88c52e4343b206def7db98d7ce4fb3f4859ea58f2365bffbb200ac4e1","sha512":"e38c28da9cfa174b2239c359982b4016a3d78761330b02defffe86bacbfdf2efd3195d2aea992b5689823a7bb872552955cdfd5c43d711d601474e697c350cf2","ssdeep":"96:ctPSp8IIOnUV9SU0DDrJJQh9eC97Ae0E0hbDO92pli56ZCp0NY72T4n58daJ0w4i:cNSp8y4SFHrJJQh9eC97Ar3O92pli56c","tlshash":"e1b1c82ecf0942f882c758f6e0e64e4a505dea87f13c0604b9a5dc6f9514fe5931bb8d","size":5462,"data":"","first_seen":"2025-12-08T11:02:52.792706Z","last_seen":"2025-12-08T11:02:52.792706Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.DXYjurDe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"acf6699c9a7b8a34a8f52fedf1fc1202","sha1":"d03d5a3f7a0f913c246f5724fff3f59ee2c07574","sha256":"11e8946af03a205179dc1887a14d863bb3a0a03656510cf2ea22b69e8ea455f0","sha512":"7516b49d734751851d42df85d7963314e27b7427d3991a8391102651c20eaf74d9f42fe3051016c81487c70ab3e27755ed65dea0010264c03d486b8d610fabeb","ssdeep":"12288:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5f9A1q:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4j","tlshash":"f6844c54b2827138d7b618fd912b098177680f417019d8e4f07dae7e78a6c1893bbe7e","size":400573,"data":"","first_seen":"2025-12-08T11:02:52.771679Z","last_seen":"2025-12-08T11:02:52.771679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-03-31T00:45:46.296227Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.BrnQZCIe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"493d5f043be02358a6d7a9cca21c4c6a","sha1":"58ef21d1a0c0fbfefcb518ef3104f2a01b52b19a","sha256":"4950025d194fc855b4ea7a2fa3d59198d7963bf3d2d83611bc101ff4c507f1c4","sha512":"0f9e3d1fe47bcc1ea82187e2a06a52a2b37bdfd4497fb2b5269c2383309d238fa47a9e38af8378260935fdf7be7d0c88194ad1cc068766ed56035e5ccb7a3c29","ssdeep":"1536:pXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPP:p2YMGB2C62PmQJDbPP","tlshash":"b87363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2025-12-08T11:02:52.775884Z","last_seen":"2025-12-08T11:02:52.775884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.DK1wTDFI.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"72391357aa9d97d9be0828fd9ebb6b8a","sha1":"6c40fe4a60ef9cd3f5be9e144f8ed6659ad195e7","sha256":"7834fced6a80b514c1eb304058e3d8251346fd1d7d849e0fc0455108da344bfa","sha512":"380d306febd0b610f706e71cfea54b8231f99258f6af0e6ba88a298001b570ff5de1d73271b8c411dfb575f36f0641f43c3729e2871caee54ebbbad97cdc41fd","ssdeep":"1536:lU7od4j0bJdiUQbM9uvtmiC9vUJxmUlcDlElc7T1:lefjyeHwl8cV","tlshash":"a1433bcef972227077fb1160a46f0402613a67017419c4e9bdaf9ed42b92984d6e3f7e","size":57920,"data":"","first_seen":"2025-12-08T11:02:52.846224Z","last_seen":"2025-12-08T11:02:52.846224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CDhE89Uv.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"def06a369fad4b62470787f94b8b619e","sha1":"397a4ea7f95d9ecc1a8c1a1fe8445c23162afbfd","sha256":"bed9687a141975dff52bb149c801fefcd03bb535407a287fd765cbd9f605779c","sha512":"ebf34f7d9b61ad585ff17d95ca6529766ecf138ce911099c36d5841973de61445c86e388d3c5609c6cad25200917ac0bb014530106222cc5e09bf5a96e4b9cd7","ssdeep":"24576:NC21o8yGEH6LAD+ddsdaDajxd7OpaA7Dued5mx7hXGwTOjmA83I8PvQHhyo678BE:NC21o8yGEH6LAD+ddsdaDaXOpaA7Duei","tlshash":"47556c89b649747683f71499a0ab0440a23c0b41f56488d1f5fc8e7e2aaed349377f6f","size":1288858,"data":"","first_seen":"2025-12-08T11:02:52.899776Z","last_seen":"2025-12-08T11:02:52.899776Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5c31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c0bcc6551ba47873d7a329f73e3908b","sha1":"b18df70caf57943bf09c4ddddd0b3c07ef636a27","sha256":"35105ca7e4c6840eef28c49504fe65457184d7ea1e774acf1088781d1dd35583","sha512":"3745f22139e83fb0434568579d5945ba3bd0309969b85026ea62b86db8172e0707dfdfc83059325398d1619d82a3bc8cd9e5e4273c9bcd4d104ce3665a94b2e5","ssdeep":"6144:zy7WItw+WSayqmVDD5U6k/bbqt3L3cF/evxgh12ctW:MPtmSwmVDR3coxf","tlshash":"fb8419ce73d674265396f478502f018ba57b28a2f44cc896f189cde52e70a9a4277f3c","size":396967,"data":"","first_seen":"2025-12-08T11:02:52.813438Z","last_seen":"2025-12-08T11:02:52.813438Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.yixB_qvP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"75a83e4fbe7307ff3f8f265ce4f2e95e","sha1":"84a7279d2da55860fbfeb9692ae0eb6d87cc33e9","sha256":"b04a2a74aa48b239066eeac8d155b53abd0e0cfa3734f6c9295c3beebe276fa1","sha512":"b5ab342dff2297c3dcc209818fec79e5124199d99deab12718b264c8df76bf2901eed99f69c1ce1a054a53c9b0f0598659910d4584c06f8466fe45d2acbdd521","ssdeep":"","tlshash":"7b4122ada468bb766a438594f2644053113b36f3a244085c76ee3ee8d3ef542f261f35","size":1893,"data":"","first_seen":"2025-12-08T11:02:52.878846Z","last_seen":"2025-12-08T11:02:52.878846Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","size":6067,"data":"","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","size":96750,"data":"","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-03-31T00:45:46.297194Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.PZXRoakp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"31ac6147e646df21022341aa61f2a539","sha1":"259bd24cf58654d1491f15ad18f4dfdca801d6a8","sha256":"68c5fa433e317768c07a276ca3729d4c3fb0ceb6d7b5cf0fabb8a99545709615","sha512":"9e8d6f171a85121a5142074a9cec9d705216d96a6dff6a8849535b54b7e261098dae05c2a0b5d8fb242459c5330182c6782c1d7a967c9b30e00e883062b05ae5","ssdeep":"768:H61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/R:Azmp7QA/BPWUR","tlshash":"d403fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2025-12-08T11:02:52.791651Z","last_seen":"2025-12-08T11:02:52.791651Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-03-31T00:45:46.296227Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-03-31T00:45:46.297194Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.BneLucUJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0d27d34788232d8cf7b06755474a1b86","sha1":"060f91c781d4e347b60138f71d6162ed2a88c99f","sha256":"9e6e76be3b262ae3f5c9dae49e44ee98e1accf9e93b3f6d618149a638c9a5632","sha512":"78198bb2e2a2d1f70bee581eedf106d2d5eebda0e3f400ebf5638df67cc0f225c8c40229ed1c4dd8920f1f3563560c9e7b5d504c3936e8ae87d0d3785ce94ef4","ssdeep":"6144:CLZHeVelwC1a9G/74YL7pe8EmzZopGHjWJBphB2hbhtyIUZeuCOAMc:iZHJwCY8/logjWx6Oe","tlshash":"6bd44b597151783647b640e9906f0a06b33a2a2e5448c89cb26ce9ef39fdc4521bff7c","size":617369,"data":"","first_seen":"2025-12-08T11:02:52.816558Z","last_seen":"2025-12-08T11:02:52.816558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-04T14:50:17.505894Z","times_seen":62958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/86620776.EqKsf2cH.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/86620776.EqKsf2cH.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-68f35d3a1ed21b258a29c3e3dc5e94d1-2b3af15095dc8445-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-4b48f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e35168c19b40d0a6f886479cf064ca32","sha1":"df45c47f6aad0e7c104dfcc1868841062b003887","sha256":"4a3371bcd8c4a443be46441fb6a22ef51ce43c5c063384202be6b023729b37a2","sha512":"aeb8093bd35fda8823fe5493802f730ef189126bb94bcfb2ac1e52b76ca4a773f212dab864756e98b94b77be31b08706ffdab73d910e05a3ed7880128c28f969","ssdeep":"6144:6fLfAo1BvreQyY7t35lPJB3VKIN506LU+HnuISH7A45GiaYw6vNZqMX6Q25cTxFt:6frAo/vreQyY7t35lPJB3VKIN506LU+E","tlshash":"9a64d7ab8e60613ef5b3b92ee1d9be5d7108dc03c9a30655e5a1962cc2c77d25336f08","first_seen":"2025-12-08T11:02:52.765834Z","last_seen":"2025-12-08T11:02:52.765834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/8a28bc4d.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/8a28bc4d.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-53854dfda331e31cc424dfa05443dd97-0b794e15f8c30330-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764335\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-03-31T00:45:46.166838Z","times_seen":129,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=d796s9\u0026event=regstarted\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Dec 2025 11:01:55 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 375\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":330,"dns":40,"connect":102,"send":0,"wait":105,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fb4472f4.B8JPjuzh.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fb4472f4.B8JPjuzh.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 179\r\ntraceparent: 00-e9822e075c06c041a33e36f715e0d8fd-6782c00a759d2ac3-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-b3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 5\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (502)","md5":"410b14377b050450a589c7412599323c","sha1":"861729bcfdaffd5e3e3a9513319a1ea8df0c9da8","sha256":"1105e16f27b75f5d90f31b036bedc1e82d1b0a480da3b85f1aa81fa30a988ac2","sha512":"0027fb899fa855187b7bfe9d683ec7275a497a5b7cf45cbbd1e5cfa6af96dead9b77bbed87ca5e4d97471050018c42ddf1820716a3d0c741d07afd431a6026fe","ssdeep":"","tlshash":"a7f0b4d50d406b3bfb37688ec0e3359163499d11e18245899a50187d0ea434241b1a3c","first_seen":"2025-12-08T11:02:52.76845Z","last_seen":"2026-01-25T14:09:20.094523Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.CXyVz8sh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/054854ad.d.m.CXyVz8sh.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a957d3ab7f035074cff85b701c927c6b-cc39118679e1cf8c-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-10de4\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69092,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bd9cf4e799b1f070df55240bc5484fe6","sha1":"819a3fba1a1c63ccb83244fb240b1847552aeb6c","sha256":"42845ae9476767a05866b954b568985b8a777b7e37207680c4a0c70113d017ea","sha512":"27af04ef3fbd059249d18451f378c036f3dd49a2086854774402449bf9dd026a22f4b993436d526d894cd601c83eec08559bed1159ec9dc400ab014fbd8a30a8","ssdeep":"1536:WWOoUHOVrDC8EYfZz//EVkbZBHS+/jIyUEJ5jYQ2UjL:WKVrOvY5/zBIyUEJ5J2U/","tlshash":"ce63620ded0c54faa3e650b9f0f54e0a5518ae47f2784580bab5cc1f9488fa8a36f74d","first_seen":"2025-12-08T11:02:52.769369Z","last_seen":"2025-12-08T11:02:52.769369Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CC9_Gdie.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-60ae68a1f7e5001b1a8f4b52abd2e88d-3e50262e93740fbe-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1398)","md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":51,"dns":0,"connect":5,"send":0,"wait":127,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/wa/collect","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"metricType\":\"TTFB\",\"value\":\"189\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.DXYjurDe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7fbe0154.d.m.DXYjurDe.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-3dfc5c96e34a1fdc5dca938cbb8d5960-bd30c8badc5900aa-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-61cbd\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":400573,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36887)","md5":"acf6699c9a7b8a34a8f52fedf1fc1202","sha1":"d03d5a3f7a0f913c246f5724fff3f59ee2c07574","sha256":"11e8946af03a205179dc1887a14d863bb3a0a03656510cf2ea22b69e8ea455f0","sha512":"7516b49d734751851d42df85d7963314e27b7427d3991a8391102651c20eaf74d9f42fe3051016c81487c70ab3e27755ed65dea0010264c03d486b8d610fabeb","ssdeep":"12288:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5f9A1q:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4j","tlshash":"f6844c54b2827138d7b618fd912b098177680f417019d8e4f07dae7e78a6c1893bbe7e","first_seen":"2025-12-08T11:02:52.771679Z","last_seen":"2025-12-08T11:02:52.771679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/voltent.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/voltent.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2616\r\ntraceparent: 00-c2ee289266296c223947976d9acaa570-01507066132ca1ae-01\r\nlast-modified: Fri, 27 Sep 2024 08:08:08 GMT\r\netag: \"a38-623155afeccb3\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 08 Nov 2025 17:43:42 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2567274\r\ncache: HIT\r\nx-cached-since: 2025-11-08T17:53:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c0c3160ad74409e6974c3e9bb3770d0","sha1":"209269e197095ef1eecba4de5a8c897560ef1774","sha256":"e1fb8d516b3447db6430ab37aac407636ed11b2247f2b6fad5bfc2f9917897b8","sha512":"6934594f179d876094a006d4a8da10f767239c611af93891c73403adfc9d753b4268605a0f7971ff7bec8474c56933ccb112895af99df8b29e971cc638981d03","ssdeep":"","tlshash":"2851c6c8e738d120b04173a9619a94b83b5298f23f02dc69d78a2eb63445c5f5ebddc7","first_seen":"2024-12-31T04:55:51.591143Z","last_seen":"2026-03-14T07:22:16.726331Z","times_seen":39,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.l.liftdsp.com/ac786b28-283a-4d76-a40b-23e03f94ae14.json","fqdn":"ps.l.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"54.240.174.108","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ps.l.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sun, 05 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:FF:93:7A:39:16:1E:F6:27:5B:22:3F:5F:C7:A6:C3:6A:22:BF:62","sha256":"0E:06:CF:4F:55:41:8D:9F:FF:83:14:09:B2:03:4C:67:98:C5:19:10:75:CB:52:BB:6F:5A:2C:81:E1:FF:B2:29"}}},"request":{"raw":"GET /ac786b28-283a-4d76-a40b-23e03f94ae14.json HTTP/1.1\r\nHost: ps.l.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 50\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 07 Aug 2024 15:08:37 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 08 Dec 2025 10:55:51 GMT\r\ncache-control: public,max-age=900\r\netag: \"e96cd5af6f065e5048b3ddd2913dac50\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xS5ERENGcar3A4dsLh5OzcV0vPiz417alnhBBpkGF_ZTD_sMvI4nGw==\r\nage: 511\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e96cd5af6f065e5048b3ddd2913dac50","sha1":"98f5fff6913c150009fb01c2cf5bbe83c250f80c","sha256":"88c38dd5fd1531be2d044c85bfd00517c41ce29b03c514d620d80a80241a1f11","sha512":"9478fcbed66ba6836ed9bccc5f3f3c1681d7527489c521c85566a2368089191fe173735d89f1277a5f86da659be50879b9e0ac7f62c1d7a1d4a905af8c49f990","ssdeep":"","tlshash":"6790041740037457c457c75041443d55d75d0d370c170f7404551d4503f53777540117","first_seen":"2024-08-31T07:43:55Z","last_seen":"2026-03-29T15:19:13.337153Z","times_seen":103,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":74,"dns":64,"connect":1,"send":0,"wait":3,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 455\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; shield_FPC=SC28rtM0fJzEDbSrQ9sBk2pzKhdfwIPO0x; _ga_JZZNGY93CC=GS2.1.s1765191715$o1$g1$t1765191715$j60$l0$h0; _ga=GA1.1.687359927.1765191716; pixelsink_uid=662d83b7-707e-48e3-a98a-d931b6c89e8d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":455,"data":"[{\"id\":\"18613725-1baa-4fd2-bedc-e04a76805b29\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.127.0\",\"level\":\"WARN\",\"line\":0,\"column\":0,\"error\":\"[shield][success] {\\\"session_id\\\":\\\"4b254ea0d42511f0bc0d1d13a86e5917\\\",\\\"helmetId\\\":\\\"255d072a702e0c31d713dd1dfd834b8e\\\"}\",\"file\":\"\",\"url\":\"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\",\"ts\":0,\"stacktrace\":\"\",\"payload\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5ef308187bfd8b41858afd4f7ed88f9a","sha1":"0cbbbe4c53dbb9b4abbf815b2ae2cfd76a0747d3","sha256":"b5e5fc8feba5f2107f70e53516fc7b2ec5ef297d0b1795ff1e99c0c7869ec14c","sha512":"e35c399c46223032e30313abd601685d7fa7a4dca326effc474a1e291f0e32573195863ad6d4c90749a15b3ea1792b44039e75b534c08451cc50c8c46c0b8279","ssdeep":"","tlshash":"9fc02b543c08c1840d0c80e85f30c7048270780040284d4407c832004044cbc5e4b613","first_seen":"2025-12-08T11:02:52.773765Z","last_seen":"2025-12-08T11:02:52.773765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/telegram-17.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/telegram-17.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1092\r\ntraceparent: 00-fd3b503b8b939f02d40327d6974dd888-e73d3f105c3dd94e-01\r\nlast-modified: Wed, 21 Feb 2024 08:03:03 GMT\r\netag: \"444-611dfc19ddede\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:37 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870535\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:12:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33a6b37c35799458f311e579b88a535c","sha1":"e3a109451dd5bee8ddc098e6a6c7b9bf0eb987e5","sha256":"352216d091549ff6c7f14890b503117e39a6eab0875ec11d4e0048760ec89e74","sha512":"4e430d416c90178fb550ddc0ab38bc8a3948975e83f622345f665f9a64e602d5594b1844403f450c5aa03a2cb7cd8a8b35aa664ba3c81ec129fbbe1d8478f1c4","ssdeep":"","tlshash":"951175b9aac4f445e401d3e8d978e5a33c1f35fb760ddba88fd06b24e50105d01e1c84","first_seen":"2024-05-15T05:49:44Z","last_seen":"2026-03-29T15:19:13.355958Z","times_seen":85,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/pgsoft.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/pgsoft.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8175\r\ntraceparent: 00-63030fe40936024189a9949a533d9e2a-c8965a347849727f-01\r\nlast-modified: Mon, 07 Feb 2022 08:53:03 GMT\r\netag: \"1fef-5d769ba7bc5e1\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 22:13:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 564474\r\ncache: HIT\r\nx-cached-since: 2025-12-01T22:13:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dddf128184ff94915ce0f5eaa677f40","sha1":"4350c5408da28db397df35481d8077c21d89138b","sha256":"265a5b03e475f9fa4d6823052721e48393494b1d2f6e1874a00698894d6e65ed","sha512":"400bf499f6e853a5022cef129694c286034728c4f9d4382aded0f1eb10b619ff02f73d89246cef9a5d782aff7a7910bdf8abdf8173cd23a819aa180d2bb6a49c","ssdeep":"192:WnF+DtRPQaNurMnpxvzugABoMyEMK07VV3LxdS:Ht1hAMnz5EMKUVVjS","tlshash":"18f144c6f6d283f06e8c43bce5305cbc607759e9bd60f588ca772e67b8c825668584c2","first_seen":"2024-12-31T04:55:51.581704Z","last_seen":"2026-03-31T00:45:46.162461Z","times_seen":56,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.BrnQZCIe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.BrnQZCIe.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 17415\r\ntraceparent: 00-2fe1fe9ca6b64c84f4d1bc4ee2673c96-99961a678e7f41c5-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-4407\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"493d5f043be02358a6d7a9cca21c4c6a","sha1":"58ef21d1a0c0fbfefcb518ef3104f2a01b52b19a","sha256":"4950025d194fc855b4ea7a2fa3d59198d7963bf3d2d83611bc101ff4c507f1c4","sha512":"0f9e3d1fe47bcc1ea82187e2a06a52a2b37bdfd4497fb2b5269c2383309d238fa47a9e38af8378260935fdf7be7d0c88194ad1cc068766ed56035e5ccb7a3c29","ssdeep":"1536:pXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPP:p2YMGB2C62PmQJDbPP","tlshash":"b87363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2025-12-08T11:02:52.775884Z","last_seen":"2025-12-08T11:02:52.775884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a48612de.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a48612de.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-7c5f65db3ab9a9d0fa8be2294d69e4b6-bbee3d6ed80fb40e-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 257460\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T11:30:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/other.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/other.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1220\r\ntraceparent: 00-b08650e5dc98d2a574639b1d1f39a4bb-f89311e8cb2cb337-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:21 GMT\r\netag: \"4c4-61bf367262f3c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04de3fb1fb28c7e3a6d905cfaec4e513","sha1":"7823b05f9bc9f0a16145f9468fc8e5df9d573ce6","sha256":"3c584108e1d8685d12332171f34879003c01a21d55ae5bf753b8e034bc020e2c","sha512":"f1c62e53cd1d6d4e3a72345e59903656acdee191038db1c1f7bb85d0763d785dc98f414531b61161aa045aa575b6dc52a95117c893a158d43f2ed8c7871b00fc","ssdeep":"","tlshash":"f121e0f196606350a0099b6fba2ab56271eb3cfe3e624dce93e0fe1210050d98c4d986","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.257946Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/d39bd125.D_oiZ6VG.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/d39bd125.D_oiZ6VG.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-3a439e310ec1955fdf2f2243d75f3b0c-6e6b803ffc30ea8b-01\r\nlast-modified: Thu, 13 Nov 2025 09:19:34 GMT\r\netag: W/\"6915a2a6-354f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1699423\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-18T18:58:04+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13647,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13646)","md5":"11277d5a2f9e44f0c65566e41538810d","sha1":"a087c62d80dc87e9025aa37faaeb5d6b2b8434e5","sha256":"f6387d1daf770ea16213c1b17b4b60e1d5e866c6a36f439d9ee0a8c7eac84693","sha512":"86417192c30893b95180415d136975b7c35f273e830e470ac839f66506e75ed5ff37b6a28506ff7925fcbac02e8f0a66b23d9ac19191758f4bad31f44dc1ef05","ssdeep":"384:2/xWwoqy+iuPA5d1uY7IjddHR5g5HYni6aIplwBJWy:zrr","tlshash":"cb528ebf1c61be7792a6312cc0d5b924b3998c0f5e8652c130a4d67d82f4396973ef1a","first_seen":"2025-02-23T03:47:48.723351Z","last_seen":"2026-01-23T03:09:51.759132Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-08T11:01:38.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:38 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=; Max-Age=2147483647; Expires=Sat, 26 Dec 2093 14:15:45 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.CC9_Gdie.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40537,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20715)","md5":"a6cd4126374cecad03cb673e005cea15","sha1":"a84cddcc53e9c0452415f6bc367a1d4793414694","sha256":"dbfb91b5b115d88d7d6982784c12e979104982d7f742cca24d47403b82865b8e","sha512":"13094f7e86cf27f9f2f093dbc0a33153413714e9a472ecc27f88ba9a484819aba7b9725ae12e43ee0eed8b86b0c1b8c172dac26a80408f05b849a3da19003e0b","ssdeep":"384:O2fmj1NN4Rwy1MfOjzB6oQlaKD6UGm6uaQtGokYbMHuAO5sz2J3SBCW:zfmxNN4RwXgzByHD6hm6vokSMQs6JE","tlshash":"4c032bee1f1495f9fa11a3ebe756108c6a09b477dd42cdb4f26c728c77c7a9048a2182","first_seen":"2025-12-08T11:02:52.779713Z","last_seen":"2025-12-08T11:02:52.779713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":45,"dns":11,"connect":13,"send":0,"wait":274,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-08T11:01:45.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD= HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:45 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; Max-Age=2147483647; Expires=Sat, 26 Dec 2093 14:15:52 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.CC9_Gdie.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40541,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20715)","md5":"45472cd33850a56e42942e72a0ce9146","sha1":"6cee15cdbc9a0533c94910015bb06a8a4030cdca","sha256":"23ad85cbbbbdd413d9d504f53473462705b65747bb065f9dd466cf2fe53c2c32","sha512":"f37dddc8822dc0bc2a75d8116ceef7c5565d40854a605a7528eaeabedd9ef28541d6c6f6821fd89005ada016608388ffad39b714b93e1fd98a31509233e19d4e","ssdeep":"384:nfmj1NN4Rwy1MfOjzB6oQlaKD6UGm6uaQtGokYbMHuAO5sz2J3SBCW:nfmxNN4RwXgzByHD6hm6vokSMQs6JE","tlshash":"af032bee1f1495f9fa11a3ebe756108c6a09b477dd42cdb4f26c728c77c7a9048a1182","first_seen":"2025-12-08T11:02:52.780677Z","last_seen":"2025-12-08T11:02:52.780677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot-animated.DZ53syVI.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot-animated.DZ53syVI.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-d0214a949000ae28762edb5163e894ed-dda2c1bbb7f99431-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: W/\"68e7b338-3192\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 4155453\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T08:44:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02c2b186b902e2d40b0dc138f083ca80","sha1":"203e6ffeeba97cfbc2aa11965b073f2a8c29feb6","sha256":"642050e727aee3f059adaad0150fbb7355e30f78e072bc79bfc939d032d42d66","sha512":"1270072f581827f00e2fac5a83d453d37285757b0feb4298fab057bc335231a1ec33e7939bbf120b9da1116e11b7ebbe031cf6a186113c35b90d67cd7bed4ac1","ssdeep":"192:SW5PDinj1C0JTw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0t:STnj1Z6YAXsI14g7V6scBUCVqn","tlshash":"eb4285e027f9a2e4f106e3ec8656e4247e5318eb7991c569f2ae2d58df0144c0e89ce3","first_seen":"2025-10-06T05:00:55.723421Z","last_seen":"2026-03-04T23:34:52.542712Z","times_seen":15,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.DUqHllsC.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38321\r\ntraceparent: 00-5a2364696d7b97657526e84d484a5b53-f7f32ac2a02aa9fb-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-95b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (52537)","md5":"66e7c6c8081291d8dca6f7f6c29f98c6","sha1":"b70aefe75b9a11850ea8cc3a40d33b49f2829d3d","sha256":"9fa46408df2e716c5bd7458a0b1e3f15e8055f13463c5e44ad0c6e0a8db49c32","sha512":"d079e6c8375ed01cf98af2567d30d81c0567551e231b487ba1886ef9f7c3a837a150b16b27483fe13da7030628e68a42d962374427d0987b653c6e0cbef1902a","ssdeep":"3072:kxy1KAsfvMrhItMBhYJCzv+ekhowG8sXB9BZSeW7tO:xLsXMrhItKhYJCzre89BZSeW7tO","tlshash":"05040b166a4838ff4f710d2e5b2a7aa4a1330d98fa21c033d2b69f3e2f5b411f197595","first_seen":"2025-12-08T11:02:52.789988Z","last_seen":"2025-12-08T11:02:52.789988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/table.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/table.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2051\r\ntraceparent: 00-a5c2c09a655f410acd4b9b7fd547bee2-bbb21f6de9fe6eda-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:09 GMT\r\netag: \"803-61bf3666cddb9\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4739eca3bf889f229641c474aca34a5a","sha1":"275e4368643608ce9466984958ef31f8884495a0","sha256":"533cc1795d0f8c05ba575368c4a1d156021e74d1e72c1e48f6a54c1f9c8c7b06","sha512":"7f012c42f67d4577d02227fa0e9ef5d7cd4be62762f17a67edd0589e4959b4d65ee617e75384af07749832ba09c33c27bd402a76adbe8be5c22c2b3778525da2","ssdeep":"","tlshash":"614154f2e3d480ecce07d360d937b8a63a6e5cf9c79b8764a041f680b05969549c8d84","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.242854Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.PZXRoakp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a538a99f.d.m.PZXRoakp.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11545\r\ntraceparent: 00-22bfb62116ed92316db03c412a6a0c0b-98b5a0b096068a32-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-2d19\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"31ac6147e646df21022341aa61f2a539","sha1":"259bd24cf58654d1491f15ad18f4dfdca801d6a8","sha256":"68c5fa433e317768c07a276ca3729d4c3fb0ceb6d7b5cf0fabb8a99545709615","sha512":"9e8d6f171a85121a5142074a9cec9d705216d96a6dff6a8849535b54b7e261098dae05c2a0b5d8fb242459c5330182c6782c1d7a967c9b30e00e883062b05ae5","ssdeep":"768:H61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/R:Azmp7QA/BPWUR","tlshash":"d403fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2025-12-08T11:02:52.791651Z","last_seen":"2025-12-08T11:02:52.791651Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DXB529iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fd2fd3f8.d.m.DXB529iX.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1810\r\ntraceparent: 00-c0cdb62d771ad0269c9b8da14174872e-159a76b08da66772-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-712\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5462,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5411)","md5":"e699317ce7b4a579eddc1c9a9b1e4d28","sha1":"e8215e45bd5259e132553850dc1b9a68d71e986d","sha256":"53ab24c88c52e4343b206def7db98d7ce4fb3f4859ea58f2365bffbb200ac4e1","sha512":"e38c28da9cfa174b2239c359982b4016a3d78761330b02defffe86bacbfdf2efd3195d2aea992b5689823a7bb872552955cdfd5c43d711d601474e697c350cf2","ssdeep":"96:ctPSp8IIOnUV9SU0DDrJJQh9eC97Ae0E0hbDO92pli56ZCp0NY72T4n58daJ0w4i:cNSp8y4SFHrJJQh9eC97Ar3O92pli56c","tlshash":"e1b1c82ecf0942f882c758f6e0e64e4a505dea87f13c0604b9a5dc6f9514fe5931bb8d","first_seen":"2025-12-08T11:02:52.792706Z","last_seen":"2025-12-08T11:02:52.792706Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/top-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/top-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\ntraceparent: 00-b7e88b3592ee3d26bcb7f1f2c9ad3fdc-a922106233c83dab-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:31 GMT\r\netag: \"2b9-61bf36429d66e\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 28 Dec 2025 17:04:21 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 842249\r\ncache: HIT\r\nx-cached-since: 2025-11-28T17:04:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0848796581e9266f80f9c559e3de8a8","sha1":"cf5f98440ce0f2c0edfcd5985dcaaa90da3d419f","sha256":"7e3f1836401d8d45ae3f406467c7bc7b78193dc00028d63d7659a7809bc4c083","sha512":"9f131505c274a867ed7ec98f409ebebd5a59edc16f5c7428b0e237b72d54ff24eac3e164c60047c6b7610c9fb054c60eb74b0064eb08c86ffb47d5b8d307a422","ssdeep":"","tlshash":"730170e797a451a1d7098ba12794b66e2edf3df136d14b868044b9b8d6042d5cd8c8cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.172779Z","times_seen":62,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026_p=1765191714849\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=687359927.1765191716\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026dl=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1765191715\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026dt=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.127.0\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon59.com%2F\u0026ep.main_domain=leon59.com\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1765191708326\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=ru_RU\u0026tfd=10624","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026_p=1765191714849\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=687359927.1765191716\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026dl=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1765191715\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026dt=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.127.0\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon59.com%2F\u0026ep.main_domain=leon59.com\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1765191708326\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=ru_RU\u0026tfd=10624 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon59.com\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:169:0\r\nreport-to: {\"group\":\"ascnsrsggc:169:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:169:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":60,"dns":0,"connect":21,"send":0,"wait":34,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/88582821.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2322\r\ntraceparent: 00-1bb73fd3f586c011c2380398ef737ee2-d9504b4f21e7f593-01\r\nlast-modified: Mon, 27 Oct 2025 12:44:26 GMT\r\netag: \"68ff692a-912\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 3467678\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-29T07:47:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.DXYjurDe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7fbe0154.d.m.DXYjurDe.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-305203f66504b6f7f7160476fa790433-b7f80189fe2683ef-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-61cbd\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":400573,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36887)","md5":"acf6699c9a7b8a34a8f52fedf1fc1202","sha1":"d03d5a3f7a0f913c246f5724fff3f59ee2c07574","sha256":"11e8946af03a205179dc1887a14d863bb3a0a03656510cf2ea22b69e8ea455f0","sha512":"7516b49d734751851d42df85d7963314e27b7427d3991a8391102651c20eaf74d9f42fe3051016c81487c70ab3e27755ed65dea0010264c03d486b8d610fabeb","ssdeep":"12288:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5f9A1q:KGfKGJvEvGdrSaV67dmcgUxHtI+AUA4j","tlshash":"f6844c54b2827138d7b618fd912b098177680f417019d8e4f07dae7e78a6c1893bbe7e","first_seen":"2025-12-08T11:02:52.771679Z","last_seen":"2025-12-08T11:02:52.771679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-ru-json.4bf48036.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~locale-ru-json.4bf48036.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 24624\r\nlast-modified: Fri, 05 Dec 2025 17:44:30 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: AFCtcAYUcsYwmL42EhZl4xBWHRlE9xCw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 08 Dec 2025 09:21:38 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"62c8820f7970cadebff7faa8075072d8\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fb60bb37778839b51bfea3a34907efd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: sXu9hgYSFDFvyrEhll3VeH49pgUnOWqAOU5KL7G1hKVLy3CtYGkbdw==\r\nage: 6018\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":110401,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46276), with no line terminators","md5":"6fd48423d414a6bc994d02f747543632","sha1":"44be0f9e75a3e8e16a01427a78734aa712be17f7","sha256":"127ae62e55fbea663da4a258a545d6b2144b7b5a58a8a52c168732bcabddee43","sha512":"1ad48947aa63e0917adb377a506b0837bebe77ac684161f7ddea35b670582ebfec55d0c50a0336421979a12fe56c47d574cb09785939119149c1e583e51ef08d","ssdeep":"3072:VeBr/fmo7P+2kHC4bJt6SeiUQKXlWyTbAWlPkcPzPGWIdVQY/SMDkgvW5P4W97qW:Ve5/fmo7Pgi4bJt6SeiUQKXlWAbZPkcn","tlshash":"f2b3ce64595968ee0206b06bcc087e0a7ffa45ff3fd6935629b45c3e35e6160c23e70a","first_seen":"2025-12-05T19:21:20.950645Z","last_seen":"2025-12-09T08:35:06.835484Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:57.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1018\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1018,"data":"app_id=cnjqphyx\u0026v=3\u0026g=1c8b10c3ba5bdb30c0d5a8900598f28ff649f36b\u0026s=85a78ebb-1cb4-45f9-8a0d-8343dc1b4c4c\u0026r=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=9399305eb1bf1d70\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%2243df5c37-72c5-4092-9e26-dde4247476d5%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***\u0026device_identifier=2133e351-8008-4d94-9ced-e05cd5b6e9d8"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 4e7dbcd0477e46c7ffe1f0e569035ce13440b396\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0001hpm7p4kumk4pthp0\r\netag: W/\"d78626f6886b96351bd60681f8b3fe09\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon59.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.261511\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0a604e7e52993826c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6027,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"02dd33417bb9bc3d6b0bfea9271952ae","sha1":"252ab3ac528c556de7c6993aa4b7ca353bc80411","sha256":"d78626f6886b96351bd60681f8b3fe09c96e8d739cb69375e44e73da0f2a532e","sha512":"744e7bbde538757b6ef42bc96eef394679c693292f74174dc0c419a788e4bbb43b51ccc0ba8fe03c1d533153038e47b1607ef66eb2480054d65d01500e2a806f","ssdeep":"96:4rHa7pOaU+zVu2iRHAyWGjzKWMlzJjGMli9B1NAOU5wHwhPD1kt7etnX:4rHa7p5U+pAguB1+1UetX","tlshash":"81c1684c89481c7ea38bc2dad355bf06077d42bbb2946d84f9bcca2d21db395117b207","first_seen":"2025-12-08T11:02:52.796449Z","last_seen":"2025-12-08T11:02:52.796449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7fd5867.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 748\r\ntraceparent: 00-63d74dace9932c8bea0f1c60e3463b86-8642d5de2a2cdfff-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-2ec\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250570\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:30+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a17a5642.d.m.d2egGL5n.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76432\r\ntraceparent: 00-214c65f2fcfd9150cfa3672dca81cb70-d2c6b7d49a4eba30-01\r\nlast-modified: Thu, 27 Nov 2025 12:02:05 GMT\r\netag: \"69283dbd-12a90\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 886518\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-28T04:46:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19927)","md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.CcFJMwXR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/208a717f.d.m.CcFJMwXR.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1442\r\ntraceparent: 00-347a0b572e70962dd5cdd41d5a47ceb5-e61f91c2b8d4ef78-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-5a2\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3397,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3346)","md5":"8c712ca0adee1ccf00ed08198a8ca900","sha1":"6d1f2358df476146582ede0f7b5dbc91a5f2b2b9","sha256":"013de0f0bda2d68fb28bfafe093793e3be92974f4f3747e7c4b82b16ca0ee742","sha512":"c5e843c069f083f6e6b3fc186cf5a1788cf0653280853921ddb01980b5c34b930d82c6a1575033ead8b6a4913191b70c5155b3d835c509e29781eaef704642d6","ssdeep":"","tlshash":"a461939b6206e770c02620a4d02f2810d95c06cdb3b47594acbd54aed9a243ae07bf5f","first_seen":"2025-12-08T11:02:52.799103Z","last_seen":"2025-12-08T11:02:52.799103Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.5ri6CLcs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a48612de.d.m.5ri6CLcs.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4651\r\ntraceparent: 00-cc378a152021662e6a2fc2c5b79bdce6-67c8f3f5f67bfa6f-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-122b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13931)","md5":"e14110362dd64004cbf9c5b0819ce51e","sha1":"ac0b3d5527cd9947635a2927903453b595312ca2","sha256":"7b1eed55ca6dd2863d24ad01ce7518323ea849ace6c9993bd9202fc50d9fd38e","sha512":"f8e73e1ab5d6cea498bb52eb0721faf6ef7d4a5c77571e59c1936930d7a85b67dd8d61c0a528f0b6e89ab619ec2ec21e398748c7ba5b84b5c99edf2e8d21c797","ssdeep":"192:ZvzfBTNwcZi1xZgJYUq8BoYSjo+tYP1F/yQ6OdZYWEdK3n1HemtO6Anl/qKxoLa1:JzfBTN4xZgJTe++tk6lWEd4njFIk0","tlshash":"0172841ae2858c312257c6fa41742940f24dce851269c6a5b5fcd9fd9eb1c2fe03e7ac","first_seen":"2025-12-08T11:02:52.799982Z","last_seen":"2025-12-08T11:02:52.799982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-VKsPWPUINntt8-AP1PVXCfb-0AjXlNJzhKSxiBZG5LbYeFgxJDXOUx4AXNWqP8xqem_pb1YoPiuFXBlVdM5VkHL98p9j2J4LrU5k?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.14.0\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.6","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-VKsPWPUINntt8-AP1PVXCfb-0AjXlNJzhKSxiBZG5LbYeFgxJDXOUx4AXNWqP8xqem_pb1YoPiuFXBlVdM5VkHL98p9j2J4LrU5k?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.14.0\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon59.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jzxtzIyJ3GCBzF/K/I+kAw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 08 Dec 2025 11:01:57 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ha/cqBOEYqq7XEsAFFOXSI6/+ns=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":1,"connect":92,"send":0,"wait":92,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1702\r\ntraceparent: 00-f4b69cd7d63ba650baa36bfbb83c6a92-d94520fc3da55615-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-6a6\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764335\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/ce584242.BQGIdFSo.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/ce584242.BQGIdFSo.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-2bf72a6bde9426bffe2770add5e98093-c509f9445baaa2cf-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-b6e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 373693\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-04T03:13:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2925)","md5":"04a6e5a2ff1a33ec1917960d1b3360b4","sha1":"a83affb77304a190bb6755e0048c453852f944c4","sha256":"9f1fd6fe6354bdc41ff1d4c2876905831f761f77b3b2fbfe749c9b4d1a2104d6","sha512":"5693129d96b4421d88e881c6500297d7eb0d969efc3867ef3077c669769701bbe19648252f1d076c0e2eb28caa83309d195dc73d1524885292f8655451c694b1","ssdeep":"","tlshash":"8f5112536930733dbdbfa53dc9d4778a6119addbca134288e8ebd02c80ca68259707cc","first_seen":"2025-09-29T03:15:31.287684Z","last_seen":"2026-01-23T03:09:51.677066Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/jackpots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/jackpots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1666\r\ntraceparent: 00-6204abb5a91ac7a728abf276a37791ee-6160c69d684c564b-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:33 GMT\r\netag: \"682-61bf367d55ec8\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 22:13:44 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 564486\r\ncache: HIT\r\nx-cached-since: 2025-12-01T22:13:44+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d078c57099cadb8866bdf0cf7e6fb1","sha1":"9db3f9769966f73119b118489aef70be6c435b10","sha256":"fd1792c86362ee56c8ca9479b4bf023862faec59991939d1a4e8d568877df028","sha512":"c4e39f897618c3635f2710359262a143db4edbba3b2ad27598e562c88648bcb463cd30c372516659a876d17827cfc5317baaa23aa23144c6cd992d3b94a8e854","ssdeep":"","tlshash":"c83106fc42e8b2c496465b20fa27f8d262962dfceff39ec951e25b314416191490e9cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.195707Z","times_seen":62,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:54.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 5413\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; shield_FPC=SC28rtM0fJzEDbSrQ9sBk2pzKhdfwIPO0x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5413,"data":"[{\"id\":\"2c44948c-9162-43a6-93b2-6182c02a8be2\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.127.0\",\"level\":\"ERROR\",\"line\":0,\"column\":0,\"error\":\"YandexMetrika registration error: config={\\\"counterId\\\":71598811,\\\"isDevIP\\\":false,\\\"accurateTrackBounce\\\":false,\\\"clickmap\\\":false,\\\"trackLinks\\\":false,\\\"webvisor\\\":true}\",\"file\":\"\",\"url\":\"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\",\"ts\":0,\"stacktrace\":\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js:6:29536\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:4:4291\\nlR@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:5:2092\\nonerror@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30843\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:1:44208\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:1:43471\\nJo/\u003c@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30983\\nJo@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30574\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:32315\\nregister@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:32894\\nl_@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33854\\nn_@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33518\\nDa/\u003c@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33790\\nemitFrom@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:1:11806\\nemit@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:1:11675\\nemit@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:91\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3800\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:2859\\nRo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3271\\nsetTimeout handler*Ro@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3206\\nsl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:4018\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:18235\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:18305\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:52331\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53325\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53538\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53647\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:52062\\nsl@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3976\\nfp@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:10:108692\\nasync*C/\u003c@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1363\\npromise callback*C@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1342\\nasync*@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1395\\n\",\"payload\":\"{\\\"name\\\":\\\"lR\\\",\\\"message\\\":\\\"Script failed to load: filename=https://mc.yandex.ru/metrika/tag.js; message=Possible cause: blocked by an ad blocker\\\",\\\"code\\\":\\\"SCRIPT_ERROR\\\",\\\"metaData\\\":{},\\\"stack\\\":\\\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js:6:29536\\\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:4:4291\\\\nlR@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:5:2092\\\\nonerror@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30843\\\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:1:44208\\\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js:1:43471\\\\nJo/\u003c@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30983\\\\nJo@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:30574\\\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:32315\\\\nregister@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:32894\\\\nl_@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33854\\\\nn_@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33518\\\\nDa/\u003c@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:33790\\\\nemitFrom@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:1:11806\\\\nemit@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:1:11675\\\\nemit@https://leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js:2:91\\\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3800\\\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:2859\\\\nRo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3271\\\\nsetTimeout handler*Ro@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3206\\\\nsl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:4018\\\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:18235\\\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:18305\\\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:52331\\\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53325\\\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53538\\\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:53647\\\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js:1:52062\\\\nsl@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:6:3976\\\\nfp@https://leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js:10:108692\\\\nasync*C/\u003c@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1363\\\\npromise callback*C@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1342\\\\nasync*@https://leoncasino.gcdn.co/js/app.CC9_Gdie.js:2:1395\\\\n\\\",\\\"silent\\\":false,\\\"interactive\\\":false,\\\"cause\\\":\\\"null\\\"}\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"27d3daa486840702849206ba849ad89b","sha1":"df3088caafd07b06e14d7d8c199e20503f4d34f4","sha256":"fc87be4b198db3ca6abf58208576797d8fdae3ef2338af420cb4892af9146817","sha512":"a69aa5140fd67026bbbc1af99d5d72dee6f3f98e7251bd3d80a527efb4e836a1c1b2520f2c26e6c5102cddbcddc75a11935cdff86ab673f6010a39beface0463","ssdeep":"","tlshash":"10c022cc3c8202c00c0ec288e2a2ca028bb23080c000882c82c83c2200c0ebcaa8faa2","first_seen":"2025-12-08T11:02:52.802769Z","last_seen":"2025-12-08T11:02:52.802769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/f06cd424.Dd74Yc_c.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/f06cd424.Dd74Yc_c.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ntraceparent: 00-41a02455ff2f06367e7272aaa88da529-f85487081a8c8d81-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-1ce\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 133647\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-06T21:54:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1431)","md5":"6cbf540dd2a6c89fc9e82a987e8c628f","sha1":"4370f7b310a28065a6f37b039edbb6ab60f7c577","sha256":"f3cd42fd3531448a70732cfd5b1b308395116a6b0e199d0bfd4e4b44aff806c7","sha512":"0c2f430ab4002f2839fe83266b95e826c9f27bcea6a1742f58bb3001740b32e6b523bdd43c18d3a3484a5b8e2f7af52ad5a44e9bbf39d2b4daffa8f8194ffc35","ssdeep":"","tlshash":"05219ef3054de1394807b68b6470ca4ec52ad165ba6b16b812ff712f41cfef05e116ac","first_seen":"2025-09-19T02:19:58.389648Z","last_seen":"2026-01-05T18:44:37.74079Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"65.9.46.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 11:01:42 GMT\r\ncontent-encoding: gzip\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"246f-19aa613b9f0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 249277a1d1cacc74019eda739a89f4ae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: NGtxdSlJGU1Mtk_VVAv2PRWpB3ef-vJwkhDQaW_0u6DihY-zE9zOvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9284)","md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":56,"dns":27,"connect":12,"send":0,"wait":22,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.8287c992.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.8287c992.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 213593\r\ndate: Mon, 08 Dec 2025 09:29:32 GMT\r\nlast-modified: Fri, 05 Dec 2025 17:44:28 GMT\r\netag: \"1ac26f33526a96054bb061cb72d9aba9\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: x5I3XiIqww99cjKwDeWfjDDvXVlIHLQm\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fb60bb37778839b51bfea3a34907efd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: fneQmkUfSwtN__2b_f2wDqtjOG5y1LOX8JfOl2WPg4jFVsygvPPUqw==\r\nage: 5544\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":687197,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"1c76c558c1c9812afdfe44df66ae6561","sha1":"20cd11b21f09dc237e70ea70190fc4ca443fb72b","sha256":"c1f4c0b604b7fbf3fa27f28fd81fbbefb3ae58c2b69e9c58bf80d5688158f55c","sha512":"78bfab0c85af69764e38b7b3262960e68043e6af3fa3cbe4f147e328887eb6235602379c287527d76da09f20a1154911d399f5496da24d94d57c432346d823fd","ssdeep":"6144:ext8LfzpXe7RvofOq1BrFZGlk5j+kfFd+oNEf9upydrhOoDiOX:Ct8LfzpORwfH2k5jfFUkEFupsp","tlshash":"3fe43bdc79d1f0a207f352f6807f140bf27a1a69680c8490f765d8c968b994e9237f6e","first_seen":"2025-12-05T17:13:33.975291Z","last_seen":"2025-12-08T11:27:40.19839Z","times_seen":197,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":39,"dns":12,"connect":8,"send":0,"wait":32,"receive":8,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472156\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/DeadOrAliveIIbonusBuy2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/DeadOrAliveIIbonusBuy2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66164\r\ntraceparent: 00-476d22b9d9758bc72db4fadf22c2cd3e-a9d425c5eec50afb-01\r\nlast-modified: Wed, 21 Oct 2020 13:23:36 GMT\r\netag: \"10274-5b22e41440b57\"\r\naccess-control-allow-origin: *\r\nexpires: Mon, 05 Jan 2026 17:09:29 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 150741\r\ncache: HIT\r\nx-cached-since: 2025-12-06T17:09:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"444fbf32d121c36d9dee1456ae9a6cae","sha1":"82e77872d201c12af0dc97341bb7914427bdf1ed","sha256":"f53ede064c57acfb94b322422c3e094c2fcd8249887e335039cc0a707ac43354","sha512":"a81503a2128e83e41f435abcfef211405979a79c27637b5a16f5ea4c0e0f0e9d860ee6abedf1c6a29eb2bcdbf672dc84dd9d770c7c559ce95d0fcfcbcd4f2de4","ssdeep":"1536:Y3ZuQmqCnCwiUXl1dOaqyIHNEtEv1ZqRMXJJB0T3+p+:YAQdCnCw5l1erGt61Zqi5JBK+4","tlshash":"50530205b9521b73963ab841f22584ada9a70407c378ade45bfbbf43de2c16590f0ee0","first_seen":"2025-02-07T04:57:00.933035Z","last_seen":"2026-01-05T18:44:37.714174Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/208a717f.IEG3RMnx.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/208a717f.IEG3RMnx.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 213\r\ntraceparent: 00-b3db595c1eabae6159d3f4fa721e258c-e55b4b31b412a550-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-d5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764333\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (518)","md5":"2503e514bb973cf99d45b28178d290fc","sha1":"c096c1cd6280ff0fb242188e3e61d55aa4f56e6a","sha256":"03a5fda0dedb4bc1630184c5f31da408e9655a2a8a2a33ef27be0e96d88970a7","sha512":"8e86ac1e134673a406d1b0c29a3f57aa545d372e948805fc552eec0b563869941ce1f5c1ab2d32a6eddc8e79edbd8c2f7d5d97c6f5a6e595e047fdacd41ed438","ssdeep":"","tlshash":"88f0506b0d41d32e64b76419d5eb7e4c922d0cc726831b6c5c7870ad919569c50316c9","first_seen":"2025-07-09T00:32:09.424202Z","last_seen":"2026-01-23T03:09:51.680767Z","times_seen":40,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/drops_wins.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/drops_wins.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12382\r\ntraceparent: 00-4baf7e270f8a3e5260901677ea219d34-8155a2422a5bb93c-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:50 GMT\r\netag: \"305e-61bf36c739963\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 27 Dec 2025 05:31:29 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 970221\r\ncache: HIT\r\nx-cached-since: 2025-11-27T05:31:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c33bfc0a66981351db0da8fb6c69da55","sha1":"55b49d3376218cce5808e9f5a434b6f6d99d62a8","sha256":"62b722eca58786138391eee4ef1d2d49b184341f1a4ba35c5513b40af52b5c18","sha512":"6659c986c63d1114a99119c8cb1414dafeea1db8e51327649da42936514ea4a0f7176fe1e0abbee2cf0705aca3c5fccb7f61aa94324920a61bc50fc58efa3e0a","ssdeep":"384:MslV4bttY5l8mzagkwtzzVS4klR+VHWZWFvsC:vWt2l/Kyz+IF","tlshash":"824285f7a2e8b1e4e047e7b0d83295b1f65f38ff3faa97854294dad46714198848cc50","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.205158Z","times_seen":63,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.CEJblBb-.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/720cf670.d.m.CEJblBb-.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8390\r\ntraceparent: 00-306eace3f8dd87b80be15d11f80983d2-de922606e1ecd5b7-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-20c6\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26677)","md5":"5b072041727bba6fdfe48e93e4d7ecb3","sha1":"3f33b4ce4cb0ceab31ce29c0c46dbd1a0ef10174","sha256":"02a6f1961425174447de3809e5765ae6db1423c3104ad722f872f1d181716a2b","sha512":"3c4afddaf26112f36bfb566e1764a0c0591c5aaa1c4bb715edf66ab03d5c20991c82379863239f353ec6316813af7c8e87d29beb7353f078050997d4ca3b661e","ssdeep":"768:goui6kdsTKD6tV3qOMEkPDaRc8PEG2ZUJ/8sWjUhyF14Rvl:gxmdsme7NNkn8VS4h5Vl","tlshash":"42c208dc7a1128f3d6e7448dac120501a07a5a4165b40ac2e7bdcbb639dfc1067a3be7","first_seen":"2025-12-08T11:02:52.809354Z","last_seen":"2025-12-08T11:02:52.809354Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-jackpot-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-jackpot-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7254\r\ntraceparent: 00-0ed8241e6f5d98e6adf0d78d2fed9731-a8b6739899286c69-01\r\nlast-modified: Fri, 03 May 2024 13:47:51 GMT\r\netag: \"1c56-6178cf7491cfe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4570ae06b8ad61194283284076493ee1","sha1":"49664b96846ccfc818cf2dbb254d1e88a9f80080","sha256":"fe94ea56b20d7c1b1f1822d1f8c4033e576bc98c886881a51a52e6b5601b2cc1","sha512":"f639b70d1d94856da07411783f7e6bcb653d0ba03111bd072a6235e923d4622ae84e1b496666bf0a503b24f05c474d7e8651aa1447986760f4d8e4a68995ec0d","ssdeep":"96:wPxQNjGPj5YZFIua0lo616bJ5XWq65F7UIcGcYafN+FyXl8fUFi+n91Mj/HbuhC:wPvj5YZh5NyNWq65F7UhfBiiM/HbuhC","tlshash":"f2e173eb66e475e48a40eb90d9272c65f19f247e7f338390c340d7a1a6a44f84f4e8d8","first_seen":"2024-12-31T04:55:51.407987Z","last_seen":"2026-03-14T07:22:16.736618Z","times_seen":44,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 480\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"[{\"id\":\"835e1c81-16ee-49aa-a5cf-b98c2871021f\",\"qKey\":\"c8f2797d-287\",\"operationName\":\"getEgsGroups\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"34a20ce9-0d70-4762-bcf1-d4e880455da9\",\"qKey\":\"f48f5ccb-276\",\"operationName\":\"getEgsCategories\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"454a326e-ece4-485d-9575-7c8e014627e5\",\"qKey\":\"ab83c8e6-3794\",\"operationName\":\"getLobby\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"sportlineFlags\":\"reg,urlv2,mm2,rrc\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":950558,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65212), with no line terminators","md5":"6030085982c799481e7c570fbc86cb8c","sha1":"d8ab5a6cb09bb3f2aadeaed33f20e3d6c79aecfa","sha256":"17a35223cc1e540bd442512612a3d94866b8190ffa40b9d7ce788d1ff9896870","sha512":"900f36e8644352a5d8f100bb40808dd6c1fc486a02aa92397ec910990e183547167c89c9ec5bba540a94d6197229961b588db88d3477f461c4c7755f393e0e56","ssdeep":"6144:wHKjg1Y87GPcREFe5ADcJvrWfshUI/i7YtQhadUXwNMdUdWb2mNktmrG74/21W74:jTkT1Le9YdyMUT+Tp","tlshash":"9415dd7b6688782fc38953943caf34c8a21e34177a40e756b21e6d654bb4dfa30b719c","first_seen":"2025-12-08T11:02:52.810598Z","last_seen":"2025-12-08T11:02:52.810598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 18:17:34 GMT\r\nexpires: Sat, 05 Dec 2026 18:17:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 233057\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-04T14:56:09.834603Z","times_seen":22481,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:54:17 GMT\r\nexpires: Wed, 02 Dec 2026 23:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472054\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-04-04T14:46:23.729727Z","times_seen":23065,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/01f20af8.d.m.CS2hlQxg.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38626\r\ntraceparent: 00-6c17e99b8f0810b12402e3de87074e45-209065f10b58ed8e-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-96e2\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"16b5b7be76bc6dec6f96bcd121af7317","sha1":"0ad27237adb212ef7886f8eaaa095f51597e795d","sha256":"8dce00856ed8e17b4398dfd3de9d7b52b5de1d2265dd6829640fbc3db65634d7","sha512":"0e1db92fe8cc9c36d695d19222dfda7f8bdba7d58130fc56741b64c2483762efed0e569cde608ce9dc54817ed87b9360f60243c367abdd2d087fa6c790691f0d","ssdeep":"3072:2ZThR9YYyG6r4wF/dBe1wDiGIeoQ3tzsIbVSVub:2ZThR9YYzwFd0wDiGnoqb","tlshash":"81d3e6c872e3f06283e22470002f440af27e6d69949cd4a4f6a5d4f53df995a8637f6e","first_seen":"2025-12-08T11:02:52.812621Z","last_seen":"2025-12-08T11:02:52.812621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5c31","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5c31 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\nexpires: Mon, 08 Dec 2025 11:01:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134728\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396967,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"5c0bcc6551ba47873d7a329f73e3908b","sha1":"b18df70caf57943bf09c4ddddd0b3c07ef636a27","sha256":"35105ca7e4c6840eef28c49504fe65457184d7ea1e774acf1088781d1dd35583","sha512":"3745f22139e83fb0434568579d5945ba3bd0309969b85026ea62b86db8172e0707dfdfc83059325398d1619d82a3bc8cd9e5e4273c9bcd4d104ce3665a94b2e5","ssdeep":"6144:zy7WItw+WSayqmVDD5U6k/bbqt3L3cF/evxgh12ctW:MPtmSwmVDR3coxf","tlshash":"fb8419ce73d674265396f478502f018ba57b28a2f44cc896f189cde52e70a9a4277f3c","first_seen":"2025-12-08T11:02:52.813438Z","last_seen":"2025-12-08T11:02:52.813438Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.Jkg4s0ck.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cc513c94.d.m.Jkg4s0ck.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-7d62840876e18bd074f1260add43774f-acb6d3242f0bc3ee-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-5c3c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23612,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23561)","md5":"8c57f958c52aa2aff636c2e33d4c66c8","sha1":"2af49bca6680859356311a61fc139339738a30c9","sha256":"d9b9a07af711aec0788c1bf0cfe2e7dc2b3dd6c2770424fcb2f6fbe7bed8f3a7","sha512":"7bc5fa2c4640b8258ccdc181a37d4cc89d655ee2ff123d8968be41bb6297d261f121ebd5d95381c86c91ba076476fd8c7f0de83dcddc0c410044954ff3d363e6","ssdeep":"384:PrU19C5tNFoHRRYptNLzODCM2aw4hDtGP4ljNMFBu:PrU19CPNSHROqCM2HSGP4lRIBu","tlshash":"09b2870b32bd9ff911a655a9c4813020892c8ec692715dc1d9ffcf65264ce62d1b6bcf","first_seen":"2025-12-08T11:02:52.814325Z","last_seen":"2025-12-08T11:02:52.814325Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/logo.CTzo9Wgk.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/logo.CTzo9Wgk.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-fa795dbb8dd5303eaebcfa1a494e49ea-faf02fa9f1c86b2d-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-3dd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 4149982\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c084e668671b35036439f1639690ef75","sha1":"9988516ab917ea62df37ef9136a9ee89da7e049c","sha256":"6516e9411efd44270ddd1ed1af1523a9c63a61a1bf29b697e1aac53302963b36","sha512":"edec61a2a75471788a707cabe122822827b51e7ae00390f54c00b36dc201a0885b035718ea7f4ec9b2e6344dc485b7d2182c142019daa3fd17f1cae14864a80f","ssdeep":"","tlshash":"0c1121eb861062bcab55afa5ea307416b10f547e3f4a86acc26c830014939d4e40cc54","first_seen":"2025-02-12T21:05:05.539064Z","last_seen":"2026-03-29T15:19:13.409426Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.K__QARGc.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.K__QARGc.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2460\r\ntraceparent: 00-67901dcc1bc383eaddff5ba9fe073e16-d54f73a31cad6ced-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-99c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5876)","md5":"45a9f1adc4a1d87995fedde58f6af145","sha1":"9706d271821f3547344e39b37839064f90dbae44","sha256":"905b3c53f8831a7b96cf41c5f1f05b3cdd43a36d3e1677d705707503b44803dd","sha512":"f72fd978ef1e031953bd57e764ec7631ea8caebd261deb72b49a233cd896af08e714b69699aa5328faa51084ba0969bbd6e039489194cf7a02b67b7d3a19c8ba","ssdeep":"96:eW/NAavcByHGC5mTNOURJSwmSiQ5ZpJLZej/g4sc9GDhJKTAoExYnkIOVWbMvqdG:p5H8RZ/mozqVxW0tjHOwsLKWa9aL","tlshash":"3ac1ca9d7fbea57116da05a120aeb047d37950d8f0198051e06c9ab83913ece89f3f4e","first_seen":"2025-12-08T11:02:52.815686Z","last_seen":"2025-12-08T11:02:52.815686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/wa/collect","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nContent-Type: application/json\r\nContent-Length: 35\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"metricType\":\"TTFB\",\"value\":\"275\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.BneLucUJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8a28bc4d.d.m.BneLucUJ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 142360\r\ntraceparent: 00-2e9486d4ab3167fe7dd6568c2221047b-8c0d0dc373f7a7b9-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-22c18\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":617369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22587)","md5":"0d27d34788232d8cf7b06755474a1b86","sha1":"060f91c781d4e347b60138f71d6162ed2a88c99f","sha256":"9e6e76be3b262ae3f5c9dae49e44ee98e1accf9e93b3f6d618149a638c9a5632","sha512":"78198bb2e2a2d1f70bee581eedf106d2d5eebda0e3f400ebf5638df67cc0f225c8c40229ed1c4dd8920f1f3563560c9e7b5d504c3936e8ae87d0d3785ce94ef4","ssdeep":"6144:CLZHeVelwC1a9G/74YL7pe8EmzZopGHjWJBphB2hbhtyIUZeuCOAMc:iZHJwCY8/logjWx6Oe","tlshash":"6bd44b597151783647b640e9906f0a06b33a2a2e5448c89cb26ce9ef39fdc4521bff7c","first_seen":"2025-12-08T11:02:52.816558Z","last_seen":"2025-12-08T11:02:52.816558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/pixel?id=154038\u0026t=js\u0026sink_id=662d83b7-707e-48e3-a98a-d931b6c89e8d\u0026\u0026timestamp=2025-12-08T11:01:55.987Z\u0026fire_id=1765191715987-cf298a2c-aa72-44d3-bbf1-c14d576a2187","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /pixel?id=154038\u0026t=js\u0026sink_id=662d83b7-707e-48e3-a98a-d931b6c89e8d\u0026\u0026timestamp=2025-12-08T11:01:55.987Z\u0026fire_id=1765191715987-cf298a2c-aa72-44d3-bbf1-c14d576a2187 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\nlocation: https://pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=662d83b7-707e-48e3-a98a-d931b6c89e8d\u0026\u0026timestamp=2025-12-08T11:01:55.987Z\u0026fire_id=1765191715987-cf298a2c-aa72-44d3-bbf1-c14d576a2187\r\nset-cookie: tuuid=125bb1ff-317b-4805-af3a-e33b133d5625; path=/; expires=Tue, 08-Dec-2026 11:01:56 GMT\nc=1765191716; path=/; expires=Tue, 08-Dec-2026 11:01:56 GMT\ntuuid_lu=1765191716; path=/; expires=Tue, 08-Dec-2026 11:01:56 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":464,"dns":372,"connect":26,"send":0,"wait":28,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a48612de.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a48612de.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-ae5cab5a4125b6531a3b79234d5e9a3b-1e3374947c009890-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 257466\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T11:30:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/i18n/ru-ru/1765179993231.cd801.js","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /api-2/i18n/ru-ru/1765179993231.cd801.js HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncache-control: max-age=315360000, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227376,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (48764), with no line terminators","md5":"7753215dd252c22bbb409fa174f02815","sha1":"d812e6f1a035e3384e7c9e9b65999a0643e9a09a","sha256":"789fc89d806861fe4a3319a56b18fe1b3826563b3ae00cc3b6a59bd2097c2483","sha512":"3a3f0d1873c42d30fa1ced87147fb4789e83a5b0131a3ab436abab5211993296a73e5b0e14b015f7cfc78a7ce662e0498098217000698d65bae9ac37e03c4cef","ssdeep":"6144:Vu9Lnm/Bg8C0eCK6W2lC5QwmMUgty1xOE/0rAtXj8FjM54jxm+C:VCLnm/Bg8C0HK6W2lC+wmMU2yLOE/WMr","tlshash":"9854fb26d26aa2ca617e6827f4142b812c71c6fee7cc465f016c573d78df3e862391e4","first_seen":"2025-12-08T11:02:52.817367Z","last_seen":"2025-12-08T11:02:52.817367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/moonSw.DTmx5t_S.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/moonSw.DTmx5t_S.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.EqKsf2cH.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 209\r\ntraceparent: 00-ad5c0258e02ded253bacb66f49a8f4bb-34e81be7bc7ac31f-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:03 GMT\r\netag: \"68e7b33b-d1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 4148868\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f673be269667167e50ad29b3c8d4ca22","sha1":"1884d32e417962d76ad00b4b342243ee5c5ee813","sha256":"1248692f89afc35d90d402e22d5db4ddccd51391372bb1db5ecc317385255fe9","sha512":"0d12c27d1bcd3109bccb82f486e6b817aa7f9c14290c8979d68d4ddb5b8443f7c73a83d478cceffbd14e6aa8c83437863b4befabcbaf2a7a492c946e7fb4acca","ssdeep":"","tlshash":"00e07df24689880c342bcd72575146a523cf00fc346808e6d5ceca7af0c7a94e61bd44","first_seen":"2025-02-07T04:57:00.93733Z","last_seen":"2026-03-31T00:45:46.273576Z","times_seen":105,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:54:17 GMT\r\nexpires: Wed, 02 Dec 2026 23:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472054\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-04-04T14:46:23.729727Z","times_seen":23065,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 140\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; shield_FPC=SC28rtM0fJzEDbSrQ9sBk2pzKhdfwIPO0x\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[{\"id\":\"8c90c08e-8f6a-4c19-a4c0-7d614ccba5a4\",\"qKey\":\"1a804ae7-152\",\"operationName\":\"getIntercomUserHash\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"79a5eff7d938ab0434ddeb2d7311ab72","sha1":"f974b978679ebb9f9e6dfafe4557df125ca39152","sha256":"a8efbe4b660dd019eb881ca0352194305425b2c45406a9ba8daa74c6117f067c","sha512":"46f8792bad1dfe563e1f91238b1d2fcbd1d5fc6f2797d158ed510be16ce611fd5bde3285f579a5cccdaf0343f8f041f6c1479aa6c6c2633ec32ed0d73dda9c68","ssdeep":"","tlshash":"1ad02282a51b09198e0c20888824f40b493ea42608e8386096d8a62d8c8b8bc9248718","first_seen":"2025-12-08T11:02:52.819177Z","last_seen":"2025-12-08T11:02:52.819177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BLbK3QMi.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/5f62684a.d.m.BLbK3QMi.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-4445d52bb1ced8f6e3ff321b5fd28ac7-2c00f1b23619726e-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-6071\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13471)","md5":"daae8f03958df720c465c8ab3e7e1ef5","sha1":"336dc04874acbafe72d472e45965fc45aa7c3ec2","sha256":"c26d1a75fb8fc7e23f0cf79287f3159d5638c829a42561a648eb0b75d1a620e9","sha512":"dac7065460fb5ce38b707d1daa29ce21a4c203b87bfe45af5b13a1fc6353f3d7af7559cd36e619bea04e2238bf2ae3640455d1eff296a43643286c998806f213","ssdeep":"768:1NDC21lR7qT8CT1JqMPMS0K9KL5svEoESs4erHzcViB+8RgZB5Vph:zNzEx3qMGxrzOph","tlshash":"31b2f9c132927571838694f2e6330252e33a64543806a4bdb9bdb9db7981d877b73bf0","first_seen":"2025-12-08T11:02:52.82002Z","last_seen":"2025-12-08T11:02:52.82002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/86620776.EqKsf2cH.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/86620776.EqKsf2cH.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-e9e073540e4313d7d21eaff818fa766d-2fc1c73da67c2284-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-4b48f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":308367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e35168c19b40d0a6f886479cf064ca32","sha1":"df45c47f6aad0e7c104dfcc1868841062b003887","sha256":"4a3371bcd8c4a443be46441fb6a22ef51ce43c5c063384202be6b023729b37a2","sha512":"aeb8093bd35fda8823fe5493802f730ef189126bb94bcfb2ac1e52b76ca4a773f212dab864756e98b94b77be31b08706ffdab73d910e05a3ed7880128c28f969","ssdeep":"6144:6fLfAo1BvreQyY7t35lPJB3VKIN506LU+HnuISH7A45GiaYw6vNZqMX6Q25cTxFt:6frAo/vreQyY7t35lPJB3VKIN506LU+E","tlshash":"9a64d7ab8e60613ef5b3b92ee1d9be5d7108dc03c9a30655e5a1962cc2c77d25336f08","first_seen":"2025-12-08T11:02:52.765834Z","last_seen":"2025-12-08T11:02:52.765834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/pragmatic.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/pragmatic.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5939\r\ntraceparent: 00-60e2806c29cfa567542ab5ee88c75c1c-979e83afa5018533-01\r\nlast-modified: Fri, 19 May 2023 07:56:27 GMT\r\netag: \"1733-5fc074213b5f4\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:55:04 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9fb8da17ae46b9db5722e63c56429be","sha1":"efeeb0922c67626b63bc2db6eb3d017f472d1d9c","sha256":"6148bfd444d31f82201b8758cb4efbea9058ab1a7982756389d1def22f7aef73","sha512":"f1a06898407dbbf8a10a296e18e695b6248fb46b0e8d45ee072963f83124e18e261f4888a212cf05738227212b7a237e714a27efdb4d4b5463fe36cc8cf12058","ssdeep":"96:oGeXCKmzTjHqsVd9J7zWjTuI842motCyfE3iPfSm7Wf843CyMWQSZyP/6UaoXX2f:wXKjH93L7kuI8421tZfOiH9WHRYPXX2f","tlshash":"01c1748c6f4145bcf040e6feb70268e8288aadf63953a994c3690c67a55249cdf4ccd7","first_seen":"2024-12-31T04:55:51.583283Z","last_seen":"2026-03-31T00:45:46.145408Z","times_seen":50,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Dec 2025 11:01:39 GMT\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a0c6ee06b96a7406eed6e54bf1b64c78","sha1":"f69e8081aa551d26f3eb46672a79a4d7cb4b4657","sha256":"260af81791823a8b9f855ede4e9b6d1220238b62c22859594d8cf2216dd0348e","sha512":"761fb8e6ed1e28f98d11da236d244f38ecbf08e43f410918ca8048b08e04b115bafcd9fa4fe2977e123a7efc2f251be8f02f88e981aba28d3e1fca0968746276","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqaVyIAa3LZlfCJmwBUiRDfMTcfFBhiEymDcTYn:KuGH72NFEIwLzieZxrAwR","tlshash":"7b73eda1041b9440eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2025-11-19T19:15:03.775253Z","last_seen":"2026-01-25T14:09:20.059844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":129,"dns":1,"connect":8,"send":0,"wait":28,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.CbYR40R8.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.CbYR40R8.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 16815\r\ntraceparent: 00-0b28e502e20e79d03912ba79de40831c-7550ede23ff7a3a9-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-41af\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eceb615fc6e2c7c7d59e1f65d00a686","sha1":"f4ec48f6cda4262c372bd2e8c2e4b08c0a057c22","sha256":"1d34801f854a544218192a107303baa8ee5f3b727a6db519213b5832c04c6f46","sha512":"59d3b06590f05ddabb5e970129011f4811dad4c9a5f76c54deb3f2cf014815ab9c67813b4a634b08e82e25e7d7878b22b37cbf55b2d030e5b6353dae04678513","ssdeep":"3072:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10k","tlshash":"7bc3a8ff8e50a27bf767ec9dc3e5b648724eac03cc921d66d1b212ac42d63919394b05","first_seen":"2025-12-08T11:02:52.82182Z","last_seen":"2026-01-05T18:44:37.843621Z","times_seen":13,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fd2fd3f8.TadvuQR6.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fd2fd3f8.TadvuQR6.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 582\r\ntraceparent: 00-94e87f425cba57ac90ec16fe2f30ba7f-9b25d4f27ff4e34c-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-246\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 167422\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-06T12:31:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2988)","md5":"033bf2fa4706b216fda9578d8c6b2078","sha1":"3a89ff4e4f31fe24af064232028922a020cb24b7","sha256":"9655e30d07b8a936979f4a5e82b8926f744fa3082131939cf7210dbd6df5f83c","sha512":"26f73c89b717b126d8e751a478783e21ecebf07b0833979f5610459a9e6d57b9458c191b868e87c8ef329e4c3f5185b68a16dac4fbc54a65dbb56e0281fdec7d","ssdeep":"","tlshash":"615126adce1853a9a4d754fab1e64e4e5004ac43f8391a51b991fd2ec182fd1630ab4c","first_seen":"2025-04-24T07:07:12.695805Z","last_seen":"2026-01-25T14:09:20.120042Z","times_seen":90,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"leon59.com/subscriptions?platform=web\u0026skin=leoncasino","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /subscriptions?platform=web\u0026skin=leoncasino HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon59.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: n8F0sihKFUQNvKws+4lblg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.27.5\r\nDate: Mon, 08 Dec 2025 11:01:48 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nupgrade: websocket\r\nsec-websocket-accept: 9oiIrijzgjWZ8vWWC417Qn5pLlk=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":1,"connect":13,"send":0,"wait":140,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:54.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGLDT3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\nexpires: Mon, 08 Dec 2025 11:01:55 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 08 Dec 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123003\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500588,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (45082)","md5":"b7bd11ec719726840f2c06573e258516","sha1":"a00bfc1d071a981a1eefa03af815e760231a2faf","sha256":"6897ca6cfbd1b0e9f58d4f353905974139e46d1589865ba67350ccf4c4c4f309","sha512":"7a29e1777ff847f7a4601156acd8be35ed262578e661c0e22309c723aff506b05a74d49fd7a14db54fbaafa994327ac8c22221efe3db0b1dcb36b25aec11a6c8","ssdeep":"6144:jjCSbHpgtuEaxpWGwVWSayqW7R5U6k/bbqt3H3ch/+j:pFtSwW7z3cs","tlshash":"c5b4fbce77d4a87ac3a65520643f060a657d20e2b24c9490f0daccd42f7997971a3faf","first_seen":"2025-12-08T11:02:52.823525Z","last_seen":"2025-12-08T11:02:52.823525Z","times_seen":1,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":106,"dns":2,"connect":21,"send":0,"wait":52,"receive":53,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"172.67.71.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"match2one.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 18:28:20 GMT","end":"Wed, 11 Feb 2026 18:28:19 GMT"},"fingerprint":{"sha1":"CC:37:F8:78:A1:C4:22:09:DF:4B:0F:4D:60:ED:61:8D:D1:C8:E4:6D","sha256":"DF:82:69:8A:77:10:A4:F5:5D:9C:BF:0D:7F:AC:26:67:3C:1F:F8:64:41:E7:97:A7:69:19:5A:9B:F7:9C:BF:A8"}}},"request":{"raw":"GET /tracking/m2oe.js HTTP/1.1\r\nHost: cdn0.match2one.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: b9vbybQ/rgRzK/X1ew0BoHyP8NhmQVOTKpCZtgNFWr2hatQSdfX9nKYqjsprMwjv3D8JN0fANwE=\r\nx-amz-request-id: JJ66B1CQNMM1RQC0\r\nlast-modified: Thu, 18 Sep 2025 07:53:55 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 22262\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMUtdSdg93HIw7Q7g8N4JgP9Hp5GRq17iIlhpADJZYOftZUDAaV2GTEbvD3AegNhdFko3ySxhbp%2FEmofIZ53d8ARYPxpD8OR9nuf%2F8V5S3BnMQeU91YeK27XOp8GBEWaxFw522Gn02Q664ZzsuNNF0E3YG0%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76401bdbcf3ea72cd04aa2d225f6bccf\"\r\ncontent-encoding: br\r\ncf-ray: 9aabc47cec9b5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com/shield-fp/v1/api/web","fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","domain":"csftr.com","tld":"com"},"ip":{"addr":"172.66.40.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csftr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 22:33:13 GMT","end":"Sat, 28 Feb 2026 23:32:55 GMT"},"fingerprint":{"sha1":"98:20:2D:63:AD:53:07:94:C8:88:95:A6:88:61:6D:0D:54:8A:FF:17","sha256":"95:65:BA:45:B8:4A:84:21:E3:BA:11:06:09:12:EC:01:DD:78:90:90:1B:C3:85:B8:0A:EA:11:5A:EA:35:F5:A3"}}},"request":{"raw":"POST /shield-fp/v1/api/web HTTP/1.1\r\nHost: 5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24100\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24100,"data":"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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://leon59.com\r\nset-cookie: shd_persistent=2698e0dd-b1ed-431c-8b03-a1427b824e02; Path=/; Max-Age=63072000; HttpOnly; Secure; SameSite=None\n__cf_bm=v_BsuNob9XKEniULXP0FRiGwJhG0OjMHpsDHyG2o74Q-1765191716-1.0.1.1-1fgudyFMMVSFxLTls3dKFCxYX8Ze350t34QhL1tkxm.h..oyJuBsLTiiX9dFeCaybkCzeLyrDqZedwLYkgKAgA2TL69Vb3xDzGYuj9pUxSc; path=/; expires=Mon, 08-Dec-25 11:31:56 GMT; domain=.csftr.com; HttpOnly; Secure; SameSite=None\r\nx-request-id: 712008ef-9bfc-43a6-b8c7-f50ea1a60e01\r\nx-envoy-upstream-service-time: 19\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9aabc480a8f656af-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c6937a1d8dc86612fdfd51b5b3bd37f0","sha1":"064d3ca4a618dc7a4b88eff5d57c60f8e09f95e6","sha256":"98a40e9d5c7a13b0f8b99b636dfd4c3d77ba80072fe8d90b49eb3c3704ae7809","sha512":"9fe7904de2becc2cd546cc799249d223217f438efb90604f1e39389fe662689c31d6032a0977f8c022d44ee3aa33adb27b68e72d3cef0fcd9c56b5036c7c9f75","ssdeep":"","tlshash":"18e0684802c878bac37b9209da883f543f79417320d9340dd8bd8a6814d7981a61a117","first_seen":"2025-12-08T11:02:52.824956Z","last_seen":"2025-12-08T11:02:52.824956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":57,"dns":35,"connect":1,"send":0,"wait":136,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.D_Z2xyWs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fb4472f4.d.m.D_Z2xyWs.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 765\r\ntraceparent: 00-bfae025ec5c2c2e031c072757d730c79-cdc069f7a5079348-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-2fd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 5\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1711,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1660)","md5":"0e98948343aecaf65e0075217d58bda5","sha1":"44f2bb2790f601503ea83129968fad84b6951898","sha256":"72b93e16482ec38e02ec59438c0dbf985113cf316e0204463a2d89d87b1a6216","sha512":"5fd0e24585e13466a0eede2a9c7464813c479564bfb968cb664db1cc8117b13ca4fff2cfc93a9c1aa7c186ad1aa96a9879d918abd2b4c7bcb8031b4ace76a66b","ssdeep":"","tlshash":"e431210bdc04ecb5e68b88eec0240402810f7d56f3e5caa8d2ad62fcc7751a99115b75","first_seen":"2025-12-08T11:02:52.825818Z","last_seen":"2025-12-08T11:02:52.825818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1140\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1140,"data":"app_id=cnjqphyx\u0026v=3\u0026g=1c8b10c3ba5bdb30c0d5a8900598f28ff649f36b\u0026s=85a78ebb-1cb4-45f9-8a0d-8343dc1b4c4c\u0026r=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=3970dd719b691484\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%2243df5c37-72c5-4092-9e26-dde4247476d5%22%2C%22last_request_at%22%3A1765191715%2C%22location%22%3A%22%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***\u0026device_identifier=2133e351-8008-4d94-9ced-e05cd5b6e9d8"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 4e7dbcd0477e46c7ffe1f0e569035ce13440b396\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 00391ilssbhfh732rakg\r\netag: W/\"652bdabdd9d584887f01c7a852cca5fb\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon59.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.163957\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0a604e7e52993826c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5959,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27c6bba84a7a8c834919b0f42cf5fba4","sha1":"dd6949a96d8f967d5d3ea749460e4b0ff3b56818","sha256":"652bdabdd9d584887f01c7a852cca5fb2b501eb5820ca11d78ff6c2bf8af0138","sha512":"50d85dc158b5722732cd949268c4cefe49ba99c9aead333f4cd6d82fcfb955c447ebca6e3d1b41a42f43b2f8888e96b1b3d18d2be2b8871756ffd8296cadca6f","ssdeep":"96:4rHa7pOaU+zVu2iRHANfkrWGjzKWMlzJjGMli9B1NAOU5wHwhPD1kthetnX:4rHa7p5U+pAgVeB1+1SetX","tlshash":"d8c1664c89481c7ea38bc3dad365bf06077d41b7b2946d98f9bcca2d21db295127b207","first_seen":"2025-12-08T11:02:52.826663Z","last_seen":"2025-12-08T11:02:52.826663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a17a5642.d.m.d2egGL5n.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76432\r\ntraceparent: 00-48cab19b45c299d739e9fcee573dec50-85c2a4a930b80f1a-01\r\nlast-modified: Thu, 27 Nov 2025 12:02:05 GMT\r\netag: \"69283dbd-12a90\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 886511\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-28T04:46:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19927)","md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 01 Dec 2025 22:18:33 GMT\r\nexpires: Tue, 01 Dec 2026 22:18:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 564194\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-04T15:12:59.537019Z","times_seen":5118,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.BEE9ZDcH.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d39bd125.d.m.BEE9ZDcH.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8330\r\ntraceparent: 00-0331a8473673da0d3a60f0b208c7dcf3-14c782f0ef309075-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-208a\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 5\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32540)","md5":"6a7bd42ef3f60752bcb84e981bb64155","sha1":"c6c7eaf2e9d2624cf4384334d87ad9037f791f5d","sha256":"e0384e3824abd034d5991432074ffed9464df3f44f60662848d39e0de939c3e4","sha512":"5dd7766f1db6731170de71c99f4424906b6728d6f8c99b37c45e4a13f8faa94c093a1273fb656f889eca14f044abc9ce20960ec3a9ce96fd2a1c666ccac15bb7","ssdeep":"768:TmxQXAHxtes/ZYq+O8EGkZGm4bHXQNOc3D59HW2NaS9jCm:axQXbO8EGi4bHXCOyD3HWFFm","tlshash":"21e22a2832a57e3181abe5bdd0a1383055294a5a92134ec0b7bcbb7551fe9b94337f0f","first_seen":"2025-12-08T11:02:52.828601Z","last_seen":"2025-12-08T11:02:52.828601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/cc513c94.BJAIjynr.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/cc513c94.BJAIjynr.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 1936\r\ntraceparent: 00-0fb8fde0e1d706d52e7716617974cda2-6cc1199b77b0d6f4-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-790\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764333\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13338)","md5":"016069031e7836416684b4fb2dddfec4","sha1":"5e771371191b81757569cc8336ac5e8fad09ba35","sha256":"28321db2f0d1a637d77569d81bdcf80e67dd0bce04590f992e2d55ace1380663","sha512":"2b63cbeb355714d2f0975e975cbb622a4c5faab7443096ff908c3a417ac67ccca503aa9820857e9794b690bcb70fd1c63774d7d3ee15be1b4ab9217209061803","ssdeep":"192:2iVjJbk5LLXw88g+7PB6AQ+TPDqGD8t7T2pb8v13qud6:rjJMftKaIHD42b","tlshash":"1b5240c71878a76f35a7a03fdac1364c022aecd384136ad5d9f6ea5491c6a8241737cd","first_seen":"2025-11-14T01:20:20.946447Z","last_seen":"2026-01-23T03:09:51.740928Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CC9_Gdie.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-d12e137d330f27aa9612380dab9f1fb2-e2505e5e5a3cb8ec-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1398)","md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/720cf670.ZU_Xpxpa.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/720cf670.ZU_Xpxpa.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 817\r\ntraceparent: 00-43d05301100c55bcc0f9a17c731722fb-17485b554ab80b9d-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-331\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 167422\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-06T12:31:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3517)","md5":"9b46394706e510a8fd1f2fbb47fc8237","sha1":"4e83ee048b5bcbbfd37763b76f55c34afcf82b43","sha256":"088c87a98e272dd2e676c65c1ab60ef74b17b50eee9de957c720fd25703bbe9e","sha512":"397002abd00bb15782be5c38599c770a516e8faf61a4cc9af90f331a2bfcda5b6b7b22fc35867a14e2c6725119c5a0901dded61ebde5be67a5817b7b75e09224","ssdeep":"","tlshash":"8d7110d90f18e977e4d7580ec982a788b1335c438c56855bd77ab3bc8b466912363b84","first_seen":"2025-08-16T06:41:47.002789Z","last_seen":"2026-01-23T03:09:51.682112Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/casino_newyear.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/casino_newyear.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3367\r\ntraceparent: 00-48aaa4db082bcc4d805c62660028ca78-1fefbbf7c82f5711-01\r\nlast-modified: Tue, 26 Nov 2024 10:08:14 GMT\r\netag: \"d27-627ce0707e2b2\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 14:31:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 592194\r\ncache: HIT\r\nx-cached-since: 2025-12-01T14:31:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19393058de2d299f14dcd9439cb762ab","sha1":"4b9a78c3b7738f3ada7c397ae9c7d4f87d085bd7","sha256":"d23d83deb8bcd63f043c012d6d12ec3887ce3624bb8c4516969d4b3dac38730e","sha512":"60403502f97443eed822bce940dd5991905a3ef664eb8cb02011ea6bda28bbe983948fadc4b482bf737026f5197bb10686a79f649f00f8cc93149552e2fe9695","ssdeep":"","tlshash":"556160f3e3d8e0e48543efe8d5232926bb6b38bd3f92d7890194d9442a552b589c4c94","first_seen":"2024-12-31T04:55:51.416247Z","last_seen":"2026-01-05T18:44:37.822823Z","times_seen":13,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/slots-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/slots-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1832\r\ntraceparent: 00-4dcd71962be1b316b36b74a555521322-f2c60ef01259d73e-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:39 GMT\r\netag: \"728-61bf3682e8cd6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64ccc1ab66cb91bd441d3cb46cd948b","sha1":"9608b42a44b67da4be82d09c933f09b5ea3110cc","sha256":"1ae73f949ce1ca94b58f32ac5fab711d948e93073d8432e06228d5dc3a69321a","sha512":"43b77ebaf033ddf4d15d21492facc9ad846cbf57ebe6b406193891a8f029340c10f92bc5ff4e6ea165342aa0cc36037bcb7f086fa38d85d054e06f0a98dd7c7a","ssdeep":"","tlshash":"be3100fa97c0bae4f04bebe9c439d5a9729f34f93fb492810144a788b75506d8c8de04","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.147581Z","times_seen":62,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/advent-nav-1.BKADhM1h.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/advent-nav-1.BKADhM1h.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-ce11f8f20ed4fb14a6f645b577dabd93-f7ccfd89cff6ba63-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-a0d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 316387\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-04T19:08:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a7c589ea35e8d32a672e588965342017","sha1":"5139aa7367a115ea88726b0f058c0be76087cc02","sha256":"5404ea4aef1d6b40417b3ea4ebe962dd23e6f646b1eac83d25dca6785b5494d6","sha512":"b2680393648f4e729e1d1e4e13fa6057e6c3a01c957663a78beb2a0ee6fdc8d6d645617e5242610bb401f4e7bd29ed8fb071cf1ce1773b1d71e94ed709bb6145","ssdeep":"","tlshash":"e05184ca4234d18fa18fca2dff2982e4211e50b5fe8544c6d4dcdf3d705aac3a508e50","first_seen":"2025-12-03T17:22:24.082809Z","last_seen":"2026-01-03T10:01:28.305872Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon59.com\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon59.com\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Dec 2025 11:01:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i64cl3er5t.com/?serial=41929\u0026creative_id=242\u0026anid=wbpui44ucqe7pbnejq8c0ss0","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-08T11:01:38.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"i64cl3er5t.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 19:47:20 GMT","end":"Thu, 22 Jan 2026 20:45:03 GMT"},"fingerprint":{"sha1":"46:B0:98:F2:9C:14:0A:91:57:F9:AB:A1:CA:CB:F4:30:10:B0:43:79","sha256":"B6:25:AC:7F:45:4F:44:5F:46:31:B2:AC:D2:F2:B1:85:B3:D8:06:C2:F1:EE:17:EA:5A:DB:1C:80:72:52:06:25"}}},"request":{"raw":"GET /?serial=41929\u0026creative_id=242\u0026anid=wbpui44ucqe7pbnejq8c0ss0 HTTP/1.1\r\nHost: i64cl3er5t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 08 Dec 2025 11:01:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 7bdce5cb30e89d4ecd668dd94f1025d8\r\nx-runtime: 0.044026\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toUkE%2FnIU87H5In5CAk4LcfuiYGfA4gn5CxW4z61M0%2Fn6Xx%2BjZWIm%2FGUXbPDhSHdFJCXpbiaFpABVWOOTMmCxmYOa39C0DOO7p77eF%2BM\"}]}\r\ncf-ray: 9aabc412f8421ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40537,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":184,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/bonus_buy.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/bonus_buy.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1496\r\ntraceparent: 00-86e6df4760454e4729bf7f21913949eb-ae4aa7f9012b40cd-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:52 GMT\r\netag: \"5d8-61bf3656318b7\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 02 Dec 2025 00:00:39 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 557957\r\ncache: HIT\r\nx-cached-since: 2025-12-02T00:02:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cc7ff5133430a2bb78f34c3442b720","sha1":"0b8442472d38d17efdbf59c2849d0362c3b90687","sha256":"22eb05f821c7cc95e715dc17de449edd34c22e15cd62eeb916824dc6b87b31aa","sha512":"f70c09ab0097bbb5e75b417860f3d09d41032654af0f8a967bab915228f284cb3b4fe35b4e7b3c99bace421f1f3e428d39b9c3b3931612f7734bbdab203ad54d","ssdeep":"","tlshash":"2631a7d2564c60f4570ed774c526ff967baf34ba7adc8bcc61400a844e20188b98d9c0","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.250859Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CDhE89Uv.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.CDhE89Uv.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-703e7b978879f5fcd4fcea13e7eaec92-7755d4ca8a239299-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-13aa9a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1288858,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64928)","md5":"e6f3064c0543ef52028a93e60c43a4fc","sha1":"903bc57ecbc2bdab8955b28eb18f0a77e0b0a103","sha256":"b4ae7933bf0da77277feb855708f3754feefa2b63c702ba2d30efab5d35f0903","sha512":"cbfb5f58e7a07c707d6138fcd20665d97c13988e9efd9a275a919ea2e67d142a273726ffd3f87d66c95d140e3f612d11f08527d256d0e876908549fc9d52590d","ssdeep":"24576:NC21o8yGEH6LAD+ddsdaDajxd7OpaA7Dued5mx7hXGwTOjmA83I8PvQHhyoH:NC21o8yGEH6LAD+ddsdaDaXOpaA7Duer","tlshash":"8b256c4d7649747683f345a6a0ab0040a6380b41f5648cd1e5fc9e7e2aaed3093b7f6f","first_seen":"2025-12-08T11:02:52.833573Z","last_seen":"2025-12-08T11:02:52.833573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.PZXRoakp.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a538a99f.d.m.PZXRoakp.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11545\r\ntraceparent: 00-d222df7dd0b54161f00e39e53dce8b4e-23567580e614e956-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-2d19\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"31ac6147e646df21022341aa61f2a539","sha1":"259bd24cf58654d1491f15ad18f4dfdca801d6a8","sha256":"68c5fa433e317768c07a276ca3729d4c3fb0ceb6d7b5cf0fabb8a99545709615","sha512":"9e8d6f171a85121a5142074a9cec9d705216d96a6dff6a8849535b54b7e261098dae05c2a0b5d8fb242459c5330182c6782c1d7a967c9b30e00e883062b05ae5","ssdeep":"768:H61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/R:Azmp7QA/BPWUR","tlshash":"d403fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2025-12-08T11:02:52.791651Z","last_seen":"2025-12-08T11:02:52.791651Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/holdandwin.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/holdandwin.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1193\r\ntraceparent: 00-cab0a33b33ea24ebb0369693a606abb9-6c2cda2ec51763a6-01\r\nlast-modified: Mon, 25 Nov 2024 15:44:32 GMT\r\netag: \"4a9-627be9be373f6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e6b24f8e1304a6d30fcf66915302f8e","sha1":"fd521e2f3e992e8f4421212496441e288ed82588","sha256":"d1d27a4fa7dfa49d65591ad727ea33e2739418dd6975b6cbbe0844e03101d179","sha512":"5e97f4c5fb96dd6b29e3a7affcb7bd03c2bd4d5def50338d59a8d5e83605978bf6b8d10daf1c33c4d973ce723d9d6f5fd656af52ad7d79052e83abdf134e983a","ssdeep":"","tlshash":"8f21cbf7e3584bc1c1038342f53aa8b1803f587cb3e58ed580797de28114987ca88481","first_seen":"2024-12-31T04:55:51.414787Z","last_seen":"2026-03-31T00:45:46.283415Z","times_seen":58,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64167\r\ntraceparent: 00-76a789b0c0c41d784ac86d17d37600aa-92e8d048d72fc8af-01\r\nlast-modified: Tue, 24 Nov 2020 11:14:44 GMT\r\netag: \"faa7-5b4d86af947ab\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:52:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"8474cb125cde5afaca51d98801f345bd","sha1":"00e3da15a1936d0ab1057909bf23a0838a33bd79","sha256":"39efd764f69c73cea9e707b3b46c624e3157915843eca2948faa0be79d3cee82","sha512":"7c604b970e8a0f731194b41d227f04e543bec101ccc89b0e04acbf3e02e054ed605d29a0c5ed8de9d70606d305a80d950be2765d5cd0e481e3e03939ffc7e986","ssdeep":"1536:F3HMuHfOiSMXeyZYQGGa1gfeHmG2q4ZtYYMW904b:FXMuHm8ZZYjJgemVqgYYg8","tlshash":"7a530242e4dd69a0833c7b6f3ee258119b8581fc26341b163a7b6c6980876be474d7d8","first_seen":"2024-12-31T04:55:51.625482Z","last_seen":"2026-03-14T07:22:16.805002Z","times_seen":33,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7a71a6d3.d.m.B5bZndq4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7333\r\ntraceparent: 00-1a99a373085e4cb0f89be7f3feafdf7f-55cc2a5c8a77ce22-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-1ca5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764328\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28320)","md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/713ac740.d.m.B95bN3MA.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6107\r\ntraceparent: 00-85d10e3edd7f654458abeca2089c4759-c5e3d2dee6bac881-01\r\nlast-modified: Tue, 02 Dec 2025 12:27:24 GMT\r\netag: \"692edb2c-17db\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 478823\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-02T22:01:23+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16084)","md5":"0405848403cfa0429fa2f47699697d01","sha1":"22cf713e2fdc92058a39d8506e8356242b205f63","sha256":"97740baa921c33bc558c28905646b56e7325b9426b03eaa3b91ec71a02838c6f","sha512":"a56ff3a1b91e93451ac022605c28603977cca89740bb22ceb91acf9c333d86ef4432ecb370a79de5657e3b14e62dc759ad13a560dddfb83f31173c4381468c88","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJZ:dxtL7PD4hsy312IhALo3aS++FwIaGPf9","tlshash":"6d72a4e93183b53593eaa9e7403b010af33c3944344f9494f6adaac63d7651352b3e7a","first_seen":"2025-08-05T20:12:01.845926Z","last_seen":"2026-01-25T14:09:20.083097Z","times_seen":94,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.GP_QzcML.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f06cd424.d.m.GP_QzcML.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7421\r\ntraceparent: 00-93087f6a130b01debcf8840f8ba0aea3-da8de51c65a1816c-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-1cfd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22698,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22647)","md5":"da3e89138c3278064cdbab9d2bc1c614","sha1":"1258128ea7571fd68d60cce7bb3197ae3c72fd7d","sha256":"602b47a9d557805e6e550699afe8acbc9ff0747657ddb384990f977451e5ca0d","sha512":"426a2ed89a6331e4fdfed0fd9205eb0af1a0f8933ae4881d6e8823567b80140ac0d4d2cc15dfaa843c1d7b84a324c7ce1dfc4004b0bae1f08ddcb1176a20c6a5","ssdeep":"384:wB4O6X3LgUudXm98KNK9lCEe6woDOpXxM1wfRTEy1hl6qgwmQbk9QzOWpUJtbFRU:wBCL9udW8KNKFDOpBMSWyd6imQbk9Qz7","tlshash":"82a22bb7236293b246ab018a50770543d31407d5f508c4f17afeadae35b58a2e326f7e","first_seen":"2025-12-08T11:02:52.836715Z","last_seen":"2025-12-08T11:02:52.836715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8e2531cb.d.m.C6wEMBr4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 56121\r\ntraceparent: 00-c28d76913450761311dea8d115a49257-26ae511939a4a518-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-db39\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330150,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46639)","md5":"04839915ba2bf62c92348cbf677d6f02","sha1":"39e09668d038653c47a329a4ad5ba97884344de8","sha256":"c4876548cfbd16f1142097fa6414d0e8206eefb539306001eea0c0a7adff34bc","sha512":"e9e26eb0a5b19ee834d683be8954ab90fb7fd315b6b79ba5f62c282c09b502e914c2c020252e6cdd8bf4018a7c08888cccbdfa1d81e2e4ddaba7f0c3c20088db","ssdeep":"3072:4TvqbcLVJ7lQAIToVpH7RrfIEuPOIZbkHp7kEkfAipTlW:IjplrXuXUkHfAiO","tlshash":"7564e64d72f827b5458370f1b63e1932b270e013340c4d993d9d2299afa6618eee6fb5","first_seen":"2025-12-08T11:02:52.837495Z","last_seen":"2025-12-08T11:02:52.837495Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nFrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 19:39:33 GMT\r\nexpires: Sat, 05 Dec 2026 19:39:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 228138\r\nlast-modified: Tue, 09 Sep 2025 18:33:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15028, version 1.0","md5":"42df88898bab0fab4c59cd7590f670ed","sha1":"5a31376aff3fbaad3396224b7157d1294273b326","sha256":"6285243909b5d0b7d12b5795a99e37355e361ebfeef01b6f8bc95fbe46aa611c","sha512":"6df2554d7064157913f8f19bce08248edb1daaed201da4efdae927d3742a55a3f6584d07c94c5772fbd5222978b6857951054d6699dcdc8e16ba1c7b5bb3c1ca","ssdeep":"384:TzdHStVe4OxNyweZXvvMrcOYVGPfSGOPhz:TzdHS32yVZ/vMzYQHrKz","tlshash":"6762c090cbfdb6e3e93c26b44748fa853dd2fa205837e3d1afc2885170c071a36a5526","first_seen":"2025-06-04T19:39:20.238119Z","last_seen":"2026-04-04T10:53:57.708857Z","times_seen":1613,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.BneLucUJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8a28bc4d.d.m.BneLucUJ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 142360\r\ntraceparent: 00-fc7ab85e44bba0379bed07d6d5946688-6982d078b15bf1bc-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-22c18\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":617369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22587)","md5":"0d27d34788232d8cf7b06755474a1b86","sha1":"060f91c781d4e347b60138f71d6162ed2a88c99f","sha256":"9e6e76be3b262ae3f5c9dae49e44ee98e1accf9e93b3f6d618149a638c9a5632","sha512":"78198bb2e2a2d1f70bee581eedf106d2d5eebda0e3f400ebf5638df67cc0f225c8c40229ed1c4dd8920f1f3563560c9e7b5d504c3936e8ae87d0d3785ce94ef4","ssdeep":"6144:CLZHeVelwC1a9G/74YL7pe8EmzZopGHjWJBphB2hbhtyIUZeuCOAMc:iZHJwCY8/logjWx6Oe","tlshash":"6bd44b597151783647b640e9906f0a06b33a2a2e5448c89cb26ce9ef39fdc4521bff7c","first_seen":"2025-12-08T11:02:52.816558Z","last_seen":"2025-12-08T11:02:52.816558Z","times_seen":1,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.7dqxrSMJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2df41dfd.d.m.7dqxrSMJ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5339\r\ntraceparent: 00-46829408f030faa4fe5f0d1c14e9ccbf-86096589549cf98f-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-14db\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14692)","md5":"2efe63944b901f59760467fead768839","sha1":"54e35837b163bd9e167f7a678331ee89a789fe7b","sha256":"ac3309a950624e4cbeb2fee3315e60bc90ae0f4e173a24534d5f645c09673b9a","sha512":"b7aaf0ef097b86af4a6a0223f2c3d8788f6c323dd92ba91ef4b4747f47d82410812939feffd337d088e8046f7ac90d5b15227d35763d2a4387e810e58144b043","ssdeep":"384:8ORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6n:8ORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFD","tlshash":"de6209f170ed657043e616e0a0b70106e6e9512830c9c4e0f59fcafe45eb980a967f7e","first_seen":"2025-12-08T11:02:52.838938Z","last_seen":"2025-12-08T11:02:52.838938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fe740d55.d.m.Bfeuh4iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fe740d55.d.m.Bfeuh4iX.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8812\r\ntraceparent: 00-9b9afbb1c624c56fba0dd7b8d7f2b98e-87138a0043f714cd-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-226c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23588)","md5":"af58c1c3e121bab976472a8e215cc058","sha1":"7cbb4ce134afc23d048d007b22a4ec77b0d43787","sha256":"8d19864cc331e1665d48abe033393571134340a82d6e0156b1e5846300da8ea6","sha512":"b11673c8030773821915aea8b204cbe2d2dd1b932f5c2751052b670c5f63cba0643176c2c43a2e09573a19b8a166c399bbabf8c84e6a25e90cb763b238f599e6","ssdeep":"384:gQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2if:gQdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgR9","tlshash":"f3b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d5d92bbf6d","first_seen":"2025-12-08T11:02:52.839777Z","last_seen":"2025-12-08T11:02:52.839777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 19:37:21 GMT\r\nexpires: Wed, 02 Dec 2026 19:37:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 487466\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-04T13:39:57.320782Z","times_seen":2964,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/bgaming-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/bgaming-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3921\r\ntraceparent: 00-c4b799c9e16ba96917c5851f610eb9ef-8250dd446bb976c6-01\r\nlast-modified: Mon, 07 Feb 2022 08:41:30 GMT\r\netag: \"f51-5d7699130609d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 17 Dec 2025 11:53:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1811285\r\ncache: HIT\r\nx-cached-since: 2025-11-17T11:53:45+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89e206c1ac0bb100c051a7498d7ede68","sha1":"f435cbc67f39e5c32337b704e4be8497f5a752b9","sha256":"8d96a251de96ff3783ee1bd49c10d14fe8a67b0ad627a85e76d8601878fbfcb6","sha512":"4deef4a9d1c0af86a122d518e99b8e84cc3e6b91e4db77c79957c06e84c2a0d21704434306a2816467c3af9eef87c9d9e974d83f7f8785e06177e6e324d021eb","ssdeep":"","tlshash":"3a817598771d92f8f900e3fd431510bc684229e53c2186e85bb72d07b9a589e5da0ccb","first_seen":"2025-09-23T04:33:55.487105Z","last_seen":"2026-01-03T10:01:28.267302Z","times_seen":31,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Dec 2025 11:01:46 GMT\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a0c6ee06b96a7406eed6e54bf1b64c78","sha1":"f69e8081aa551d26f3eb46672a79a4d7cb4b4657","sha256":"260af81791823a8b9f855ede4e9b6d1220238b62c22859594d8cf2216dd0348e","sha512":"761fb8e6ed1e28f98d11da236d244f38ecbf08e43f410918ca8048b08e04b115bafcd9fa4fe2977e123a7efc2f251be8f02f88e981aba28d3e1fca0968746276","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqaVyIAa3LZlfCJmwBUiRDfMTcfFBhiEymDcTYn:KuGH72NFEIwLzieZxrAwR","tlshash":"7b73eda1041b9440eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2025-11-19T19:15:03.775253Z","last_seen":"2026-01-25T14:09:20.059844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.BLbK3QMi.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/5f62684a.d.m.BLbK3QMi.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-87c9b63e5f0c14ce1dc611bb939b0b58-ec6244f60f685e46-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-6071\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13471)","md5":"daae8f03958df720c465c8ab3e7e1ef5","sha1":"336dc04874acbafe72d472e45965fc45aa7c3ec2","sha256":"c26d1a75fb8fc7e23f0cf79287f3159d5638c829a42561a648eb0b75d1a620e9","sha512":"dac7065460fb5ce38b707d1daa29ce21a4c203b87bfe45af5b13a1fc6353f3d7af7559cd36e619bea04e2238bf2ae3640455d1eff296a43643286c998806f213","ssdeep":"768:1NDC21lR7qT8CT1JqMPMS0K9KL5svEoESs4erHzcViB+8RgZB5Vph:zNzEx3qMGxrzOph","tlshash":"31b2f9c132927571838694f2e6330252e33a64543806a4bdb9bdb9db7981d877b73bf0","first_seen":"2025-12-08T11:02:52.82002Z","last_seen":"2025-12-08T11:02:52.82002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/instant_win-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/instant_win-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 413\r\ntraceparent: 00-f6e7739315955ee4344c2a2bfe625dd8-35280c4317b2942c-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:59 GMT\r\netag: \"19d-61bf36cf7dfa0\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 03 Jan 2026 19:03:24 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 316706\r\ncache: HIT\r\nx-cached-since: 2025-12-04T19:03:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d8467444ec8a15407dd22a104df3c8","sha1":"c57ff6a14e02b2d2b88bda518f2ca548254d9fbc","sha256":"9e8fadb0932ffc1f1a4937d9ab37505a34a35b6d0c05fdcb7f00f8290934c9d6","sha512":"3a2e6ee1c391dcb602d2767169dac90216669c2d8279d0f6d4877c03f86c91b1e1df688ab5b75a0ad6088801337f3fa1bf1b59496ffa3e5784ab03a16d6cc84e","ssdeep":"","tlshash":"77e0abb9c448b7d4ea08c7f1a32c6b6da2bd70c2b37009d592c1760961060bfac8a888","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16463Z","times_seen":61,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:53.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:55:15 GMT\r\nexpires: Wed, 02 Dec 2026 23:55:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471998\r\nlast-modified: Tue, 18 Nov 2025 19:00:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40688, version 1.0","md5":"c2110c4e3bb5388e5dde190a6f732b70","sha1":"980adaf6f9b3fe70a95494ebc40dd13151533366","sha256":"0ac2bd2955bce37b4b57866fb20d9b2a9d40efe46eafc7276a9995b36dc4b34a","sha512":"3502853dde0e4032b350c80e015823042985b82097eacba12b9ce3852ca37b1c76b24aea4bfae4fb351935e01dae55790159bd5ab6ea5925b29aee30dbcd4424","ssdeep":"768:5HzWnpfBrQBT/nZyGY8OyYgBlyz9LVm3I7Rv+A1n49NfG37v7R+G:5sfBaF5rOhkly5LyGN+Mh37DR+G","tlshash":"9b0301eef3f58673fd1d9224f25284ef602e9744004d64b5ac2243734eda6b1f1e46a5","first_seen":"2025-11-19T00:33:03.039122Z","last_seen":"2026-04-04T04:25:54.096503Z","times_seen":16917,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=4jg3s6\u0026event=visit\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Dec 2025 11:01:55 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 370\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":308,"dns":30,"connect":98,"send":0,"wait":98,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.164.247.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0 HTTP/1.1\r\nHost: d1cr9zxt7u0sgu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nserver: nginx/1.14.2\r\nlast-modified: Fri, 19 Sep 2025 13:00:04 GMT\r\ndate: Mon, 08 Dec 2025 11:01:42 GMT\r\netag: W/\"68cd53d4-2c9b0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: TYQv-B0SspgbPEeLyOK48w7JidsqCeCpxzbQcrW-9ehbEspHejXMag==\r\nage: 6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-02T09:36:05.663821Z","times_seen":79,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":12,"dns":1,"connect":8,"send":0,"wait":13,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/06b1eb38.d.m.TiN0eIPo.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b11093c4a5b52dafd00e83964fb48ff6-b5792ebbe4e524b4-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-13443\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7e7e5a3a81fc9eb32ad2bec6259571c","sha1":"1ad9e5ca8d4303c3bc3509dc9673016d2677b5f0","sha256":"21414262f94d462ef16cbe6532a905e530473d43d676b92d915f16c3edd35b41","sha512":"2e7dcecb46607d0d5e91d9b45ab428b06459e27b2c3a8a24c2696c715d90cd2ece1e2e178e3d442debc5afcc0014a68ecc66eeccd30e66fb037a6768a7843655","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwm:zGmWr9di6ZPK1oUVc8hbS0N664r","tlshash":"597329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","first_seen":"2025-12-08T11:02:52.843704Z","last_seen":"2025-12-08T11:02:52.843704Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/favicon/favicon-228.png","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-03-29T15:19:13.454848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.2f04decb.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"3.164.240.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.2f04decb.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 233923\r\ndate: Mon, 08 Dec 2025 10:57:59 GMT\r\nlast-modified: Mon, 08 Dec 2025 10:53:55 GMT\r\netag: \"25edefbdd196400805dfa9ad389b4e56\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: mDg13RLI8SP2vvFx5mGTfHlR0rcWbu8K\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fb60bb37778839b51bfea3a34907efd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: UDcUxBx-9VAgw3V-dmDUNz1jTZEizHr5ZkrOpMNAoaHUQ4OMyGzhIg==\r\nage: 237\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1093125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"4d7891d7d9f647ba0ab0061ebb46fe6a","sha1":"6db6d8a8a1534c7b7238d4e90413f8c48f56a585","sha256":"50f9dd866d87b8b4d9f73f5593e3d4ac68cd766340ccd1982143ea658909b788","sha512":"1c7b87574a1c7fff4e81a05f26735b97422bfa04136993a9afd1f84ef6b57d1aee88232b3e4324589e772c065a26bdc2e74488715a1dc0bf8462e8d5e35baac1","ssdeep":"12288:0oCxupD8sn9RCMvmS70VYk6uREii5nUCR:njmMufYka","tlshash":"c525b4ccb2d2f06a43976575813f200bf33ea999b54d8050e669d8d1bcb858d9237fb8","first_seen":"2025-12-08T11:02:52.845424Z","last_seen":"2025-12-08T11:02:52.845424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":36,"dns":13,"connect":8,"send":0,"wait":9,"receive":26,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.DK1wTDFI.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7c9eab67.d.m.DK1wTDFI.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-1c0083a97388cb40c5e4094be1f3928e-171739f024ef0da8-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-e240\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57920,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (31305)","md5":"72391357aa9d97d9be0828fd9ebb6b8a","sha1":"6c40fe4a60ef9cd3f5be9e144f8ed6659ad195e7","sha256":"7834fced6a80b514c1eb304058e3d8251346fd1d7d849e0fc0455108da344bfa","sha512":"380d306febd0b610f706e71cfea54b8231f99258f6af0e6ba88a298001b570ff5de1d73271b8c411dfb575f36f0641f43c3729e2871caee54ebbbad97cdc41fd","ssdeep":"1536:lU7od4j0bJdiUQbM9uvtmiC9vUJxmUlcDlElc7T1:lefjyeHwl8cV","tlshash":"a1433bcef972227077fb1160a46f0402613a67017419c4e9bdaf9ed42b92984d6e3f7e","first_seen":"2025-12-08T11:02:52.846224Z","last_seen":"2025-12-08T11:02:52.846224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.7dqxrSMJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2df41dfd.d.m.7dqxrSMJ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5339\r\ntraceparent: 00-b17056c762bdfc5b4cb1fe39609992c9-e0e26c38bdef610d-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-14db\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14692)","md5":"2efe63944b901f59760467fead768839","sha1":"54e35837b163bd9e167f7a678331ee89a789fe7b","sha256":"ac3309a950624e4cbeb2fee3315e60bc90ae0f4e173a24534d5f645c09673b9a","sha512":"b7aaf0ef097b86af4a6a0223f2c3d8788f6c323dd92ba91ef4b4747f47d82410812939feffd337d088e8046f7ac90d5b15227d35763d2a4387e810e58144b043","ssdeep":"384:8ORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6n:8ORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFD","tlshash":"de6209f170ed657043e616e0a0b70106e6e9512830c9c4e0f59fcafe45eb980a967f7e","first_seen":"2025-12-08T11:02:52.838938Z","last_seen":"2025-12-08T11:02:52.838938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/054854ad.Ex9bFnwt.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/054854ad.Ex9bFnwt.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 4339\r\ntraceparent: 00-a20935b05add2912655481c6acd7c97f-3e1dd919badd2c61-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-10f3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 167422\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-06T12:31:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29029)","md5":"9ef912c6ec728a533890823bedb1e1af","sha1":"c5d089da28a137d084180e0b6faaccfb70a6b03a","sha256":"88485b3782bc80bff39059bb9d03b975c29f23bf1a4ca9bc5ec244fe553a6e5a","sha512":"0015b833f2ab3478c2ebcf220abed9c28d02799d09fb0a4df9b0724dbba824ba2e99c73ce85e6c0d8fac2e726726a1d7cffcf419b580613c088679658b607f82","ssdeep":"768:vTkc5vK1Y/sI9DyNyg3T1S3bpmEFOwmUQ7:Lkm/8qFF6","tlshash":"e5d2102ede1862a9b4a6907af5e45f4f6404e847e5364659fd51be2ec0c3fa2332730c","first_seen":"2025-11-22T11:34:49.830209Z","last_seen":"2026-01-25T14:09:20.087519Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/3oaksgaming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/3oaksgaming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8811\r\ntraceparent: 00-285ead2239ff3e6f8be1afe2eec0b3c3-e7066a6457b08352-01\r\nlast-modified: Tue, 10 May 2022 10:18:38 GMT\r\netag: \"226b-5dea5a5ee2249\"\r\naccess-control-allow-origin: *\r\nexpires: Mon, 29 Dec 2025 20:30:46 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 743464\r\ncache: HIT\r\nx-cached-since: 2025-11-29T20:30:46+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e28b306999ed834dacf69c8965baddb","sha1":"e031bce7733da766b65c2e100328a86fa6783922","sha256":"72e0e0c5163c21522c3edc0ba452c797de75960afebe62fff314a3c0ecf00aa1","sha512":"cfcc55b5213047e77da35b8951655c2ce7fdece6984f9b6d3021f9c187355dfbee7d4e02b714c23a4b251ecf8076ef79d5e894e6e08c6133dd18e3ff25dfd450","ssdeep":"192:O7eR67oMkUbQzbCJN3R2DXedKi4L0X1KSv/7DiqQ26tG:O7q60Mk6Qk2DgBcSv/7DiqQ26tG","tlshash":"6802e8d47b38c6f0f049e3bdc70a40b936aa78ebb852c9a4d3b46d1fe49502c59194db","first_seen":"2024-12-31T04:55:51.589611Z","last_seen":"2026-03-31T00:45:46.155858Z","times_seen":52,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/page_view_events","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/page_view_events HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 907\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":907,"data":"app_id=cnjqphyx\u0026v=3\u0026g=1c8b10c3ba5bdb30c0d5a8900598f28ff649f36b\u0026s=85a78ebb-1cb4-45f9-8a0d-8343dc1b4c4c\u0026r=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=4b174b55d62235ec\u0026internal=\u0026is_intersection_booted=false\u0026page_title=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%2243df5c37-72c5-4092-9e26-dde4247476d5%22%7D\u0026referer=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***\u0026device_identifier=2133e351-8008-4d94-9ced-e05cd5b6e9d8"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\nstatus: 204 No Content\r\nvary: Accept\r\nx-intercom-version: 4e7dbcd0477e46c7ffe1f0e569035ce13440b396\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-request-id: 000j4rehuhbgdqtoant0\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache\r\naccess-control-allow-origin: https://leon59.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.080490\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0a604e7e52993826c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 175\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"[{\"id\":\"d8dff18c-b0d6-4c68-b506-998ad5978caa\",\"qKey\":\"5b49cd5e-162\",\"operationName\":\"getSpintaxMetaData\",\"variables\":{\"options\":{\"routeName\":\"home\",\"routeParams\":[],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":629,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"01d28da7dd637828f4088adfb67491d7","sha1":"b5f61083e8a74091d1747ca8f726eb39f0f6ddb3","sha256":"5eb110f2e5d49c09d767a6cbe37eccadae4bb2cbfe6707f22ff9ff242e32911b","sha512":"a7cbb8e756b9830765a38981d136a6a2712bd2d7a9bb06cff81b432365933dd08c751390dcc32a702c64c210accbaf849a3bf6c512a53b4ca77ff7b8810b283c","ssdeep":"","tlshash":"6ef00c05af925c5c2c18d022fc1cf44faee8a07f756a715615d4bc1d74b333c9a79022","first_seen":"2025-12-08T11:02:52.848047Z","last_seen":"2025-12-08T11:02:52.848047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1bb7e2cc.d.m.CKYM_UiN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b5dc9f394d6326a290179658f2212154-3d7e33ddd53c4631-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-53a8c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"394bcfb2947ebbe4c75dd1cef148fb2f","sha1":"6a715721befdf0fa3c032d90c7602bf309e3afdb","sha256":"35053a1dafea49a795ee0aa24310d98d6d4f4e450db2e2136d14a86dd4ee43c9","sha512":"d3df1503d9b990744131f6191c000b824823baedf1de33a91b5efec3059d5fb4b3657df166bf7fc2b1ae4bb34835579de1de632ed1af091a8899ff4105f5bdd6","ssdeep":"6144:AN3UyF5R6fq/nXUBL5uz2opBh/5OVJdrrSUI:0Uw5RJH/5OVJdfSH","tlshash":"a274c619ea116ee336f5381eb16a2ae370325b113b55c27600da5f393e2f80cf5275b6","first_seen":"2025-12-08T11:02:52.848863Z","last_seen":"2025-12-08T11:02:52.848863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.BrnQZCIe.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.BrnQZCIe.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 17415\r\ntraceparent: 00-e5a4a4c4982430d47d7b6761bd25c466-6a0c8daa6787ae1f-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-4407\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"493d5f043be02358a6d7a9cca21c4c6a","sha1":"58ef21d1a0c0fbfefcb518ef3104f2a01b52b19a","sha256":"4950025d194fc855b4ea7a2fa3d59198d7963bf3d2d83611bc101ff4c507f1c4","sha512":"0f9e3d1fe47bcc1ea82187e2a06a52a2b37bdfd4497fb2b5269c2383309d238fa47a9e38af8378260935fdf7be7d0c88194ad1cc068766ed56035e5ccb7a3c29","ssdeep":"1536:pXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPP:p2YMGB2C62PmQJDbPP","tlshash":"b87363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2025-12-08T11:02:52.775884Z","last_seen":"2025-12-08T11:02:52.775884Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.GP_QzcML.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f06cd424.d.m.GP_QzcML.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7421\r\ntraceparent: 00-323cb87c51f01089489c22438142b53c-4047bc30f02d80db-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-1cfd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22698,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22647)","md5":"da3e89138c3278064cdbab9d2bc1c614","sha1":"1258128ea7571fd68d60cce7bb3197ae3c72fd7d","sha256":"602b47a9d557805e6e550699afe8acbc9ff0747657ddb384990f977451e5ca0d","sha512":"426a2ed89a6331e4fdfed0fd9205eb0af1a0f8933ae4881d6e8823567b80140ac0d4d2cc15dfaa843c1d7b84a324c7ce1dfc4004b0bae1f08ddcb1176a20c6a5","ssdeep":"384:wB4O6X3LgUudXm98KNK9lCEe6woDOpXxM1wfRTEy1hl6qgwmQbk9QzOWpUJtbFRU:wBCL9udW8KNKFDOpBMSWyd6imQbk9Qz7","tlshash":"82a22bb7236293b246ab018a50770543d31407d5f508c4f17afeadae35b58a2e326f7e","first_seen":"2025-12-08T11:02:52.836715Z","last_seen":"2025-12-08T11:02:52.836715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026_p=1765191714849\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=687359927.1765191716\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026dl=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1765191715\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026dt=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.127.0\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon59.com%2F\u0026ep.main_domain=leon59.com\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1765191714847\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=ru_RU\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=10609","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026_p=1765191714849\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=687359927.1765191716\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026dl=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026sid=1765191715\u0026sct=1\u0026seg=0\u0026dr=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026dt=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.127.0\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26PASSWORD%3D\u0026ep.previous_page_url=https%3A%2F%2Fleon59.com%2F\u0026ep.main_domain=leon59.com\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1765191714847\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=ru_RU\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=10609 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon59.com\r\ndate: Mon, 08 Dec 2025 11:01:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:169:0\r\nreport-to: {\"group\":\"ascnsrsggc:169:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:169:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":65,"dns":0,"connect":23,"send":0,"wait":31,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/f06cd424.Dd74Yc_c.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/f06cd424.Dd74Yc_c.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ntraceparent: 00-65cacd8d6982549ddb8e687345f5970c-85206a28f573efb8-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-1ce\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 133653\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-06T21:54:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1431)","md5":"6cbf540dd2a6c89fc9e82a987e8c628f","sha1":"4370f7b310a28065a6f37b039edbb6ab60f7c577","sha256":"f3cd42fd3531448a70732cfd5b1b308395116a6b0e199d0bfd4e4b44aff806c7","sha512":"0c2f430ab4002f2839fe83266b95e826c9f27bcea6a1742f58bb3001740b32e6b523bdd43c18d3a3484a5b8e2f7af52ad5a44e9bbf39d2b4daffa8f8194ffc35","ssdeep":"","tlshash":"05219ef3054de1394807b68b6470ca4ec52ad165ba6b16b812ff712f41cfef05e116ac","first_seen":"2025-09-19T02:19:58.389648Z","last_seen":"2026-01-05T18:44:37.74079Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/dragonsLuckPowerReels@3x-min.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/dragonsLuckPowerReels@3x-min.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70195\r\ntraceparent: 00-71dd3483e2b3430547f4a068a196d8b4-4c42ca655344b5ae-01\r\nlast-modified: Fri, 22 Nov 2019 13:11:32 GMT\r\netag: \"11233-597ef2711d640\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 27 Nov 2025 13:23:51 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 907534\r\ncache: HIT\r\nx-cached-since: 2025-11-27T22:56:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70195,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 375x561, components 3","md5":"f31a9208363bc527041a0f550de8d502","sha1":"c978fb023731faccdabd08f326f7297d3c0aca93","sha256":"cb24eb24b7056cdddc01b29b1c27aa821fbd4d0ed97d318ed2d081a0927f1186","sha512":"99551f4bf6c3b27f6f08290524a57d2f4bfd5e125b78d6c5b073f6e16f3a4d2e51204ba1014c9b156c127caa9856324fd8971215d1fd1bd31ad46ec0b756b530","ssdeep":"1536:nm1c8XsqqE4R9RITc4JM2zfVOjFOcFHmSdPqbSMLB8/isSwXMoYkLKCr:m19BqE4R9RITcGM2ztWFOcQ2ymMLqqZU","tlshash":"1063028d5e8ab4a0ada63170c5bd861c3f51b15037568afec0bf2b7436cc2d9861e25f","first_seen":"2025-12-03T23:02:23.13773Z","last_seen":"2025-12-08T11:02:52.84977Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/tada_gaming-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/tada_gaming-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10478\r\ntraceparent: 00-16dc0ed62644b94a096e21d4eaf244ba-8169aff49d8dc1a6-01\r\nlast-modified: Wed, 17 Jul 2024 14:08:05 GMT\r\netag: \"28ee-61d71fdb69b21\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:55:04 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26bfe02c4096fb7c9ca21b15f7e28f83","sha1":"031e1bcf6815a6c39cadeb75e4650ba9e8fccae4","sha256":"6689d9fa9aeac5efbbdd54728b667aa6426567b9a6aae44b4059d0a3b63088f9","sha512":"8c0c61797c51a1677bcfc76cb62698b504a8ba838711b0b37a7ae8eae7193fb152552541a77e43364f89ef22c8a782d1aa90d2c1cd15d006fec759cc00581520","ssdeep":"192:nVa7bNesvytEWTXfZeqU9HwvZJOFs6E1Agwwka8E4y4pUI:VGN67foJ2CF+KjwLSpT","tlshash":"9a22a6a9677da9b8f004f3fccb1250347a5934e77892ca61c3a6ae0eb41584d4d9dce3","first_seen":"2025-03-04T01:59:19.627135Z","last_seen":"2026-03-14T07:22:16.791829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3d6acc57.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 20574\r\ntraceparent: 00-6071191bf637e05fe18e1d4d5eb41a68-19d14ff3cdb34bea-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-505e\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764334\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.CBKTq9mE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/71c69379.d.m.CBKTq9mE.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-10d3e7e2c44756646f0b263ba1ffedaa-df5010a9b4aafb4f-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-1205\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4562)","md5":"45eb20741e03cd96fca2fea13d766af2","sha1":"5531748e71ccebbe3a7a46efcde00fa1b285c064","sha256":"024bd164949d09788850fb55975749b8ed87200d6cc0ae835c945e52e384a4ea","sha512":"5a4f4f5624d7c27c199b99cd97627cef03e429fb9ca96c1b608300b57dffd3d38a1e3d617dddd4f85de05c45345e4c8f81cb6d871b73a50388a4528a8d703fda","ssdeep":"96:rvqwLxhma0uGzXt8IAs0uGzLsJdvawL8ZuGzhrMvrrPAXxwWSTxOj:+w9w4UpJUL2dJUSjrYBwLx4","tlshash":"c391a74d3c7ee4b0abee589fe1690c099e2d0fa611654d4194bf04bb26b7850e252827","first_seen":"2025-12-08T11:02:52.85175Z","last_seen":"2025-12-08T11:02:52.85175Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 269\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"[{\"id\":\"3d5b7be9-00f4-4501-b33a-c04a78f4941e\",\"qKey\":\"39df8872-1248\",\"operationName\":\"getBanners\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"343f33f5-752c-4023-b21c-eb74abb73a05\",\"qKey\":\"6352b886-793\",\"operationName\":\"getAvailableForms\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63303,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (61551), with no line terminators","md5":"118f30d9f26943bb4877e68a22b16d2f","sha1":"f716ad6c5c6e41805fb54f0e1d8999b42ee8baad","sha256":"fedbcd61e549aab0bea26a4f8beb7376432bfb506e2618c451a58b3fd184b993","sha512":"6b22c6fb859956a913b3352e556bebafb8926d46c36c00eba73644414616788fed40e49e0161ed6346cdbde381265877ff517bf7cc2831a20802fa591970d0c9","ssdeep":"1536:/J4ZRMbQdihNkzI1aZRts3UWUpd1VGAyVyjQvQpsHOLsFGBOPUzuhEfGjE1k/k9X:+MbQdihNkzI1aZLyrgLVGAyVyjQvQpsY","tlshash":"e153318a55ac7c7fd389a28638bf3915620f3017b680ef74a5ad9f6452f4dba013305e","first_seen":"2025-12-08T11:02:52.853809Z","last_seen":"2025-12-08T11:02:52.853809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot.C4J6IXOg.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot.C4J6IXOg.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-9d8148ca6cfb1364d4603f1d961b388b-38177652ca48b28a-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: W/\"68e7b338-2a3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 4155450\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T08:44:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4cfed5dc8f597a9ce3ace9cc0d54468","sha1":"d02e363b2a9a00da32b6a9d73a03b904ce5650fc","sha256":"86ac12bafdcfdceeca1301bec6db2de3b5d02cf3982a6f11da62e2c383f61662","sha512":"36716691243cea3866beeefab568cc29f891e356ae23a8d02ba59549a74db3119b02b40f017f4841610f27bdbdc17c4f8aa1b34064d10a6c0e413f36b7d1ee19","ssdeep":"192:Mw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0q:M6YAXsI14g7V6scBUCVz","tlshash":"812276e437f9a3e4f106f3ec8756e4247e5328fa7a61c569c3aa2c58ea4145c0d98cd3","first_seen":"2025-06-01T01:07:13.940104Z","last_seen":"2026-03-29T15:19:13.408178Z","times_seen":92,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/endorphina-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/endorphina-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 16098\r\ntraceparent: 00-2f84b9cf109ce8a42939096afd304f58-fbe3176d09445bec-01\r\nlast-modified: Mon, 07 Feb 2022 08:44:01 GMT\r\netag: \"3ee2-5d7699a223ae0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:55:04 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16098,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96c71b7acd3c729933db5332eb77865b","sha1":"67f7e4492112e519ef415fea25d63ecac6b8f182","sha256":"7c424f8103386b8434c09e0e47245dc1f2bb1f314196c02102bee60225e60b77","sha512":"ae0faa56c88a4f01608d2aaaea4ce8e963757420bdc72762bb28fe69b55675803c66dd397eb33683ebbc75e11c795c3e6667be6f59ecc5ec657b34eb800ef993","ssdeep":"384:jK2MeH1jtFjVbLcMeasG52enShb9/d+9F/:jrMeU7GNNz","tlshash":"3c72882aa7395b79e031e1b8c69180307d4949cd6490f3e8c7e0df3ab5780ed59b5ad3","first_seen":"2025-09-23T04:33:55.522552Z","last_seen":"2026-03-14T07:22:16.823772Z","times_seen":37,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/assets/sprite.DrTllidW.svg","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /assets/sprite.DrTllidW.svg HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-e5f6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":941930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b0ea40a7f7ef98347083ab77a513aec","sha1":"6fd9f4b3592912648de03ce50c8c091dcfb1a3b1","sha256":"107d9035331c79d90ad39b5e146978cdd2ad1ed7aeb7816ffcf071755b6dcd98","sha512":"b04f82936b1497104472645db83524167ce0090a45359d656531bea5a6d9ed35ecdc9eadbe8ea8682398045f6ef6f5974939a7a1a30bac702de2f13d03206831","ssdeep":"6144:lZWDijAXtLUHMqeEXTPYUrIVfV+LcPLiD6aL9oJ2OYHNAMoJj7a+:lZfeipIacD+y2fc","tlshash":"c115dcc51128538ca04bba6ddb7ffec0172f30a7795545821bafc79c915f680fb8a868","first_seen":"2025-12-08T11:02:52.856127Z","last_seen":"2026-01-25T14:09:20.139525Z","times_seen":17,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/wa/collect","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/\r\nContent-Type: application/json\r\nContent-Length: 46\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"metricType\":\"VUE_APP_LOADED\",\"value\":\"1495\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-3b2afac31bfcb0d19dfb69b56ca3d6fe-320cb0890a0dffbc-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250579\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.TiN0eIPo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/06b1eb38.d.m.TiN0eIPo.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-d6116d9f5f8985fd2f6cea310c6a27be-11ae55ec206d4679-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-13443\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7e7e5a3a81fc9eb32ad2bec6259571c","sha1":"1ad9e5ca8d4303c3bc3509dc9673016d2677b5f0","sha256":"21414262f94d462ef16cbe6532a905e530473d43d676b92d915f16c3edd35b41","sha512":"2e7dcecb46607d0d5e91d9b45ab428b06459e27b2c3a8a24c2696c715d90cd2ece1e2e178e3d442debc5afcc0014a68ecc66eeccd30e66fb037a6768a7843655","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwm:zGmWr9di6ZPK1oUVc8hbS0N664r","tlshash":"597329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","first_seen":"2025-12-08T11:02:52.843704Z","last_seen":"2025-12-08T11:02:52.843704Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nContent-Length: 830\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":830,"data":"[{\"id\":\"7fb8488b-d74f-456c-aa0b-aad6daf3fe34\",\"qKey\":\"93dd9da9-132\",\"operationName\":\"getCookie\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"4064abaa-f233-4533-adf4-ae67e141c85a\",\"qKey\":\"790886e7-467\",\"operationName\":\"getRootSettingsInternational\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"3fdf9146-af3c-47e5-a9bc-bf1e3f352a86\",\"qKey\":\"b120a8be-122\",\"operationName\":\"getApiSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"2f151da6-75b4-48dd-8354-c63558b2f20b\",\"qKey\":\"3cefd5af-15894\",\"operationName\":\"getSiteConfigSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"f087be87-54e4-4e73-a078-71d18ee5e6f4\",\"qKey\":\"f9753f3f-92\",\"operationName\":\"getRoutingConfigs\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"6d7f2d23-ffb4-4866-b854-88b1267ded2a\",\"qKey\":\"c2e6684f-112\",\"operationName\":\"getNavigationConfig\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; Max-Age=2592000; Expires=Wed, 07 Jan 2026 11:01:47 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nreferer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; Max-Age=31536000; Expires=Tue, 08 Dec 2026 11:01:47 GMT; Path=/; Secure; SameSite=Lax\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159120,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (58917), with no line terminators","md5":"409d1a46a5a6bda80684931e3f68e832","sha1":"5275836cd9e4db4d829fb86f3f5a6e3f9270b5e4","sha256":"b042171dba3729f6dbbcba75fb669e62769beb9cd4f3aa77e8afb8f867e64711","sha512":"9541dd0ed61eee23a6a7a36fc632eaf554e0f3d0d36a6ee5a152252ad6939d37ed397f5aae73de96df433514c4e9c3cd7dbcfbb0247c41797ab5f0cb6e071e03","ssdeep":"3072:FAD04TLLe41E02L0804wuo0804wcG36O9bo5Ih+niIxA52f62gvmxKvWT2/gZs58:FAD04Tes7G36B5Ih+niIxA52f62gvmxn","tlshash":"c2f3d735221cecafc043994eeb3e3f37146d907e36cb7988585c9d6aa0fb1b4913165a","first_seen":"2025-12-08T11:02:52.857588Z","last_seen":"2025-12-08T11:02:52.857588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.CMaR6KUQ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/ce584242.d.m.CMaR6KUQ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1660\r\ntraceparent: 00-1956f2505e2670003828a1dc2acf11f7-9ad366e28dbf602a-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-67c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5424,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5373)","md5":"1a72264b2d64ca59f20a79f7cff6fa6f","sha1":"1ff6880f00158d59964a10c2923a38efe91d22ae","sha256":"0109a66218d7fa9f8c83bb631a57f87bcbf27198e77ef025c892a0637b251690","sha512":"122e4f000f3fd6cb5eb287128108545a5c2d61a22ffcf3b42fc9a781ee2c77670512c8be64d695eb1e660874e1ed162280a474df30566fa9d85ac1f623297ab2","ssdeep":"96:uX3K+a+8Toj1uqF0sMUZZFk621AJ9uk8SisBBGwyW:IZySsqCsTk621AJ9B8c2wyW","tlshash":"8eb1020b7625b3f986ad2a28d9c422309a3d6fcd631404d1fafec0197249679c5b5bcf","first_seen":"2025-12-08T11:02:52.859024Z","last_seen":"2025-12-08T11:02:52.859024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7bdd72e8.d.m.Dg6D--ca.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7bdd72e8.d.m.Dg6D--ca.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58736\r\ntraceparent: 00-0741b6168ca2491f7bfe9d9b3a1a5795-2f035e9a2ea724f7-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-e570\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24590)","md5":"0d1dbd912093f8c1d2cc068307a5972f","sha1":"67854c0655b7b5c1a49732c580c629393689d08e","sha256":"b2dd4fbfb3c41be04dfb03d3a0c89c971d379db151a986917b12112c281180ff","sha512":"6d03e0748cfce42670429d539e88773b538f6a7b505aca2270ccefd7372a044bd6c405442b6fb6327276044e5af6963551d3a22a5898ec8f9c6e074fcd00c4e3","ssdeep":"3072:u8NbFH3qLe5FEwSwXwOlczFAaugR6iVHcVHl2po3y5HL9QYl3tx4C4JdErZ4O5L1:TLFDgOuFRDV8/2pA/M","tlshash":"93244ba4738ab43547c451a4902e1b22f17a9c6a545cd018faedcef61fb8446637ef3c","first_seen":"2025-12-08T11:02:52.85977Z","last_seen":"2025-12-08T11:02:52.85977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/favicon.ico","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 05 Dec 2025 09:14:47 GMT\r\netag: W/\"6932a287-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-03-29T15:19:13.331537Z","times_seen":277,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"108.157.229.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/cnjqphyx HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3161\r\ndate: Mon, 08 Dec 2025 10:57:58 GMT\r\nlast-modified: Mon, 08 Dec 2025 10:57:55 GMT\r\netag: \"d6dbc494df31b6c3770ce947252e190d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=300, s-maxage=300, public\r\ncontent-encoding: gzip\r\nx-amz-version-id: YIyKR7apKBSBHdEdJKSDWqtxjuqVw4us\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Error from cloudfront\r\nvia: 1.1 973ba1a14b3ee409c424730df6f1e51c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: lmY1TThGtRtyPNzom-RoINGnWaESJw9Sxln8DbKAAqnp3urGCz39LQ==\r\nage: 237\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"c9c86dbc93b69b44e08dbc35c025b18b","sha1":"b6faabdf02f5b19acb37fbf0b9e69649d3f05613","sha256":"e2010d107ee2f7843ac9364ce608f1ba749a5e0807e03f1cfb913bd148ff957d","sha512":"1f8d762aa831bc441c484d69948c62eec66ebbda6a3f61ab5cd7d4e57c4f6c7db224d6b4e0870aa018ab12cd93a790af40afea7d45cbbb04615e205715a2e939","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfposG/zfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOxG/MSdZ935pqUP","tlshash":"bbf174eeb6c2793806a31566623f770c7f3b6544284944a0d066c8c8797adcbc12bfad","first_seen":"2025-12-08T11:02:52.861115Z","last_seen":"2025-12-08T11:02:52.861115Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":38,"dns":13,"connect":8,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-b5ef4d197af82a7defae37ef2bad1bc4-1dcb2506561c836a-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: \"68e7b338-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 4158250\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T07:57:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3d6acc57.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 20574\r\ntraceparent: 00-5dade13a893922191c6fb94befd3bbd5-ce22a0dc58654f1a-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-505e\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764327\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:39 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472149\r\nlast-modified: Tue, 18 Nov 2025 19:00:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-04T14:12:03.989082Z","times_seen":18059,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/wa/collect","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\nContent-Type: application/json\r\nContent-Length: 47\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-null; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"237\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-bb5d5689a9447d762549f247fa348551-0ebfe818999d24cd-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250579\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472152\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 987\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":987,"data":"app_id=cnjqphyx\u0026v=3\u0026g=1c8b10c3ba5bdb30c0d5a8900598f28ff649f36b\u0026s=85a78ebb-1cb4-45f9-8a0d-8343dc1b4c4c\u0026r=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=ddcfda937e11ede2\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026user_active_company_id=undefined\u0026user_data=%7B%22company_id%22%3A%22LI-LEONCASINO%22%2C%22language_override%22%3A%22ru_RU%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 4e7dbcd0477e46c7ffe1f0e569035ce13440b396\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 000htumj23bbf7lc34gg\r\netag: W/\"d7387cf4d672f8c823370b31af370120\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon59.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.311977\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0a604e7e52993826c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5958,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e249a8e274fe7d996ca6d085064657e","sha1":"5235fa0e0b633b642cf4f0982944698c5f2b64d2","sha256":"d7387cf4d672f8c823370b31af370120b5488ca99e492396a54fd79fa43d84a7","sha512":"b9d0fbe80594df6ca7cd4587d1056fdabc56c8680e340c0119dea8320bf057697f45e9da3474595df4817afaf94cdedc98f317863e6490effa3453d7ae4bf03a","ssdeep":"96:4rHa7pOaU+zVD2iRHAQWGjzKWMlzJjGMli9B1NAOU5wHwhPD1kthetnX:4rHa7p5U+pLgoB1+1SetX","tlshash":"ddc1664c89481c7ea38bc3dad365bf06077d41b7b2906d88f9bcca2d21db295127b207","first_seen":"2025-12-08T11:02:52.86411Z","last_seen":"2025-12-08T11:02:52.86411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":204,"dns":2,"connect":96,"send":0,"wait":410,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7fd5867.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 748\r\ntraceparent: 00-66695b11f442c128e66db9e8de8ab4e3-a63e4bc0fa28c9c4-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: \"692f10bb-2ec\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250576\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:30+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CC9_Gdie.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-970279044b0ec93a76812b429d1b89b0-be9c67e219c32a39-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1398)","md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":57,"dns":1,"connect":4,"send":0,"wait":500,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/no.s6YevAOV.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/no.s6YevAOV.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-0882e84e1fa09aba438befec56744003-7982151d8a48eb08-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-14a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 4149954\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2072cb659bfe23b3d0163006af1aee6c","sha1":"693c27833ee0647755f2b13021bedaeb59c23662","sha256":"b90d2629e1cea6a55bc55ab7cf2edbff2d1a593cb252cf20ddaff8525f97426b","sha512":"bde0651392ad6f40c0d2890f8c74032eb7faea38ef00b7c1c87318cbe04ab6cb577655325606c92257b3470319e415c1bf890f81091cbb649ba01b30b929230e","ssdeep":"","tlshash":"7ae0c2dde37cb820cb1083510f2d72f29695f4dea2d521d7f94069a8212e6878ee3ec4","first_seen":"2025-02-23T03:47:48.678197Z","last_seen":"2026-03-14T07:22:16.769304Z","times_seen":62,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/megaways-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/megaways-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1021\r\ntraceparent: 00-c9baa1a32988167de1cbe8a93883bd72-612ec0c3dc252e0d-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:33 GMT\r\netag: \"3fd-61bf36b728ef1\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 10:56:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 259494\r\ncache: HIT\r\nx-cached-since: 2025-12-05T10:56:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cdbb1a91e3cd4e2e7727c66710a767","sha1":"67fd4051cf6236f406baa5b90f6ccbe5825867e7","sha256":"9f37e4d79b64613286fbf83e86ba1a2e41279be0c2ccbd076ca5b50f9386a8b5","sha512":"e582d46b1834fa9c5e03687e9bdd314ed39cafa5b632828c632a048f39e8215927330d17c810270671597a094f563bf7c0a2d5f1da788468d3064afac762ad93","ssdeep":"","tlshash":"c111abf7a1e5b6c4a60dcb71d926e5b41e1f38f93eda048293801ad0bda02719c8dcc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.152577Z","times_seen":61,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.DHDNCeYY.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 3315\r\ntraceparent: 00-c74081db0f91eaf9e1840329423111a6-4100d72b2de7677d-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-cf3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764335\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440)","md5":"4d87269e44c4639cad79282bd3e56c65","sha1":"31e83329fd260eea94486c9ce66b2df430dc53e0","sha256":"f361154c7c7c11401aa0e630dc90f18f717534457d9b610c16e51bd290701924","sha512":"b905a6a411088e9c3c2ec61d19fb0064b0debc191037dde41e112e61fd6de6cde224ad508f724319f6c2ec635880afb11a986e9812d8eb9dd83ce4c5de7a3663","ssdeep":"192:Jw7vLZ03o2kZVz8KGJCRjMiS7cZmnDA3tMHWF1vHOp8L803Y4FUfBFo7:K7vLCu3GWJYI153Y4FUfBFo7","tlshash":"b172a7d50d64367abb7bb11fc6e2aa0ca31acc46de9326d5b5e1e12c47c638142f3d04","first_seen":"2025-11-08T11:37:36.045292Z","last_seen":"2026-01-05T18:44:37.846257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/playngo-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/playngo-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4058\r\ntraceparent: 00-3029207fd69f24d065dab152c3870089-af6acbbc1a4c68b1-01\r\nlast-modified: Wed, 05 Nov 2025 12:40:59 GMT\r\netag: \"fda-642d842b1b8f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 07:55:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 616004\r\ncache: HIT\r\nx-cached-since: 2025-12-01T07:55:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd546e671acbd8904107f0a12ac564b7","sha1":"594c51208445a8a0350a0685744afddb7e20d7f5","sha256":"1dece0fa8fbd1f198d0c430a18a735fd44114f6d7ca896870682f2287a712e0b","sha512":"57024c021efc18027ef79d5143379a6d622195a79ce5eaf7ebf2465538ac73b7dd63b92b849158573da21df26d49733ac6e32c601b2517d9560042a1bb825ec6","ssdeep":"","tlshash":"e48142deaf5896f4f149a3b9661ad07bbf4305e56f818968cf140f07b80489c5ca84eb","first_seen":"2025-12-03T23:02:23.146767Z","last_seen":"2026-03-31T00:45:46.1678Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-fefff5a049d1846568b35c7c6e15203e-ba4b28606b4a0e4d-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250572\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages3.gcdn.co/HRJLWPLB/files/top-nav/vip-ic.svg","fqdn":"cdnimages3.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /HRJLWPLB/files/top-nav/vip-ic.svg HTTP/1.1\r\nHost: cdnimages3.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-27156039985072cd304abba8e71c77d7-e596e69e3f3a123b-01\r\nlast-modified: Mon, 29 Jul 2024 11:38:11 GMT\r\netag: W/\"106a-61e614bbda1cd\"\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 157565\r\ncache: HIT\r\nx-cached-since: 2025-12-06T15:15:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ef082510b46a6aeb00c0df559b2de18","sha1":"b483a67c1a80a1db0afdd67246d5faf47f846f42","sha256":"155705ad90a321b396a52fbab695bc92f9a2046aac18371fb9a172657e97c2a6","sha512":"b23cde6916243bb8bd8695e5a97722d815217395a2727cd39aa9f459f344b88c951a260a56557d6bab22af21307f9765e408b8f67d310970747131cd6fdb2d11","ssdeep":"48:e8O6IHpZU+i2/zId7HoWsiN0thXLiJpwO/b37IvgFLQLZi/hABNFkg62venBHcA2:go0kMWsA03i/bYgF0I/hABLkrQeBB5K","tlshash":"c681892aa144d61d5883e24dcbbf91e1134e4066f1ea92dc7affd3aca10f4d4f946834","first_seen":"2024-08-31T07:43:54Z","last_seen":"2026-03-29T15:19:13.373051Z","times_seen":108,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.DHDNCeYY.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 3315\r\ntraceparent: 00-50df77f459e8d7823946793523f02f06-ecf443c91b203c61-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-cf3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764329\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440)","md5":"4d87269e44c4639cad79282bd3e56c65","sha1":"31e83329fd260eea94486c9ce66b2df430dc53e0","sha256":"f361154c7c7c11401aa0e630dc90f18f717534457d9b610c16e51bd290701924","sha512":"b905a6a411088e9c3c2ec61d19fb0064b0debc191037dde41e112e61fd6de6cde224ad508f724319f6c2ec635880afb11a986e9812d8eb9dd83ce4c5de7a3663","ssdeep":"192:Jw7vLZ03o2kZVz8KGJCRjMiS7cZmnDA3tMHWF1vHOp8L803Y4FUfBFo7:K7vLCu3GWJYI153Y4FUfBFo7","tlshash":"b172a7d50d64367abb7bb11fc6e2aa0ca31acc46de9326d5b5e1e12c47c638142f3d04","first_seen":"2025-11-08T11:37:36.045292Z","last_seen":"2026-01-05T18:44:37.846257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1702\r\ntraceparent: 00-e253338fae4ee259eb17d325b9f546de-8b60bb92a513379d-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-6a6\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764328\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon59.com\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon59.com\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 08 Dec 2025 11:01:55 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7a71a6d3.d.m.B5bZndq4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7333\r\ntraceparent: 00-3a47939fe2a9de3609ae3a8f531249da-d7798df779c57303-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-1ca5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764334\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28320)","md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7bdd72e8.d.m.Dg6D--ca.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7bdd72e8.d.m.Dg6D--ca.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58736\r\ntraceparent: 00-e7be2520eb28b39ba215081c2416a65d-e2e478899c25a55f-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-e570\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24590)","md5":"0d1dbd912093f8c1d2cc068307a5972f","sha1":"67854c0655b7b5c1a49732c580c629393689d08e","sha256":"b2dd4fbfb3c41be04dfb03d3a0c89c971d379db151a986917b12112c281180ff","sha512":"6d03e0748cfce42670429d539e88773b538f6a7b505aca2270ccefd7372a044bd6c405442b6fb6327276044e5af6963551d3a22a5898ec8f9c6e074fcd00c4e3","ssdeep":"3072:u8NbFH3qLe5FEwSwXwOlczFAaugR6iVHcVHl2po3y5HL9QYl3tx4C4JdErZ4O5L1:TLFDgOuFRDV8/2pA/M","tlshash":"93244ba4738ab43547c451a4902e1b22f17a9c6a545cd018faedcef61fb8446637ef3c","first_seen":"2025-12-08T11:02:52.85977Z","last_seen":"2025-12-08T11:02:52.85977Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/scratchcards.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/scratchcards.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2305\r\ntraceparent: 00-dff5683df4334ccf42574188f0689651-1f1206a0fa97f0f6-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:25 GMT\r\netag: \"901-61bf36af57c9c\"\r\naccess-control-allow-origin: *\r\nexpires: Mon, 05 Jan 2026 21:29:19 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 135151\r\ncache: HIT\r\nx-cached-since: 2025-12-06T21:29:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938141af1359f4354cc7d73a69af21a2","sha1":"3953b0622646db4fac74401cd03e3fffbeaee8e9","sha256":"9bb2c583bfe0cfe4ce25dcad5944668b5da72f52f04163654804a03238897b42","sha512":"0663be7226353fdf94b17a69c2b33aedb3fcfac06628092ecd2064f96859e0790a450d155bfbd3c58a264c4f26c673d70cbf32ecf133f7328b9369647ecdbd4c","ssdeep":"","tlshash":"e4410ff2ebe852f49547e76590275d7a369b2cba7f85cbcd82406bf099b40a0958dc00","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.233067Z","times_seen":57,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/18+-dark-44.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/18+-dark-44.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2763\r\ntraceparent: 00-cb0bd150b85ba191314ac29c58705a6d-e9765ca18ecb9c96-01\r\nlast-modified: Thu, 10 Nov 2022 09:26:16 GMT\r\netag: \"acb-5ed1a5d7a8816\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:37 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 869424\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:31:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e9bdf84336ba2f0d7fd0116bbc47e0","sha1":"5f1882ed3aa41267bbdb1c083902955e2a965022","sha256":"2c0b2b2f7ac364b363a152aeddf08ad89a3b4043e3347cead0206158492c8a2a","sha512":"f59720c3a786afb91c58de81a4097faebb49e15008f2918805b041afa60d8e790d2296ccc3b01b008992ca92135c59135f27b7c5760542999f8a5c7089e9b5cb","ssdeep":"","tlshash":"145101efa7d4b2c0d807e3b094094a793adf287f77158744425aaee6fb02094484e8c4","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-31T00:45:46.207178Z","times_seen":122,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/71c69379.Df-RY1xq.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/71c69379.Df-RY1xq.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 105\r\ntraceparent: 00-605243df1228f88853f9d199abadf843-4d82ed72c045285d-01\r\nlast-modified: Thu, 27 Nov 2025 09:41:44 GMT\r\netag: \"69281cd8-69\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 952448\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-27T10:27:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3423d7cc3aa7ac44d033e2e4be0b00d4","sha1":"a4d591bc0446811187b44bbc1b41c07a7f48f232","sha256":"152add0de253a858678d73d9988ee6214da2dc169ad58e26e2f95e472b50fed6","sha512":"65c19ef7f61a6266e6f34255b873f9d0d88f42971a124787b263063acf53f4c0759f3b40a563d4aaeeee269edf833b3921dea4e9b2fa89f82423aacd6cd8f2e9","ssdeep":"","tlshash":"87d0a7568df1d6336cd0590bb3444a8c30c29c0b85175b04c49a140cf4b359b3202384","first_seen":"2025-04-24T07:07:12.797229Z","last_seen":"2026-03-31T00:45:46.183155Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/BookOfGods2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/BookOfGods2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86242\r\ntraceparent: 00-8f7f2a2e1863b086501abe82e1e6c8e1-0af3608fe4dd7f0f-01\r\nlast-modified: Tue, 19 Jan 2021 15:32:28 GMT\r\netag: \"150e2-5b9428bda24c0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:52:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"ef4f201355dfda0b185294d8c4db3597","sha1":"11fb3ce01f48c7e8788af7154be69a315a656459","sha256":"a246edad75f2c6156f38f95bda0e17df6eef2147595663aefe04d8cc7baa376d","sha512":"86166868955aae3d61477208a65ec03b369b9b4b583c9457205546d1440fc84f0ee89c9a7546281bd081bf4b7942aea1ed4f0bb98216c4e7608df825d1e98780","ssdeep":"1536:MDmkJP6AT3wHUGPzQv9Ak6jPQQAktbJlaB0RhC/dzq8A5VDMOr2OSUnX7hOV6o8:XkJXH9Ak6jPJAybJlaB6C4vJSUnXe6r","tlshash":"9a831244a3b986d2672498453e47e53c1d9207eb3e638930c2bee9375781db603a3e87","first_seen":"2024-12-31T04:55:51.657149Z","last_seen":"2026-03-14T07:22:16.755131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/713ac740.d.m.B95bN3MA.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6107\r\ntraceparent: 00-aaab08cce6321730b13a3054be4292cf-938c4c33184b7c2b-01\r\nlast-modified: Tue, 02 Dec 2025 12:27:24 GMT\r\netag: \"692edb2c-17db\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 478817\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-02T22:01:23+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16084)","md5":"0405848403cfa0429fa2f47699697d01","sha1":"22cf713e2fdc92058a39d8506e8356242b205f63","sha256":"97740baa921c33bc558c28905646b56e7325b9426b03eaa3b91ec71a02838c6f","sha512":"a56ff3a1b91e93451ac022605c28603977cca89740bb22ceb91acf9c333d86ef4432ecb370a79de5657e3b14e62dc759ad13a560dddfb83f31173c4381468c88","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJZ:dxtL7PD4hsy312IhALo3aS++FwIaGPf9","tlshash":"6d72a4e93183b53593eaa9e7403b010af33c3944344f9494f6adaac63d7651352b3e7a","first_seen":"2025-08-05T20:12:01.845926Z","last_seen":"2026-01-25T14:09:20.083097Z","times_seen":94,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Dec 2025 16:58:30 GMT\r\nexpires: Fri, 04 Dec 2026 16:58:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 324197\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-04-04T14:47:10.838637Z","times_seen":18132,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/christmas-hat.CqSVa5RO.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/christmas-hat.CqSVa5RO.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1889\r\ntraceparent: 00-d134a8690df881700be7acc49a14246a-926418031a9db827-01\r\nlast-modified: Fri, 28 Nov 2025 11:14:08 GMT\r\netag: \"69298400-761\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 609449\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-01T09:44:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a081da84bcc4af12476a3687f3924dc","sha1":"6ccdb53c50f18696092cfbf8ba91ac3f8ce34082","sha256":"6c40ffd117394e57b25ce999a53b4c3aa3b6f86ac110ccdad94a168182f70fb0","sha512":"324cdbe5f0d1bf42f520d69dbef3b97d89341e82cb1d613500c5439daf12919f2b0c2a80ab50f0d5655952cf3da3a3d534f6ef2e8f2e8594c8240e46a93d1637","ssdeep":"96:Ubh4jZI5oU88CRAEtxDKABir/KLU+zQSg1uO2xQDJduqhaWpu0:0h4aSUdCGsVVQR87y","tlshash":"2b9172d82338538c59878a9d9f7decd4930ef0fd356682c516afe698904b9c4fb0b850","first_seen":"2025-12-03T17:22:24.016579Z","last_seen":"2026-01-05T18:44:37.871126Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-39.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-39.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 32963\r\ntraceparent: 00-69eab39e787e0056a65588cd2557fe92-075592786f1d6fae-01\r\nlast-modified: Wed, 29 Nov 2023 14:04:17 GMT\r\netag: \"80c3-60b4b02c9e9f0\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 28 Dec 2025 17:46:08 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 839740\r\ncache: HIT\r\nx-cached-since: 2025-11-28T17:46:08+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32963,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39f208963969a20927c77ff170d58fe2","sha1":"157f6e26b782db4a04d09122b259cf005ff47079","sha256":"7b626c040aadee9765e07e14b599af4cc2ed9f265653b5b5ef05aee038338a7e","sha512":"4dfe4615d190c87884b12becb29311f49d0295b64099e82acc41fc50e707536e3aa2da8cfd6ad60503a17ecb45521cc594ee32e4f19c55ac3ce451f9f82ab0d2","ssdeep":"384:RwW7ILFIilDA/XifM1VSVsgMILWtGB9ROdBdhH22jUWQRZ:tMF0SW9gAdBTrIRZ","tlshash":"33e29c5fe369dd77e18ae39cc5008034226a82a779c1c794c2f9ff4f566648a6c0ebd1","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.474228Z","times_seen":107,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.C6wEMBr4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8e2531cb.d.m.C6wEMBr4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 56121\r\ntraceparent: 00-1e117a5c5460cf8cd5cbd5a7eff79234-b2f6c30fb5c95be2-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-db39\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330150,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46639)","md5":"04839915ba2bf62c92348cbf677d6f02","sha1":"39e09668d038653c47a329a4ad5ba97884344de8","sha256":"c4876548cfbd16f1142097fa6414d0e8206eefb539306001eea0c0a7adff34bc","sha512":"e9e26eb0a5b19ee834d683be8954ab90fb7fd315b6b79ba5f62c282c09b502e914c2c020252e6cdd8bf4018a7c08888cccbdfa1d81e2e4ddaba7f0c3c20088db","ssdeep":"3072:4TvqbcLVJ7lQAIToVpH7RrfIEuPOIZbkHp7kEkfAipTlW:IjplrXuXUkHfAiO","tlshash":"7564e64d72f827b5458370f1b63e1932b270e013340c4d993d9d2299afa6618eee6fb5","first_seen":"2025-12-08T11:02:52.837495Z","last_seen":"2025-12-08T11:02:52.837495Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/exclusive.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/exclusive.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5618\r\ntraceparent: 00-8a6a72afb53c8203c1fecc26e573eee3-cec48bf172fd7292-01\r\nlast-modified: Fri, 05 Apr 2024 10:28:02 GMT\r\netag: \"15f2-61556e915c6e7\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 04 Jan 2026 10:20:55 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 261655\r\ncache: HIT\r\nx-cached-since: 2025-12-05T10:20:55+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f310f82bd99f64d82ebd1f091658ca17","sha1":"de9c07b5b5f3f4635a9e825a14af16e2c184ebcb","sha256":"7fed836409217f5ac8eddc5f8193b5c0c5e4e02bc3af1d18b4bc00287b8cfa33","sha512":"4bca13f43a59c62f670079fef9ff73ad9feb04c01784604b3d5af29d0984401e5c788e1fae0f68baea530c0b21b1a5b85cb5d9318e8d3d99b074209f56a85bcd","ssdeep":"96:wN7lHxPap1jRULBVUkiaBn/G0kOvw6rXtrbFY2W8RikDwrkCK3P:wN79ZapNRUlV2a+Ov1JnFY2BRfC2P","tlshash":"46c150f6a3e872e48147db90d8275876ba5a38fb3f9183c94240ee90b561095cdcecc8","first_seen":"2024-12-31T04:55:51.41943Z","last_seen":"2026-03-14T07:22:16.75251Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/video_poker.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/video_poker.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\ntraceparent: 00-038d0a23a5cab6aefff1b7b42e26c3e7-d74b173bdfd99417-01\r\nlast-modified: Fri, 28 Jun 2024 13:45:12 GMT\r\netag: \"859-61bf374e1215d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f54a335dc512bfbb32a481dbe99fec65","sha1":"93be1232f742dfa382f3349b7ec5e0db9a8a2230","sha256":"13b710020acb4a4914b3773ceee2b981f8c96e443e66616feb8c449825aa0992","sha512":"4ea64bc628e9c2dc6c60b8bd360ac0ec75543190ea2cae33c41976733afa8a638595a6e009b6c1c5d58c8bd647cbfbd3ddc49f0d09d345180eabe080d50b1146","ssdeep":"","tlshash":"c94144e657d453d07d0feb61c9234d32f96b34b7e5bdd70d9120e99061232b68849cc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16732Z","times_seen":58,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.DUqHllsC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.DUqHllsC.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38321\r\ntraceparent: 00-519b1797894ca0c9c18b0ebc97a42591-17f836d3df7e0c54-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-95b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186006,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (52537)","md5":"66e7c6c8081291d8dca6f7f6c29f98c6","sha1":"b70aefe75b9a11850ea8cc3a40d33b49f2829d3d","sha256":"9fa46408df2e716c5bd7458a0b1e3f15e8055f13463c5e44ad0c6e0a8db49c32","sha512":"d079e6c8375ed01cf98af2567d30d81c0567551e231b487ba1886ef9f7c3a837a150b16b27483fe13da7030628e68a42d962374427d0987b653c6e0cbef1902a","ssdeep":"3072:kxy1KAsfvMrhItMBhYJCzv+ekhowG8sXB9BZSeW7tO:xLsXMrhItKhYJCzre89BZSeW7tO","tlshash":"05040b166a4838ff4f710d2e5b2a7aa4a1330d98fa21c033d2b69f3e2f5b411f197595","first_seen":"2025-12-08T11:02:52.789988Z","last_seen":"2025-12-08T11:02:52.789988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.CbYR40R8.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.CbYR40R8.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 16815\r\ntraceparent: 00-c282d9ff6ba3bc7d4e49876046be788b-eae5109312fe4157-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-41af\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eceb615fc6e2c7c7d59e1f65d00a686","sha1":"f4ec48f6cda4262c372bd2e8c2e4b08c0a057c22","sha256":"1d34801f854a544218192a107303baa8ee5f3b727a6db519213b5832c04c6f46","sha512":"59d3b06590f05ddabb5e970129011f4811dad4c9a5f76c54deb3f2cf014815ab9c67813b4a634b08e82e25e7d7878b22b37cbf55b2d030e5b6353dae04678513","ssdeep":"3072:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10k","tlshash":"7bc3a8ff8e50a27bf767ec9dc3e5b648724eac03cc921d66d1b212ac42d63919394b05","first_seen":"2025-12-08T11:02:52.82182Z","last_seen":"2026-01-05T18:44:37.843621Z","times_seen":13,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:53.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:53:39 GMT\r\nexpires: Wed, 02 Dec 2026 23:53:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472094\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-04T14:32:04.960052Z","times_seen":56158,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=687359927.1765191716\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026z=1876514484","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:55.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:36:47 GMT","end":"Mon, 19 Jan 2026 08:36:46 GMT"},"fingerprint":{"sha1":"C1:3E:CE:C3:60:64:64:BC:66:BB:E6:52:1D:0D:5F:2C:AF:51:CE:2E","sha256":"81:05:20:2B:09:DA:67:09:AA:78:BA:0C:66:85:0C:CA:38:D1:58:1A:2D:A3:7F:2F:C1:A5:D4:85:26:9A:69:A1"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=687359927.1765191716\u0026gtm=45je5c31v871047016z8890860847za200zb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938465~115938469~116184927~116184929~116217636~116217638~116474638\u0026z=1876514484 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T14:48:41.416319Z","times_seen":763370,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":135,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.aljHbUuO.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/17ff6b76.d.m.aljHbUuO.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1073\r\ntraceparent: 00-0da28abdfa840bfb20fc85da7f374387-f41e6ce61a04bf29-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-431\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2238)","md5":"042dc1f35bb02182dc0e0613e6684ff7","sha1":"ebdd8ee03283504efbf38bfc7ec1cd5de819748b","sha256":"29f6c63be10f606f921feafe6c6dabbb9db5cca766a98c67aa4b3ed022dead9a","sha512":"6be19dc148c84a1eb6b54cf89f6a01412e15f9fe0417ca0270702200c2e9c1dc5ed83817a93a3f2240fc5ded0c9ea999af9bb45d6fbc7aff2ad35a240817ed65","ssdeep":"","tlshash":"b141a7ba7081b43cc37e80bee472919557246790727798e1906e21ac0da8c86c1b8f9f","first_seen":"2025-12-08T11:02:52.875861Z","last_seen":"2025-12-08T11:02:52.875861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/winners.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/winners.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5772\r\ntraceparent: 00-dc42a305c5b5e756df6ed3988908e077-c8b30ee2e2461a80-01\r\nlast-modified: Fri, 28 Jun 2024 13:43:26 GMT\r\netag: \"168c-61bf36e9740bf\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9a04d5d641da307a6d416f7bdca8de6","sha1":"6872c0cd650572e3207bca785ebd290d156df639","sha256":"25d002e623903b320eb203f271ef153ee2df8a51e2aed4878c7598d9f6a6ca6d","sha512":"88d73b7b558d91b6146bf4e368508db289a6f861f92cded175408788a361b706d923428a9876e6b7e72fb40d48e4e0f508d6bc99f755f6ae9eab00717ea75059","ssdeep":"96:Sp3FcBAtU1yTkrUH9/kq52Z9SoF/0HcU8mnsAC9gl05nuRJLEkVNxkzD+NWI2bL1:Sp3Fk/pQn52Z9SmHqs79u05yVfgqNWnt","tlshash":"f8c144f5e2d8a3e099469ba1e9358423f6af3cbd9fd9cf848190dbe4e5110d84acdc44","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.157824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/favicon.ico","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 05 Dec 2025 09:14:47 GMT\r\netag: W/\"6932a287-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-03-29T15:19:13.331537Z","times_seen":277,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-18.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-18.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 124642\r\ntraceparent: 00-bad4b3d415996b822a19cce640d7c61f-e60f1395fb55d939-01\r\nlast-modified: Wed, 29 Nov 2023 14:06:29 GMT\r\netag: \"1e6e2-60b4b0aaf52de\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 869424\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:31:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124642,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"065691d045bfc538dbfde5499a6d2674","sha1":"6cd30a84f1eaadf7e5dfc0b63b4767fd30a8df50","sha256":"c38f15c7b168fd96961ea9673f5ab93f5e1eeac70ba805e27369f5d1febbb285","sha512":"8fa87b3aa5f20681301f0e4ceadc73e7e7bee3a280af44c602419ab274f38248235df2887d214ec0cf9e23fe6389f2ea91477781620cb459369a78fed086a507","ssdeep":"1536:9g1mplOk3XLELTLyO/aCBNZsv/7GHLIe6Ej:Re64","tlshash":"36c3835bf3f9e6f6e109d3a8c6818430322a1af37d91c6a443f5af5edd1404e1c6da92","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.489458Z","times_seen":107,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/8a28bc4d.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/8a28bc4d.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-4412481dc834b6660bc027141145305f-c2ae68f9e24097a5-01\r\nlast-modified: Wed, 05 Nov 2025 13:37:46 GMT\r\netag: \"690b532a-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2764329\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-11-06T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-03-31T00:45:46.166838Z","times_seen":129,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/spinomenal-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/spinomenal-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10323\r\ntraceparent: 00-89c793a6aed8e731a2cd5e5d82a23050-75caad4cc1f28502-01\r\nlast-modified: Wed, 30 Jul 2025 15:44:05 GMT\r\netag: \"2853-63b2765099182\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:55:04 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 870372\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:15:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9e5ba03c64a51d9e7cd49527da4acfa","sha1":"b839fd267d3bf355653a70fab7051e523d397ae4","sha256":"6d2e5253bee63c8aa0da5c82a9107c0461b64bb28815a3ff208ce374a1d8e858","sha512":"d9c7057aab9a42a4f47579f1f8fa112998be456df6f69c9e1c3d342c915f0a3f4b09614f022f1bbfb2e871cede396381b45d45b2f063923a1e30e347f026add2","ssdeep":"192:9yv4EU5WiBVLGyMTrmBtBS5iLg7capbYwiZtithAo4tMKL39dkx4CbvPD+LA:9yv4EqWb2tBSRQapbYw+8AfMKL39ipbn","tlshash":"212283ceab3647fcb000e1ecda9658743a819cf53855c966c3f86c26e8a205c1976cdf","first_seen":"2025-09-29T03:15:31.367647Z","last_seen":"2026-03-08T14:14:44.21474Z","times_seen":29,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-2/wa/collect","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nContent-Type: application/json\r\nContent-Length: 47\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"910\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.CDhE89Uv.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.CDhE89Uv.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-f92938fcc1beccf8773ef86a85f98efb-ef04066914b7fd6e-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-13aa9a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1288858,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64928)","md5":"e6f3064c0543ef52028a93e60c43a4fc","sha1":"903bc57ecbc2bdab8955b28eb18f0a77e0b0a103","sha256":"b4ae7933bf0da77277feb855708f3754feefa2b63c702ba2d30efab5d35f0903","sha512":"cbfb5f58e7a07c707d6138fcd20665d97c13988e9efd9a275a919ea2e67d142a273726ffd3f87d66c95d140e3f612d11f08527d256d0e876908549fc9d52590d","ssdeep":"24576:NC21o8yGEH6LAD+ddsdaDajxd7OpaA7Dued5mx7hXGwTOjmA83I8PvQHhyoH:NC21o8yGEH6LAD+ddsdaDaXOpaA7Duer","tlshash":"8b256c4d7649747683f345a6a0ab0040a6380b41f5648cd1e5fc9e7e2aaed3093b7f6f","first_seen":"2025-12-08T11:02:52.833573Z","last_seen":"2025-12-08T11:02:52.833573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CS2hlQxg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/01f20af8.d.m.CS2hlQxg.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38626\r\ntraceparent: 00-173bfc04263aea7ff35e57adcf6b3025-436d148595c6bde1-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-96e2\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130608,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"16b5b7be76bc6dec6f96bcd121af7317","sha1":"0ad27237adb212ef7886f8eaaa095f51597e795d","sha256":"8dce00856ed8e17b4398dfd3de9d7b52b5de1d2265dd6829640fbc3db65634d7","sha512":"0e1db92fe8cc9c36d695d19222dfda7f8bdba7d58130fc56741b64c2483762efed0e569cde608ce9dc54817ed87b9360f60243c367abdd2d087fa6c790691f0d","ssdeep":"3072:2ZThR9YYyG6r4wF/dBe1wDiGIeoQ3tzsIbVSVub:2ZThR9YYzwFd0wDiGnoqb","tlshash":"81d3e6c872e3f06283e22470002f440af27e6d69949cd4a4f6a5d4f53df995a8637f6e","first_seen":"2025-12-08T11:02:52.812621Z","last_seen":"2025-12-08T11:02:52.812621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.CKYM_UiN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1bb7e2cc.d.m.CKYM_UiN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-8a4c87ca6a6814c81caef5ccc14d2df0-510df498e5f9103e-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-53a8c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"394bcfb2947ebbe4c75dd1cef148fb2f","sha1":"6a715721befdf0fa3c032d90c7602bf309e3afdb","sha256":"35053a1dafea49a795ee0aa24310d98d6d4f4e450db2e2136d14a86dd4ee43c9","sha512":"d3df1503d9b990744131f6191c000b824823baedf1de33a91b5efec3059d5fb4b3657df166bf7fc2b1ae4bb34835579de1de632ed1af091a8899ff4105f5bdd6","ssdeep":"6144:AN3UyF5R6fq/nXUBL5uz2opBh/5OVJdrrSUI:0Uw5RJH/5OVJdfSH","tlshash":"a274c619ea116ee336f5381eb16a2ae370325b113b55c27600da5f393e2f80cf5275b6","first_seen":"2025-12-08T11:02:52.848863Z","last_seen":"2025-12-08T11:02:52.848863Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.yixB_qvP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2491c3d3.d.m.yixB_qvP.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 723\r\ntraceparent: 00-7fd2188f8bb3cec8e6dcda0ab71155db-56cc2725c547ea63-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-2d3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1893,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1842)","md5":"75a83e4fbe7307ff3f8f265ce4f2e95e","sha1":"84a7279d2da55860fbfeb9692ae0eb6d87cc33e9","sha256":"b04a2a74aa48b239066eeac8d155b53abd0e0cfa3734f6c9295c3beebe276fa1","sha512":"b5ab342dff2297c3dcc209818fec79e5124199d99deab12718b264c8df76bf2901eed99f69c1ce1a054a53c9b0f0598659910d4584c06f8466fe45d2acbdd521","ssdeep":"","tlshash":"7b4122ada468bb766a438594f2644053113b36f3a244085c76ee3ee8d3ef542f261f35","first_seen":"2025-12-08T11:02:52.878846Z","last_seen":"2025-12-08T11:02:52.878846Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.K__QARGc.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.K__QARGc.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2460\r\ntraceparent: 00-844f64c00410fdfb5b55e4f24d81be34-92e28c50d88f2301-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-99c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5876)","md5":"45a9f1adc4a1d87995fedde58f6af145","sha1":"9706d271821f3547344e39b37839064f90dbae44","sha256":"905b3c53f8831a7b96cf41c5f1f05b3cdd43a36d3e1677d705707503b44803dd","sha512":"f72fd978ef1e031953bd57e764ec7631ea8caebd261deb72b49a233cd896af08e714b69699aa5328faa51084ba0969bbd6e039489194cf7a02b67b7d3a19c8ba","ssdeep":"96:eW/NAavcByHGC5mTNOURJSwmSiQ5ZpJLZej/g4sc9GDhJKTAoExYnkIOVWbMvqdG:p5H8RZ/mozqVxW0tjHOwsLKWa9aL","tlshash":"3ac1ca9d7fbea57116da05a120aeb047d37950d8f0198051e06c9ab83913ece89f3f4e","first_seen":"2025-12-08T11:02:52.815686Z","last_seen":"2025-12-08T11:02:52.815686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:39 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472149\r\nlast-modified: Tue, 18 Nov 2025 19:00:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-04T14:12:03.989082Z","times_seen":18059,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/11-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/11-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9294\r\ntraceparent: 00-be90e017601af9ab0dd272af0165eae7-f22c22c9ce34a171-01\r\nlast-modified: Thu, 10 Nov 2022 08:38:40 GMT\r\netag: \"244e-5ed19b33cfd9c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:37 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 869424\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:31:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9294,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5389b1344f047e08c1eaeff630202cbd","sha1":"fdb1e87ab00e760da584f731a6d045d8eb9b8273","sha256":"22d75c5165757fa06f1e0407df25dc8c66be8013db7e06b9b657b873a30d21fb","sha512":"219419b965d1e963da2550dad60ab61038d10c0366b14aa9ad2296161d2428a4ba53bb73bff55b9410c5aac700d40884226fbdd784e43c82b4731091b87db3fa","ssdeep":"192:mNgs5LSQz0HWFEnG2JMtK/Ih041WN2LTyqN3qbjYK7s:wg4Sm0HMEegIh041i2vyLZs","tlshash":"aa12c8cd2b7842f8fa41f6bea71224743c1628ffa7524a74c3757f18b8864981d89cd6","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-29T15:19:13.368003Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/sunSw.DL-onBB5.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/sunSw.DL-onBB5.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.EqKsf2cH.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 240\r\ntraceparent: 00-3cd263c41ca12b686ffdab9a541ba2a4-850cd069f726eee5-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:04 GMT\r\netag: \"68e7b33c-f0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 4148868\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0811eb7ab652dc7ee7bee06fed53671","sha1":"1192b619f776177819ebc73c6f6f31b11b891d24","sha256":"0565ef51f5934a1fc6f8a6e25f958de335b791559e5e0c100b2649acbe64f92b","sha512":"89bdfee5cd795ad373e227320ee5ad9b5509e9e1321726170fd93642d694389df569212784af41ed18a6a21f578507ea65d15cfe5d599e168ed956eae70f4ac9","ssdeep":"","tlshash":"d8e068d34b0af6ac92418636d9a83ae0321e64aa107420a8846e05a020569cee207ce8","first_seen":"2025-02-07T04:57:00.938579Z","last_seen":"2026-03-31T00:45:46.258466Z","times_seen":105,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.5ri6CLcs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a48612de.d.m.5ri6CLcs.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4651\r\ntraceparent: 00-f01d97c8db35d4475cd8de8f66878277-b699fb79c480083a-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-122b\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16672,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13931)","md5":"e14110362dd64004cbf9c5b0819ce51e","sha1":"ac0b3d5527cd9947635a2927903453b595312ca2","sha256":"7b1eed55ca6dd2863d24ad01ce7518323ea849ace6c9993bd9202fc50d9fd38e","sha512":"f8e73e1ab5d6cea498bb52eb0721faf6ef7d4a5c77571e59c1936930d7a85b67dd8d61c0a528f0b6e89ab619ec2ec21e398748c7ba5b84b5c99edf2e8d21c797","ssdeep":"192:ZvzfBTNwcZi1xZgJYUq8BoYSjo+tYP1F/yQ6OdZYWEdK3n1HemtO6Anl/qKxoLa1:JzfBTN4xZgJTe++tk6lWEd4njFIk0","tlshash":"0172841ae2858c312257c6fa41742940f24dce851269c6a5b5fcd9fd9eb1c2fe03e7ac","first_seen":"2025-12-08T11:02:52.799982Z","last_seen":"2025-12-08T11:02:52.799982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.mN2qVtXy.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cd5c2051.d.m.mN2qVtXy.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-83d62204efc36fda2aac8127365cb5a3-e7b1dfea9f088302-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-eed\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3821,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3770)","md5":"f79903c24fa84c1ceddcae8d89bc12ab","sha1":"e8f4447472cd11ed5febe2223a1a99aec4fc014e","sha256":"9a562b772865249e0ac2e32cf435a765aacde0e23091039b6f773801efceda82","sha512":"cd9c0894d1f23605c61c05a7a42a55e432f84b0d1dbce53fef82815e95d26f01a483e2dce8bba937edc19916a6dee489c61ea3458511080f3dbda02f8017199b","ssdeep":"","tlshash":"fc71e9cdba09aaf993f21ca5b4360406d7325e95ba7005c6d15f1eff2252844b42be53","first_seen":"2025-12-08T11:02:52.881659Z","last_seen":"2025-12-08T11:02:52.881659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.1L8Rf5dw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:52.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/b3b80119.d.m.1L8Rf5dw.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1184\r\ntraceparent: 00-a2b781c81fd85b0ac4e846293f364324-188a694840ac2f27-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-4a0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2915)","md5":"6fd022401d4fb0de8541e6c0d02c2ec8","sha1":"4ea77def8a80b442aa6ae38a9e711918201acf18","sha256":"e463196c3ff3b951ef41ce14b044d3083a40e10ca19e7a9e2992ff678eb2574c","sha512":"45a0ebb5d2b1bcb0b3b3936c16af9df780447c22fbb1045097b00ca990414c62d12582bab992b2f7738a9f18c81255105fcfa5bbb9da7eb2f80e60408c8b4b46","ssdeep":"","tlshash":"f251930f997a2873558520fae85710320619d25c3698a0a8f3fe754715bbc9a233bf9a","first_seen":"2025-12-08T11:02:52.88255Z","last_seen":"2025-12-08T11:02:52.88255Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Dec 2025 03:15:43 GMT\r\nexpires: Thu, 03 Dec 2026 03:15:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 459964\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-04-04T14:04:46.922003Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/books-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/books-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1804\r\ntraceparent: 00-7e7df6245687335e4c1d92d5c18178f3-143d90bfb96872b7-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:41 GMT\r\netag: \"70c-61bf36bec16f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21f4a5481d615224b3062e2bda5a69d7","sha1":"2587846cdae3aadc39f9168b4a62c4ca50cc2bb9","sha256":"049e51bec3a57f5d4f4ff4d0a592ce5a25e418fa08841f345cc7b7ba2e6b1581","sha512":"7e52fd485a521bc2683434cd1159d6d2e624c4a87916df5584f8b3224a98f683de62f7e467b9aef7cc15f4be4c15a096d049542f648653aebbc60ed70169a497","ssdeep":"","tlshash":"0b3165e94fd870dca615a7c1ad2f892bb89f28f97303cf4653c09a54b8120c4cd8ec10","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.237177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nPrXyw1W3fxIlGzg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Dec 2025 23:25:03 GMT\r\nexpires: Sat, 05 Dec 2026 23:25:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 214608\r\nlast-modified: Tue, 09 Sep 2025 18:38:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19480, version 1.0","md5":"bc0d51a55b8ad173adca939390c96045","sha1":"ab757e9eec9f39949afd92e0d2d2ef02f4a859e1","sha256":"d1ee519d0cac55030ec7cc0927a7e57e324d40a5eee5024dde5ed107d888aa46","sha512":"206f7610005d160e3af9fe67ece56868a8f5f2e0afd53ce7a34d022a7832f0100f72779139ea37265c23cbd690e680694cd6c264c198266a1bc561801f0eaf5b","ssdeep":"384:2/bUzzda1Rx/5cod5RQDLZjNObIbbkzJulFGzk5mm+KCnirm6:YUzpMRx/5HRCF34zIFkk0mOl6","tlshash":"9992f1123267a804c15c3a39f67e8e03e2f84a2a35b595a0f95f16d8831c2787126cbf","first_seen":"2025-09-10T18:44:19.134845Z","last_seen":"2026-04-04T03:43:37.767105Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:41.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472146\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/88582821.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2322\r\ntraceparent: 00-02e07517a41eb500efd17075cc647f57-bfae684342ebef3a-01\r\nlast-modified: Mon, 27 Oct 2025 12:44:26 GMT\r\netag: \"68ff692a-912\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 3467685\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-29T07:47:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/SunOfEgyptII@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/SunOfEgyptII@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57119\r\ntraceparent: 00-7bb3390c19047ae383b0d71d89167c88-f8d9af0e76ab6f57-01\r\nlast-modified: Thu, 29 Oct 2020 13:17:24 GMT\r\netag: \"df1f-5b2cf19c86e8f\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 20 Nov 2025 16:40:39 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1531674\r\ncache: HIT\r\nx-cached-since: 2025-11-20T17:33:56+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57119,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"928f522970b449f9c4a90c30bfd211d9","sha1":"b4aab2b587bf91fe518921148b47154685569b8a","sha256":"164d1c6808aeb913a963c4a8084db81073a435c2e1494ec22742fc9a48a2f552","sha512":"24ea2f5241589f3532cc713f938cfb36499f8fdb671502e130437cfecd9a54e75a1d539a5f7c1d39a3c2e80b847294a86ee531deca7116e095d183def651e7b3","ssdeep":"1536:t+rAV8FZ2hrGioDYtaCqHbxHDYa3Lbc1qogGZD+:4MmZNYtu7ph3Yqeg","tlshash":"d0430289ca403383aaf40a7f5dfbf26a9fc0c4d2ed46746564361b80a81259d506bbbd","first_seen":"2025-10-15T05:25:54.10783Z","last_seen":"2026-03-14T07:22:16.777509Z","times_seen":7,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.DK1wTDFI.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7c9eab67.d.m.DK1wTDFI.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9d1fb4467a88daa06af6249bd0037a56-63a9966930ddb1e9-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-e240\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57920,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (31305)","md5":"72391357aa9d97d9be0828fd9ebb6b8a","sha1":"6c40fe4a60ef9cd3f5be9e144f8ed6659ad195e7","sha256":"7834fced6a80b514c1eb304058e3d8251346fd1d7d849e0fc0455108da344bfa","sha512":"380d306febd0b610f706e71cfea54b8231f99258f6af0e6ba88a298001b570ff5de1d73271b8c411dfb575f36f0641f43c3729e2871caee54ebbbad97cdc41fd","ssdeep":"1536:lU7od4j0bJdiUQbM9uvtmiC9vUJxmUlcDlElc7T1:lefjyeHwl8cV","tlshash":"a1433bcef972227077fb1160a46f0402613a67017419c4e9bdaf9ed42b92984d6e3f7e","first_seen":"2025-12-08T11:02:52.846224Z","last_seen":"2025-12-08T11:02:52.846224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.CC9_Gdie.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:46.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.CC9_Gdie.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:46 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-d689c40d35ecdff9f2f462de63a667be-f3f1abb476d25afa-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1836,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1398)","md5":"c15b218124592b98a876231240debb2d","sha1":"4ba2d4566e8fed790881bc2a43b5acf3401efb0a","sha256":"075ffd1ef96e19376e29c5c25638c2937cba0571a44b19932ca4fcfe957f61e9","sha512":"2b6c61d9ffd1803228be576bead0d57793b91795737391bc51a530b10f083b0e2c50a8abdfa8224e6905a9d2267d7d12a95c38f63459106459d7814cea346fc5","ssdeep":"","tlshash":"6331930d66c284ba46aa08edc11e362263319e903639c6e1e1ec7c793d61457c427fd2","first_seen":"2025-12-08T11:02:52.770279Z","last_seen":"2025-12-08T11:02:52.770279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"174.129.218.84","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 796\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":796,"data":"app_id=cnjqphyx\u0026v=3\u0026g=1c8b10c3ba5bdb30c0d5a8900598f28ff649f36b\u0026s=85a78ebb-1cb4-45f9-8a0d-8343dc1b4c4c\u0026r=https%3A%2F%2Fleon59.com%2Fregistration%3Fqtag%3Da34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=73e3912cd4519be7\u0026internal=\u0026is_intersection_booted=false\u0026page_title=%D0%9E%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD%20%D0%BA%D0%B0%D0%B7%D0%B8%D0%BD%D0%BE%3A%20%D0%91%D0%BE%D0%BB%D0%B5%D0%B5%204000%20%D0%B8%D0%B3%D1%80%20%D0%B8%20%D0%B1%D1%8B%D1%81%D1%82%D1%80%D1%8B%D0%B9%20%D0%B2%D1%8B%D0%B2%D0%BE%D0%B4%20%D1%81%D1%80%D0%B5%D0%B4%D1%81%D1%82%D0%B2%20%7C%20%D0%9BE%D0%9E%D0%9D\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fleon59.com%2Fregistration%3FPHONE_INPUT%3D%26EMAIL%3D%26password%3D***"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 4e7dbcd0477e46c7ffe1f0e569035ce13440b396\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 00380oonvgceli8uddhg\r\netag: W/\"a0e9a4f4d05df4db09d286684ce43f69\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon59.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.030527\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0a604e7e52993826c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":464,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"408feffc84eb47d6d2d1037ca8b8d3c8","sha1":"02c6abe49f4b3c8358daab252b1598f0ea432b04","sha256":"a0e9a4f4d05df4db09d286684ce43f69c781a19e544cbda4e2ea30c298fef2cf","sha512":"1950372f3bd86374c8a58c3e57bbd14d482f519270f65b825d864aaf28bc0306c4a62a810f30f660dadf1374601ffba97e714114a84a76b74d1624cd2080ce48","ssdeep":"","tlshash":"f3f0dcadab4c8c322b8247e9c21bbe17079d45e672500df0f0b89f9890eb10a094a807","first_seen":"2025-12-08T11:02:52.885974Z","last_seen":"2025-12-08T11:02:52.885974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":213,"dns":14,"connect":93,"send":0,"wait":127,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=662d83b7-707e-48e3-a98a-d931b6c89e8d\u0026\u0026timestamp=2025-12-08T11:01:55.987Z\u0026fire_id=1765191715987-cf298a2c-aa72-44d3-bbf1-c14d576a2187","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=662d83b7-707e-48e3-a98a-d931b6c89e8d\u0026\u0026timestamp=2025-12-08T11:01:55.987Z\u0026fire_id=1765191715987-cf298a2c-aa72-44d3-bbf1-c14d576a2187 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ncontent-type: text/javascript; charset=UTF-8\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/collect?data=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","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"65.9.46.41","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:56.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /collect?data=eyJpX3NlZ21lbnRfaWQiOjE1NDAzOCwiYl9zZWdtZW50X2lkIjpudWxsLCJsaWZ0X3VzZXJfaWQiOiI2NjJkODNiNy03MDdlLTQ4ZTMtYTk4YS1kOTMxYjZjODllOGQiLCJwaXhlbF9maXJlX2lkIjoiMTc2NTE5MTcxNTk4Ny1jZjI5OGEyYy1hYTcyLTQ0ZDMtYmJmMS1jMTRkNTc2YTIxODciLCJwaXhlbF9maXJlX2dyb3VwX2lkIjoiMTc2NTE5MTcxNTk4Ny0yN2U3NTc2OS05YzM5LTRjYWMtOTg0Mi1iOWEzZTYwMWFjMzQiLCJjdXN0b21fZGF0YSI6e30sInRyaWdnZXJfcnVsZSI6bnVsbCwiZmluZ2VycHJpbnRfb3J0YiI6IlRXOTZhV3hzWVNBb1YybHVaRzkzY3lCT1ZDQXhNQzR3T3lCWGFXNDJORHNnZURZME95Qnlkam94TXpRdU1Da2dSMlZqYTI4Z1JtbHlaV1p2ZUh4bGJpMVZVM3d4TWpnd2VERXdNalI4VlZSRGZGZHBiak15ZkRJMGZEUTRmREI4Tlh3eE5qSXlNekV6TWpnNWZERXhPVFUxTlRjMU5IeE5aWE5oZkd4c2RtMXdhWEJsZkdWdUxWVlRMR1Z1ZkRGOGZEQjhWMmx1Wkc5M2MzeG1ZV3h6Wlh4aGNIQnNhV05oZEdsdmJpOXdaR1lzZEdWNGRDOXdaR1o4U0dWc2RtVjBhV05oTEVOdmRYSnBaWElzVUdGc1lYUnBibTk4IiwiZmluZ2VycHJpbnRfaGlnaHJlcyI6IlRXOTZhV3hzWVM4MUxqQWdLRmRwYm1SdmQzTWdUbFFnTVRBdU1Ec2dWMmx1TmpRN0lIZzJORHNnY25ZNk1UTTBMakFwSUVkbFkydHZMekl3TVRBd01UQXhJRVpwY21WbWIzZ3ZNVE0wTGpCOFpXNHRWVk44TVRJNE1IZ3hNREkwZkZWVVEzeFhhVzR6TW53eU5IdzBPSHd3ZkRWOE1UWXlNak14TXpJNE9Yd3hNVGsxTlRVM05UUjhUV1Z6WVh4c2JIWnRjR2x3WlE9PSIsInVybCI6Imh0dHBzOi8vbGVvbjU5LmNvbS9yZWdpc3RyYXRpb24/UEhPTkVfSU5QVVQ9JkVNQUlMPSZQQVNTV09SRD0iLCJkZXZpY2UiOnsidXNlcl9hZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQ7IHJ2OjEzNC4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzEzNC4wIiwibGFuZ3VhZ2UiOiJlbi1VUyIsInBsYXRmb3JtIjoiV2luMzIiLCJzY3JlZW4iOiIxMjgweDEwMjQiLCJkZXZpY2VfdHlwZSI6ImRlc2t0b3AiLCJvcyI6IldpbmRvd3MifSwidGNmX3N0cmluZyI6bnVsbCwiZ2Rwcl9hcHBsaWVzIjpudWxsLCJ1c19wcml2YWN5X3N0cmluZyI6bnVsbCwidGltZXN0YW1wIjoiMjAyNS0xMi0wOFQxMTowMTo1NS45ODdaIn0= HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 0\r\ndate: Mon, 08 Dec 2025 11:01:56 GMT\r\netag: W/\"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk\"\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 249277a1d1cacc74019eda739a89f4ae.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: 71OXNDRCOU398F7ZfP3XKuNxNf3NnHaZMDw7d2QqZqyslVPQpye4fw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 190\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":190,"data":"[{\"id\":\"a60bdeb7-ad63-496c-8d81-ebba620fd526\",\"qKey\":\"33368f52-237\",\"operationName\":\"getCmsContentSpintaxBatchTranslations\",\"variables\":{\"options\":{\"contentKeys\":[\"WEB2_SEO_HOME\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8005,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7a7add25f28a66a484bedcbd3686ea51","sha1":"81f17156ba94130a3e753d816edb3713c50bc8ff","sha256":"326da38031130cc9772dc26fe54031a56f4b6effe81698f9b603edfc1496442c","sha512":"18768b0d1b256d300a518bab86ca711cedf2895a5bb418e8ea2ef9e0431387d48c03e0717ef07d220e309bcf0da080d56489c1a7eb0ee4fea8ad322af366b44e","ssdeep":"192:tOwi5NDi58WWimcArBU5aikPYa0MBXAuGA6LwsB7wERDrsvZW:tm3rBz7eZEOOZW","tlshash":"ccf1ed6057ae64ee2106f117d815be0d3c9a48fe7f7a631219f46c7f32e1028c92da1e","first_seen":"2025-12-08T11:02:52.886854Z","last_seen":"2025-12-08T11:02:52.886854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-originals.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-originals.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1955\r\ntraceparent: 00-8cb398ce7e07e81a3291f553f1140e8a-c2e779b1b81a3422-01\r\nlast-modified: Tue, 01 Jul 2025 11:02:44 GMT\r\netag: \"7a3-638dc157b9648\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 27 Dec 2025 22:54:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 907625\r\ncache: HIT\r\nx-cached-since: 2025-11-27T22:54:45+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"702b03a00b38c08b38d63d5ab58702ba","sha1":"bd5aebde1dc0e3ae5f0b6a6820123e1167e8b50e","sha256":"faac8568e1e3f31fd222cf39b2fd2bd2c3a23c3d00c008551edf1e83df355e78","sha512":"a616af84acb3a46ed9e01b77877e73da6688a36be4116bf2b15b01453d68fd9fbc0bcaaa0870e9e458e558e37020c59d970b7d919ccaa215aa6cdb1a34ef9449","ssdeep":"","tlshash":"ac4152f9d7ec81e49407e792c9f3992978af34b2eb45cdc6c0306a81f16b884ca05c50","first_seen":"2025-07-09T00:32:09.400099Z","last_seen":"2026-03-14T07:22:16.733341Z","times_seen":43,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/penguinking-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/penguinking-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10474\r\ntraceparent: 00-f503a539a468972e06e342275a29edac-34a729bcb1224de5-01\r\nlast-modified: Mon, 28 Jul 2025 13:23:02 GMT\r\netag: \"28ea-63afd30ec847f\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 02 Jan 2026 17:12:24 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 409766\r\ncache: HIT\r\nx-cached-since: 2025-12-03T17:12:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a520c53a4c4f807f2f9772bc0fc238d2","sha1":"2737e36e228a2e4582fd2f3045965179cddd7c1b","sha256":"ea55ca4625763943293e65791cda181524d21ed24cb5ed645f87272ac3e695b6","sha512":"6e278c8dbb8a8db474d7be4e3e83e9a2bae361d13bdfc52c77e807d5243194b1d7c8df9244db5dfc4f3b92b1459d4c52329ec1b4cacb46c1370d612deb2328e0","ssdeep":"192:UmBDeKCq3lkvYil5RRsjzobVmfMCtUtZyWtjk9PJorqPe:UH5/eMCESnPe","tlshash":"2122a4887367d6f8f40eb1fa53164879b54baae83c40e0e9c7b62c52f25451c2e06cc7","first_seen":"2025-08-05T20:12:02.96847Z","last_seen":"2026-03-31T00:45:46.173608Z","times_seen":38,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/Visa_Light-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/Visa_Light-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3232\r\ntraceparent: 00-b7bebac88f785cfd2aa51a4c17678e07-7a3f8859b1ddc7fd-01\r\nlast-modified: Sat, 30 Mar 2024 15:46:57 GMT\r\netag: \"ca0-614e2aa9c9156\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 869424\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:31:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4feb8d06f37c2f44aecd2679273e7166","sha1":"51b090ba7ec1540ee91b5eb2f5baaff00e1b9091","sha256":"793070f67620a3fea86fc80d857382a8b1f6811104a9d39acf076a2e35e0b1ce","sha512":"98983acf509780027ddf42bdf7f9bef69ea871111634bc4becaaab9dcf479bc3c24123c959e112b33cfc0afcfbf36a977bd3d8eb73926076866771563e34c20b","ssdeep":"","tlshash":"ec61fad9232856aae44072f9cf56a4dc2d0eeef483c54479cb422f1670a40e51f379eb","first_seen":"2023-11-29T05:22:04Z","last_seen":"2026-03-31T00:45:46.233786Z","times_seen":72,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/api-1","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.127.0\r\nx-requested-uri: /registration\r\nx-app-referrer: https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nx-app-language: ru_RU\r\nx-app-theme: DARK\r\nContent-Length: 183\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RLnSPdZPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsckLIUZPz9nJBngl+OI4QfRcqmF98=; ABTestSeed=91; qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; qtag_rfrr=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0-https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0; ipfrom=91.90.42.154; x-app-language=ru_RU; firstTheme=DARK; referer=https://leon59.com/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"[{\"id\":\"04490332-36bc-4c50-8ec5-fbb9d9aed02e\",\"qKey\":\"1a9cc015-159\",\"operationName\":\"getCmsContentTranslations\",\"variables\":{\"options\":{\"key\":\"WEB2_REGISTRATION_CAUTION_V2\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":661,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1b9086fd65c12873509c909c34bf13a8","sha1":"cbba0aed595c26f89729f7d2855466f9c13c67e0","sha256":"d03387c0741bae99a0bce9d5819d71e6b1f5ca6a19134c9d162a7af676cdfcf8","sha512":"ea409af287f0de5ee00a19d2f1f78569090321371672ac88e325f2d2f2d6cb2adee7c0ad61f121e0a84d1ad31190b988ea39d7c67fdb3ba5dbb5078e66a4e7d9","ssdeep":"","tlshash":"0401fe30589b84d705d950ceb914ac4a35f390fe7922452603c01c28b5e6a38c66e49c","first_seen":"2025-12-08T11:02:52.891226Z","last_seen":"2025-12-08T11:02:52.891226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CsHdeP6r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:47.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/27d773af.d.m.CsHdeP6r.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:47 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-da0bc772e8d1bbe36bdd3fac192f5f59-202604959deaa2ca-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: W/\"6932a277-179ee\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-08T11:01:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96750,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2369c6be84c4b6d08a63f98ec8a0d643","sha1":"79dc0e03c7a6181f84d3c4f786a6453f5e008fbe","sha256":"0b83204dae28ff62b602e5f242699540c6170ddad76a499cf147f077fc8216ab","sha512":"f922214f6b7c5bcee252d530b225ebc38c3cc521eafb7ec2310499bf230f5ba8758364a28ef532b15e982e0d4cec113789cc0b5cad9dde684882151d84ef1737","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscf0:CFen6Vj3FVmbKeylkHLrAobDezfgSu","tlshash":"c7937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","first_seen":"2025-12-08T11:02:52.892232Z","last_seen":"2026-01-03T10:01:28.346363Z","times_seen":11,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/best-78.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/best-78.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 54547\r\ntraceparent: 00-05ab96fd70e260ce86642ad42c959db9-c518fd81f8b243c3-01\r\nlast-modified: Fri, 14 Apr 2023 10:00:16 GMT\r\netag: \"d513-5f948e87622f0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:49:37 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 869424\r\ncache: HIT\r\nx-cached-since: 2025-11-28T09:31:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84252d3bb3f7bec6a007a3dade8d84e4","sha1":"eef631d5a1527bc7bbcbd424b5272afb4386a96c","sha256":"b146039c094babf2ce8c0d5bd5af4a4d6b390bb2c4c33a60f84a3bd992230c39","sha512":"afdc61cd7f9d2d8013db82b4e36ff9a1e7c53089450d7af034334d4008e6d0c69bcf812cda8bef5bd28e9a803f25177c98e77f7fb39c02d64e2b0afb9b63779e","ssdeep":"768:krgkNuIumlYeh5C2pjoJAPHImabrjJjhwyWB0YgBA:k8i95uJAPoPjFq5V","tlshash":"7f336399e3e5a2e4e005f3f4c62ac8b63a632ef93912ce5583e56d55dc9102c49fdc83","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-29T15:19:13.415857Z","times_seen":74,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/new_slots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/new_slots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1699\r\ntraceparent: 00-36f9f4c65aff5fc69f140a1f09d3b15e-4f1d52c742c2b53a-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:41 GMT\r\netag: \"6a3-61bf364b9c54c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccbd6c3b7279dc7e0c3e32460b07d77b","sha1":"d8400d43aa8abf54af0ba8a052192f1f1331e259","sha256":"98596f703ec5e76243f01c178e27e944f494fbda0e8e4dacd6291739b078ac8b","sha512":"bd75a96f89454b29baf742ebe76c471f2744d5e79f44ff64051d04ae236c1f08bb4270cb34b63933232213688b0e55c798b132e0e737bb9dc69beef92b003f0e","ssdeep":"","tlshash":"8a3102f7d3a952d0970bcbd5e22ab62674a73cf77c82679442006a4432535e9c88ec90","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.270025Z","times_seen":61,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fe740d55.d.m.Bfeuh4iX.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fe740d55.d.m.Bfeuh4iX.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8812\r\ntraceparent: 00-c9b5774453ed161eddcac84f58fe0f45-b36ab63a55dcfdb9-01\r\nlast-modified: Fri, 05 Dec 2025 09:14:31 GMT\r\netag: \"6932a277-226c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23588)","md5":"af58c1c3e121bab976472a8e215cc058","sha1":"7cbb4ce134afc23d048d007b22a4ec77b0d43787","sha256":"8d19864cc331e1665d48abe033393571134340a82d6e0156b1e5846300da8ea6","sha512":"b11673c8030773821915aea8b204cbe2d2dd1b932f5c2751052b670c5f63cba0643176c2c43a2e09573a19b8a166c399bbabf8c84e6a25e90cb763b238f599e6","ssdeep":"384:gQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2if:gQdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgR9","tlshash":"f3b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d5d92bbf6d","first_seen":"2025-12-08T11:02:52.839777Z","last_seen":"2025-12-08T11:02:52.839777Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:35 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472153\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/registrationBanner/981x411-10.png","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:48.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/registrationBanner/981x411-10.png HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1886935\r\ntraceparent: 00-7a2ff7edaa3d6b21b5b6cac2cc585b39-7d3b923affa7b7e7-01\r\nlast-modified: Wed, 08 Jan 2025 11:26:52 GMT\r\netag: \"1ccad7-62b302364463f\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:08:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 864332\r\ncache: HIT\r\nx-cached-since: 2025-11-28T10:56:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1886935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1962 x 822, 8-bit/color RGB, non-interlaced","md5":"a43491f15a2be867037525a6f59a28f1","sha1":"5f4abff1b6bb36e423354cb4f2f77764cabadbc2","sha256":"e5fd86c21d0a46b5ef682e9d15156641c7134ae9f6aa4a322dd6aeedefb3c226","sha512":"8e574cafa2a8713f23817c2b2e07f5e400778f64c0a4f4b005aba1489c4491eee5768b94d1f1bfefaa9068b8837b22f214047589f7f2c42da2adad81f4b5c09e","ssdeep":"24576:Hh5F43kxyFp5ZRx9k9noXnjrWJojUdMqvuwK:HjF4UyFp5ZRx9OoGWNr","tlshash":"852533c2bc83f5f106f533eb8d3b6ac902b5985814ba1510a5f1d753f2bab20965cb9c","first_seen":"2025-11-14T01:20:20.94766Z","last_seen":"2026-01-18T23:41:56.308207Z","times_seen":15,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-63e4ffdb399336e06f4dbf11f38d6117-9f1c713e107f5ce6-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: \"68e7b338-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 4158243\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T07:57:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":54,"dns":5,"connect":5,"send":0,"wait":2,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon59.com/favicon/favicon-228.png","fqdn":"leon59.com","domain":"leon59.com","tld":"com"},"ip":{"addr":"80.69.173.163","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:40.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon59.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 08:04:36 GMT","end":"Fri, 27 Feb 2026 08:04:35 GMT"},"fingerprint":{"sha1":"2B:02:87:4C:9A:06:21:79:00:84:BE:C0:36:38:6A:81:ED:BD:98:FF","sha256":"CB:73:28:1C:5F:A4:C1:A1:4E:03:7D:92:FE:ED:BA:E2:C3:AC:5F:F8:43:E1:06:56:8D:53:96:9B:29:CD:1B:9A"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon59.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPs0l1RPuRftbPhA+C2ClRWvmbbNdDq5ddtmsCeqhBLcy3hsM2qkSP/z5j5B7mA+SV+1wKzFwwI1IfpBsG44=\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Mon, 08 Dec 2025 11:01:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-03-29T15:19:13.454848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:51.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 02 Dec 2025 23:52:39 GMT\r\nexpires: Wed, 02 Dec 2026 23:52:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472152\r\nlast-modified: Tue, 18 Nov 2025 19:00:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-04T14:12:03.989082Z","times_seen":18059,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/sevens-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon59.com/registration?PHONE_INPUT=\u0026EMAIL=\u0026PASSWORD=","date":"2025-12-08T11:01:50.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/sevens-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3508\r\ntraceparent: 00-104a735875258cc4ba22530d63f52ec3-bb6785d9ed336480-01\r\nlast-modified: Thu, 11 Jul 2024 12:31:11 GMT\r\netag: \"db4-61cf7f01e8600\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 871851\r\ncache: HIT\r\nx-cached-since: 2025-11-28T08:50:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac855577c78f4bd9edad9b490788b53","sha1":"d2deae54c7d3bc48016c1195e1a40592b15340d7","sha256":"046036e7f874f492979b65f952a66e194b8f1739f24a64d40b2052f944114bc5","sha512":"28401e4f1338a0bccb32462e90b4fb7c8c5054ab3bda45a0799cd63c84358f5e606d149129418a9995f3403b8715389f337cc4a966982cf48fa828b96ddecb3c","ssdeep":"","tlshash":"847113e5b3d8b3c0d909a7f1147b5974baff34b77b04cf865345b9a4a71a294892cc20","first_seen":"2024-12-31T04:55:51.417914Z","last_seen":"2026-03-31T00:45:46.252606Z","times_seen":55,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon59.com/ru-ru/registration?qtag=a34309_t41929_c242_swbpui44ucqe7pbnejq8c0ss0","date":"2025-12-08T11:01:39.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon59.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon59.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 08 Dec 2025 11:01:39 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-cfd0825a4fa4519510fde86ceb11abb1-2a6acfe7c42bede6-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:55 GMT\r\netag: W/\"692f10bb-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 250572\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T13:25:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":57,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}