{"report_id":"1ac19fc0-1afb-4de5-9aef-8b8ada1c8aab","version":6,"status":"done","tags":[],"date":"2026-03-04T23:34:27Z","url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wl6o2pdrmdq0l7ogj0hefgj8","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"title":"Online-Casino: Über 4000 Spiele \u0026 Schnelle Auszahlungen | LEON","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"4ef6e243eab2a798c02957f7164a631d","sha1":"98a455515999ffd3cf05d0d8cc0b099c7de39c81","sha256":"2a7e7a1667cdaa2a8e0a41067906abc8c9d106d19bc0fc738984be6af11c0fc1","sha512":"18c7e349866dba7db12a1463ae72a88752643ca90527cd6111f575d87060ffa363908002bc48003f90317c9fc81b81446298cd2697535c6d4e13fa645edebf55","ssdeep":"","tlshash":"3ef059b66c11c85509520fc4c1f1e82da60872e71200dc85b9fe66f8aa8699a8c0d288","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wl6o2pdrmdq0l7ogj0hefgj8","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T23:34:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T23:34:11Z","timestamp":1772667251,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":38052,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-03-04T23:34:11.168110+0000\",\"flow_id\":1260992758780078,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":38052,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-04T23:34:11.168110+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T23:34:11Z","timestamp":1772667251,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":49959,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-03-04T23:34:11.426977+0000\",\"flow_id\":1953027954279393,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":49959,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-03-04T23:34:11.426977+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"leon7772.casino","ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-23T00:40:32.215191Z","last_seen":"2026-03-02T20:04:34.767542Z","alert_count":0,"request_count":19,"received_data":2352022,"sent_data":21341,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":11,"received_data":373807,"sent_data":5977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i64cl3er5t.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-23","domain_rank":4837675,"first_seen":"2025-10-18T07:34:49.497184Z","last_seen":"2026-03-02T20:04:32.503861Z","alert_count":0,"request_count":1,"received_data":43953,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ps.l.liftdsp.com","ip":{"addr":"52.84.50.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":602474,"first_seen":"2024-10-13T05:47:12.053455Z","last_seen":"2026-03-01T21:35:09.415731Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"d1cr9zxt7u0sgu.cloudfront.net","ip":{"addr":"54.192.209.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-05-17T11:07:13Z","last_seen":"2026-03-02T20:04:32.736544Z","alert_count":0,"request_count":1,"received_data":183162,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2026-03-02T03:20:15.04951Z","alert_count":0,"request_count":1,"received_data":8368,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-01","domain_rank":0,"first_seen":"2025-02-23T03:47:42.85381Z","last_seen":"2026-02-26T15:36:42.992946Z","alert_count":0,"request_count":1,"received_data":1284,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"leoncasino.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2022-07-05T10:57:06Z","last_seen":"2026-02-28T15:39:52.824752Z","alert_count":0,"request_count":58,"received_data":8196519,"sent_data":27141,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"44.193.165.2","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2026-03-04T12:18:11.487568Z","alert_count":0,"request_count":3,"received_data":17042,"sent_data":1591,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2026-03-02T06:26:58.685867Z","alert_count":0,"request_count":3,"received_data":1780600,"sent_data":1380,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":76051,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"track.liftdsp.com","ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-16T05:39:57.442139Z","last_seen":"2026-03-01T21:35:09.518682Z","alert_count":0,"request_count":2,"received_data":10249,"sent_data":2558,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"pixel-us.r2drtb.com","ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-07-08","domain_rank":5001008,"first_seen":"2024-07-30T23:22:43Z","last_seen":"2026-02-26T15:36:41.542001Z","alert_count":0,"request_count":4,"received_data":1963,"sent_data":1910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pool.liftdsp.com","ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-12T16:56:20.115696Z","last_seen":"2026-03-01T21:35:10.379936Z","alert_count":0,"request_count":2,"received_data":920,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.44","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2026-03-04T16:27:10.351557Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":742,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnimages2.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-02-26T15:36:42.061636Z","alert_count":0,"request_count":42,"received_data":632533,"sent_data":19456,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":2,"received_data":956303,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","ip":{"addr":"52.49.104.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2017-11-23","domain_rank":569757,"first_seen":"2023-03-14T13:29:10Z","last_seen":"2026-02-27T11:11:43.124139Z","alert_count":0,"request_count":1,"received_data":998,"sent_data":477,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-03-01T22:34:33.541148Z","alert_count":0,"request_count":2,"received_data":1678,"sent_data":2889,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn0.match2one.net","ip":{"addr":"104.26.13.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-08","domain_rank":743950,"first_seen":"2018-10-09T19:50:01Z","last_seen":"2026-02-28T06:42:56.861529Z","alert_count":0,"request_count":1,"received_data":5856,"sent_data":423,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnimages3.gcdn.co","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-02-26T15:36:42.768152Z","alert_count":0,"request_count":1,"received_data":4583,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"261a3687e95f909fc55ce476823adbaa.seondnsresolve.com","ip":{"addr":"54.154.208.0","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2017-11-23","domain_rank":0,"first_seen":"2026-03-04T23:34:38.084617Z","last_seen":"2026-03-04T23:34:38.084617Z","alert_count":0,"request_count":1,"received_data":257,"sent_data":489,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-03-01T22:26:39.665209Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":718,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.deviceinf.com","ip":{"addr":"104.21.26.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-30","domain_rank":665604,"first_seen":"2022-08-21T01:08:30Z","last_seen":"2026-03-02T20:04:33.510675Z","alert_count":0,"request_count":1,"received_data":679479,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/dd2143ca.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"173016191c06704eef04f03986b14bdd","sha1":"9c12772a51df61ebaef02952023c16c464dfca3a","sha256":"b23a26c77610197fcf71c118bb19b4f0f67403cf25eb4c0048c42ba0da66f91f","sha512":"d63d4789357a1eb484c142e89df23fbfc84fd32ac94d52555cca9d00f7aed910d9769993db3e918d1357ad54785f4caab085ef42d9949560340a8afaf1f63212","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5d:440yRbYVfh7WBknQL61PHd+ejJm8","tlshash":"b05380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2026-02-26T15:36:50.678293Z","last_seen":"2026-03-08T14:14:44.173037Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-de-json.30bdfb96.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e22b291f1663196951bc7ce60ac66afb","sha1":"0b63958f7eb3f2787b9ebbfdc594a91dc868dcc6","sha256":"90a74545339cf92ce5a00bb50877df34d88444dc30f3729278282187b8de1ecf","sha512":"f1837efd3fa9478670573acc04186e77c0a9bafd8cc8d788ea1fcb6164a30890e800606dde895a843a210b39d25621fbd16e05de9216a529689a61a27d35d0aa","ssdeep":"1536:mbO7Pty6aW7fXMwrpdFXFMcc7kia1Z0KEgEmtyxHfYhtonLr7+TsKUvXNwA:XI6Cy0UKYPlTvUvz","tlshash":"4a83a40e8c65ad76475f07e32c8a6dbebbf483ae62c4561afc85c91d01c9b81c16f306","size":86656,"data":"","first_seen":"2026-03-04T23:34:52.405629Z","last_seen":"2026-03-09T05:35:27.537233Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/4e25ffb2.d.m.BiorRAM8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"34e4ed8466376ebe51d11f0cadcc796f","sha1":"54421cf3a7ae34cf21d5ef1ed70bee8f119c7fc7","sha256":"6a258fc037db30c5588468b4ce9fa420ee40ff2af68fded7ada7580879ab45ca","sha512":"62863a2a4708d9f2b76c5400408a99f574658880a3a2b1dc6942df80d2998f021c406eaedfe4aac4f12290c1233e65150832a5f601fb09857b016fcd9fe752bb","ssdeep":"","tlshash":"faf0c0cc72c2b45402670479803f9c1ee63a799037cf80d0d50590b42a7041b8137f29","size":512,"data":"","first_seen":"2026-03-03T22:41:35.225253Z","last_seen":"2026-03-08T12:35:28.034313Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c6617b.d.m.FaP19qJP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"be61dc1190f14024ac73bdfc0789010a","sha1":"d4d350c8bfde3e9c812decd5c4caab02d42779c5","sha256":"1d9bcae096ae844b105fadfb6eaa3ef3a9d5c5770e8dc2b2ccbce3baf6a4dcd2","sha512":"a85a0d1688e865c7f75d9e102c225245cc7054c79273a063f91dfe5c50f6f496c852e69c994efac893acff73166d0f92edd83108ee2a4e26ad634b7dccaecc03","ssdeep":"3072:qL0KfKGJvEvGdrSaV67dmcgUxHtu8cAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5fa:MpfKGJvEvGdrSaV67dmcgUxHtubAUA44","tlshash":"e2c32a89bd457075c7674ece823a1400772e1f92e2598891f0ba8ffe267e8149376b1f","size":124730,"data":"","first_seen":"2026-03-04T23:34:52.580275Z","last_seen":"2026-03-08T12:35:28.026684Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e6340h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca35270efcdf6d70e7b700c33706b324","sha1":"fd03e123c7b9f0dd6a0930e47b6f2ee5f023ce3b","sha256":"31165d395a205704f3d367db12b0cdd71fe7172864a96f38b68676555879bde0","sha512":"3311bb502170a61b0bccc291730722b19d0c7e1041f05f77480100732b563c2abed2425533a1946366a7bbaae577bf1397ba34f555c46c43e28413104a2e0dc3","ssdeep":"6144:t8kKfNl3HjvNQB/KI0SfZ8RGw/V0sApXx2ZeVJw:+/FxHjvIDfZ8v1","tlshash":"40942aceb3c674225396f478403f018ba57b68a2b48cc89af189dcd46e7459a8137f7d","size":424634,"data":"","first_seen":"2026-03-04T23:34:52.509398Z","last_seen":"2026-03-04T23:34:52.509398Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ba8af1f8.d.m.BTq0UWdl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"83f4ec756eb7e5d705cd9184e6bee854","sha1":"65e1a59678db2c98e9bec54e70dd14b16f281ff4","sha256":"7d96d4172d9788f21b8205aa110e0a584eb8c2ba04906c175a9cf8452b2b65e2","sha512":"5edb2d04a701b5084ef91083b186e24e6292df54cdb67dceab49dc7c16d1f9a472ded4a99ce0ae0ad25363aa979aa1df01763750323e248f66dc5a044268f1ce","ssdeep":"3072:PNj4WRI1JRRYYIkPXE71Vm0GPe74Thz/ZzgVSVnq:1j4iI1JRRYYIkUVm0Ga4Je","tlshash":"dad3e5c8b6e3f06183e22070402f440af27e6d69949cd494f6a6d4f53df995a8637f2e","size":134593,"data":"","first_seen":"2026-03-03T22:41:35.008011Z","last_seen":"2026-03-08T12:35:28.01963Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/444dbad9.d.m.COHDy9Qf.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"a0517c72f11103ed464859912922a96a","sha1":"bbd225f4fc02e62620c85627241b0a75276b3bf3","sha256":"c45395687da9b08de31423ae7477024b2f1b8751f1f081192491e39f5ad431ff","sha512":"5b8f8b30d31dae0d32660fc26e31b2a913dd919e8efa3d4432c51c02971526004a35fe58ff6bf96f96cfa369b52204df8e1272b0b0b988143282ebdc300f6411","ssdeep":"","tlshash":"f2e07db5457b6ff29b9a4c74676cf685ab29609137064484600c91095492f93c3ffc67","size":328,"data":"","first_seen":"2026-02-26T15:36:50.591363Z","last_seen":"2026-03-31T00:45:46.151709Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/bdddc725.d.m.D1Yqn2lm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d613c144ee261f4cc28d787029b93ce","sha1":"4154259c2949a17fd67022bec810daacc705b3e5","sha256":"dd8488df556161550ff9d50fa976db582b7cb00f23af0ee71002070457bd69b8","sha512":"eda0e614753e7f7ee522fbed516ecfc2b9d80b397ffedee3443bc8ac62f5cd8ff364a8fb6839ce600425e213f069eea271904ae9873e513752bf7ec5e5af8d3e","ssdeep":"768:/tXdZMMezJnhsVPiNeTH7DPnZYnMUbSytGPx+:/PZM1zdhteb7FYS0","tlshash":"dba37c983b84bc6022a67e42c809d145f4dc4e56e6fcfdf6f65add88118198e3390fa7","size":102244,"data":"","first_seen":"2026-03-02T20:05:03.538602Z","last_seen":"2026-03-08T14:14:44.225929Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a01e6f7bce6dbf5d77e90a118c93b0e","sha1":"0dd49694ef9f526b54037573927940d4f49410ee","sha256":"633fe888d0ff0434ff5676b91027d7f70c3af306567d4f1b7d5f30fef585c184","sha512":"bcfd3614437320134d84c7aa5239c54f0ceb14caa75f2bc4199dd14487d248f32638037b41ea918fe8ed8f9d34f18a4dcea0a114499759bfd0d17b70ce2bd228","ssdeep":"","tlshash":"6de028da74110c7570ed05f533b1a11875431108780a5c23ddfdc9142c189c74c134cc","size":341,"data":"","first_seen":"2023-05-07T16:21:54Z","last_seen":"2026-03-29T15:19:13.493938Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b3f0d27d6e0ea387afe84afbec9e507","sha1":"e3e791a5f37107fa33f164dc0c2470fc877076c3","sha256":"6c7a95b231eab929c2c0e29937226e151fb9fb817b057535ccaee550f8dd3f2f","sha512":"20deee640d5db2b8266cc6787b93268bae82e5c7450703750f931399e3c7ddf69f73c509ff31207f56f83ce988161ce85b1759e82e54154c315623827b49e2a6","ssdeep":"6144:RFgtTEarkKfml/jvN5B/KI0D8RGI/V0sApXxMNZir:w/+Vjv5U8lC","tlshash":"deb4f98eb7d4a87ac3a65524643f060a663c20e2b14c9590f0daccd42e799797163fff","size":530433,"data":"","first_seen":"2026-03-04T23:34:52.394543Z","last_seen":"2026-03-04T23:34:52.394543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"34661bed3d02c3ca84ff0fcb188516e3","sha1":"96cb189c3903862a93b58124a3a8f638a035b61c","sha256":"86b9a87224dedbeabd3767e9c7554ae29717a9eb7133be23addf231d6acb57b2","sha512":"8ce4348596237e3aaba893aea829bc4e6684caeef09e6294099a0720825ec173464f7d2e82c247106ca462ef31d51ccd0330e7f8c616fc6a690291f61e938554","ssdeep":"","tlshash":"a0e0f16e432db502e2a920937f31260c3431c1ff3b00c8c50c4c5d14288af9bfa39c54","size":387,"data":"","first_seen":"2026-02-26T15:36:50.744806Z","last_seen":"2026-03-28T03:46:07.88586Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.CE00Zgc7.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"91178ec76c295b596415690a7f991450","sha1":"7926a6567497b3758f9114fe3478b2d03c978169","sha256":"865cd0cb3c76e4625edf2d191e3c44901e3986a4ff000b2b3dee72302de6677a","sha512":"982e1bd4c4a4395eb9e58462a3c291954385123f2c97e0efab33cf349efa59b4a8d9a8349d500f4b1c51c4dfc4a53341c0348d88e324128466748c692537cafd","ssdeep":"96:b2l0LhPac0uGzGtmIGm0uGz0lYLx3LyLDuGz+NaMvbrXHvSwrSA:K6LsWUi1U0YVXU+BTrqw+A","tlshash":"2da1c88e3c7e5471abef944fe1680c19ad6d0ea726554e8190ff04b727ab850e252523","size":4658,"data":"","first_seen":"2026-03-04T23:34:52.590225Z","last_seen":"2026-03-08T12:35:28.023471Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc6b0e0b03d3446a8c2870ed674b8c77","sha1":"c6986dd3070cb4bcd32e1e83cf06e253d9877495","sha256":"6889bd65b39c3eba8e3198015d9746d2fd8196db4c064bd736a07095a029eca9","sha512":"ff780f0d9389e7e542569a58df95e2ce7c7484bed64c26795919019b5b16eb7e1bd2c9b9a1984ebf1da5ede23ece0f492d966ee365e66f6e4fbdc89b593840c0","ssdeep":"","tlshash":"f0113b5b5ed02fb2938303eb2c2f48c6fe15cd6438d2489e541095d63ce0519c76afb6","size":1000,"data":"","first_seen":"2025-10-14T16:37:55.419115Z","last_seen":"2026-03-08T12:35:28.060284Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/08c19264.d.m.CUzuJc5t.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"32f827af1e16c1e7965ede45da493240","sha1":"1df728a1eb53e56f0759bcb54d62ad1e0cfbc3c1","sha256":"5b6f99c9c0c792119a7e4046b44dcc460a20963057d810fdd6d672ff8e763953","sha512":"81517b057908e936af53174eabaeb8ae7ff407e33a13c53d87f9ebc61ed3389006d2e291252c546a82eedd1a0398a0293ea6c849f06a79348d85ace158118674","ssdeep":"","tlshash":"505112f8f167e170805b5cdff02b62db63360b967859b067502ca9b03532b245726f78","size":2977,"data":"","first_seen":"2026-03-04T23:34:52.487673Z","last_seen":"2026-03-08T12:35:27.940954Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.BUphhELS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"db8bd97a65ffbe42be11483fa2e7454a","sha1":"b8da5853af4fb0726a752d64a8ddaef70f6da02d","sha256":"684b59b41b31e9491f8383968dcdc57b4161764b28a39438346c2524897e3e73","sha512":"8076aa3d5de25a552009e6ecce8b8d914902d03594dce3777cff2d3f811be5d630e2a995e133168bb26b42c8e8fbafbd0c4844d7ea2716b30e7c94e67263eb6c","ssdeep":"","tlshash":"a171d8ab7fb9e536818285f2a03d72059234916c7415c4a061acafc93a63fe18da6f09","size":3746,"data":"","first_seen":"2026-03-04T23:34:52.386845Z","last_seen":"2026-03-08T12:35:27.972938Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7016086.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"952a970e6cb65c7f5f81ffbe2e407c37","sha1":"010df53790d74f09f12a84d1c544c0b4377d464a","sha256":"6d3c933ffe12068ff6f4afa5ec3d44cb9829f662005ef9ac6d40ef2127df9bb7","sha512":"4bc0253824499de28ad4cc866350902ef238a9d8d3ec4c579186db26831882481114208050a49caea3e633b6553f3c14621a2490d0e5006b6529440df346847b","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJu:dxtL7PD4hsy312IhALo3aS++FwIaGPfC","tlshash":"bf72a4e93183b53553eaa9e7403b010af33c3944344f9494f6aeaac63d7651352b3e7a","size":16135,"data":"","first_seen":"2026-02-26T15:36:50.730644Z","last_seen":"2026-03-08T14:14:44.227827Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3ed1c1c4.d.m.u51vjh9r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"f12567e1fcce322faf0b0920d49a589c","sha1":"f60c219c0efc44078df9637199d010a2ddb193c1","sha256":"09f670c1bf2bbbbedeaf476920164d45d09b49fe230abe4c20045bd36f3e850c","sha512":"f08d46178bf6fd2b969671d87dcb4403bb62f8a94ac0b8d1a36f7f9e70f9c55496d361d2675a6d511e644e3e4e8e8ff4c1a3331688d8269c61467e41cf7f4b54","ssdeep":"384:AyCRbRbsCBQmjArdP/LDbcnxAofaRxncvt825L4RJdh/3WFgBBYxTha6O:zCRFbssdAR/LPcnxJ+xncvZ5cPD/3WFy","tlshash":"2562f8f174ed657043e616e0a0770106e6e9512830c9c4a0f59fc9ff49eb980a9a7f7e","size":14744,"data":"","first_seen":"2026-03-03T22:41:35.256517Z","last_seen":"2026-03-08T14:14:44.15343Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.DeWkVyrZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"f1d9c81c34c30fa08cf789e79a7ee9ba","sha1":"e443aa2b3b28a6b538cde510d5be97f5d08b523c","sha256":"ea0186be3114889b598480ba135f743a0154e248e7f8979eb47b5d651a87c95e","sha512":"dc55ad64d28e87d803ab01c79608a3652a6352cf3744841ea152ab2167327e6d86242a95fbf29a92ce1fb6bc57bac07a8ecf429ddf99d00e0996538c9518ce2b","ssdeep":"","tlshash":"4a81964db1d670b9d33700d0c02704a9422a57687273acea906f56365a49c68f3ff567","size":3988,"data":"","first_seen":"2026-03-04T23:34:52.581781Z","last_seen":"2026-03-08T12:35:27.966153Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"e010df91eedb42b28f42e8dacf44d321","sha1":"1d443c117cfa6797286e0dd132f2344f46b468bc","sha256":"5f5d5b0fd8ecea4d8222135a2c3cb4161e5420ce4f9845600d05bd1d929d2b9b","sha512":"848f1f593570adc359ef370f45d71e463035c1583e1c45a7ebdbe8a68f60348df3196749d7b6fe425169d2d3335462d02220357f4e4054a1bad528e2703e3395","ssdeep":"3072:o4SrOVJToUQ/zN+5WNJg/OE/nXUBL5uz2opBkdK8brDou3km3:cOVJkZ+5WPgb/nXUBL5uz2opBpYrYO","tlshash":"70548514e661adfb76b0391e722a67e2603286143f51c27201d95b793f2f84dfa270f9","size":294302,"data":"","first_seen":"2026-03-04T23:34:52.611633Z","last_seen":"2026-03-08T12:35:27.978533Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7ad78725.d.m.D1qVjhTC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"16867e2a01fcc70ab15fece635615655","sha1":"3837108756a5f58f1018003b1b132209b012ecd6","sha256":"d340a7a9f29fae5c112e0a80411cc64288ec64055ee6ceb051c0b0ddf5c6e6d2","sha512":"c7c2a8aca75fbfa5d7d994085f2bfb5da38b66ffcecb17634a5518ce963e0110f5959ec96f1a78dd015dfe68937eec38e4636d0447acb7a1c288fb9fb7294b51","ssdeep":"192:TmRtM/Xthoi8s3Hiyy/jin1lKIE3nHHNePhO6M0viquSNoRkxp0Wq9HozoMHkFHO:Tmm9aasuvXKnu5MVk3Z","tlshash":"68423066d2c5cc316213c9fa00b42480f54dce06526886a6a5fcd9bdddb1c3fa07ebad","size":12229,"data":"","first_seen":"2026-03-04T23:34:52.401977Z","last_seen":"2026-03-08T12:35:28.037709Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/eda0a406.d.m.DEvmYJeT.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"08c7a5cd62ba0665b8ee022710a0acdc","sha1":"d8da9d928dcc998a0ac5b30ca660191e4bed4a6b","sha256":"6a156f2cb797a22a5749d4e908d9152481ce8c805b92d47b8c98171d4dd91ad8","sha512":"456f58255dd73cac46e5975b3c2e32c460c2c9fdcc132e1cab49dae0bbfe4ffa0acefced0e9ccda8da24416bdf66f285cf15afe15ee56150d170bd46915c1036","ssdeep":"768:5jFRIzGsrCF6XeaX7HXG/M47959s25CzXUr3JTogPEoTok4ervoNAX/DDVYgaMCP:BKVCF79gq4AX/DDV3TCi01GOl","tlshash":"e1c2f9c1329276a1838684f6ea320212f33e24543805a8b979bd75d779c1d47af73bf4","size":28023,"data":"","first_seen":"2026-03-04T23:34:52.363659Z","last_seen":"2026-03-08T12:35:27.965114Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.13.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","size":5052,"data":"","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"631036c478b6a0b0aaa7d71707779f0f","sha1":"94053f2e94b305e3dda29c04d3ce22346a8336cf","sha256":"0c390ae44fb3e39f9e23de7e61857f53e78be006a2c17cfcd0e583d073fa3762","sha512":"a62202769c20f2ed1686a8fa7c619fc9ae2cf0c3cf33ba268f901422dcce0f910f1ced698eba91c9348863f385c16e9bfa4392c3e220c1fa7d589750fd35a8f4","ssdeep":"","tlshash":"c3f00255790b513d47a3607047ffc20b2827a0a711c1c849d916c8b81fe5ac8c59fbef","size":625,"data":"","first_seen":"2024-03-29T05:33:40Z","last_seen":"2026-03-29T15:19:13.502083Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e62ac20b439f60a523a064ac980c69","sha1":"ee9300e32c4e9ba5de140d3c235c4c44705ebd01","sha256":"469760fa759a628d726e90690fb8538d62ba3fee106ab71d0d9231f03bb14fe8","sha512":"6b17fc3a5b60c88870d59c0c6152498c6ff391ac05bbe954c80d47bced6d13498e7dfce33f1035022e36ef8434b4646999d7c28d3acb3d9d1e36c561a25280ef","ssdeep":"","tlshash":"43e06145e0a4167b966981d1f60177553f158a2198c959b3744e1c4d254d35315c0d1c","size":375,"data":"","first_seen":"2026-03-04T23:34:52.625418Z","last_seen":"2026-03-04T23:34:52.625418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"229adf2cf237c86804f7dfc9f316aa81","sha1":"e2a479364df94afa345ac5553b4e5898e1984c72","sha256":"87a167b01dfabe2ee4c8a8ff5a077bee05d1e760fb2950bdc77b4542b43690e3","sha512":"d2258e447d9de3df7014d5372eef62e2d3677b13ee7dd900fec18cbdaa251aac3f1e8a67cadc6c1661a34393fc51235caa37440b22b4c0e7c2ebab9ec0236aeb","ssdeep":"","tlshash":"48415b2e25f1102241a3b17d079bd25173338313584aed583e5c13557f969aa89a6f98","size":2065,"data":"","first_seen":"2026-03-02T20:05:03.714604Z","last_seen":"2026-03-08T14:14:44.263893Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"51f70b9bc0296249fa8ed66683ff9e24","sha1":"706f15430cb4846bea73ebb6f808164814315e6d","sha256":"909db3dfc15faa1d209620efdf44ae17df13980d95920b47a3bc83876bb3d68f","sha512":"902a0f99b263196e56aee1a40cf4c06979664b426c989eee9af1145e6981e43fe792e761bd7b5f21fe86893b52baa15b2417a8dc07fba8dce5433cf7edf9a6ab","ssdeep":"3072:brXEcLVA7lxpI0dqpHMSrfF7w8YmGfDPRUTmXf0FqzF4Q/BBO/tVDbL/:lZp9rV/8mSf0FqJ4Q/W/tRP","tlshash":"5884e68d72f426b04597b0b4b53f09327234e503340c4daabd9e12989f99714eee2fb6","size":384488,"data":"","first_seen":"2026-03-04T23:34:52.594737Z","last_seen":"2026-03-08T12:35:27.958839Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/65c7eb77.d.m.DIGp6D7R.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"cb6b2195d2a791493689af8b64d9e933","sha1":"e0fe14ed2b78312a7f189fa4cd1615ae2e3b3f62","sha256":"3350fbd8d2ac7704e5e19b2f96f234f34958ecb7831278cd492161918bb61bcd","sha512":"307d3a0ac85586f29bbbe6097817a2dd1c4dfd0fecc73e8f2ebd2e8014edb3e50c5a558678c9364ea55064bcdba3f146a14a95e4bd7500874a4695d105fc0808","ssdeep":"","tlshash":"fc5144ccbbff60702aa9089590a7b007b3bfe995712d5152f02c95b1794349f916b90f","size":2546,"data":"","first_seen":"2026-03-04T23:34:52.568615Z","last_seen":"2026-03-08T12:35:27.975934Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/017fc061.d.m.6jXZaT8y.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"7473a31f3263453185cf557250b29f38","sha1":"6a2e1eedc05dfb2ac61a4abd81de3e6f5a2c9ca2","sha256":"103b46bfd5001eac175c1419c8f8d2aaf9b5a44ab3d596c54ca14a8a57c0435d","sha512":"df3f21abd0ab7e701f43cf7aeb68cc4eaa3f45f6d3e5c560cbe8f6f21dff2c0bd167e5483b5d27d9d4300a2ba23c5b1b13401db2f28eca788b89cf3e0254b1f4","ssdeep":"768:I61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Y:nzmp7QA/BPWUY","tlshash":"c903fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2026-02-26T15:36:50.671476Z","last_seen":"2026-03-08T14:14:44.19034Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67ed7006d72a612c7dcdbcbbd266e343","sha1":"05e6a480a6707dc120ddaca22b061e1ad3eec27f","sha256":"e5e92dba952a599c8eb061cb5749ded9eba89441e029b17f8e4b81b13fd6dce1","sha512":"ffe77f02c56d455484acc9a0fa50079ad20be85c6015208f6a868de574e12ddc064a25875918fd216b3476dea5082a8120a977ae3c68afd5bce61354426facfa","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpYJRzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOWTMMiZ935pqUP","tlshash":"14f194feb6c2797806a31566623f770c7f3b658428494890d069c8c8797adcbc11bfad","size":7614,"data":"","first_seen":"2026-03-04T16:27:14.337278Z","last_seen":"2026-03-05T09:01:07.969447Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-03-31T00:45:46.296227Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/6449d237.d.m.ByWm2iQu.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"2f3e76b7228717616f74106af52bae74","sha1":"5e2de4c1399bb2d492e286086b92bc8a8f067ecc","sha256":"afeea915b31a1ea72839fa741dae9c72960dcf30ee46235d77e24634bdb557fc","sha512":"aac003e2d2099ed9de61022107a0640e2c33c49382a6652e91849db7489071a26016d64caceb95235aeff0e522ee5714588ea0f0682c0ad9ad694e327813f42b","ssdeep":"","tlshash":"a95141c035b17a61966b2af3c53f012bf57a1895fb0e64c1b816edd97834032a35fe89","size":2571,"data":"","first_seen":"2026-03-04T23:34:52.439414Z","last_seen":"2026-03-08T12:35:27.951587Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b104f410e577555bf713d14b3e61cb5","sha1":"5648bba8e164d96ee568ece5fabc7ca82c7629e3","sha256":"1f83c86cadf595b7e55a7e9234b32b6afcb8c724c454a1a959190257e2f36581","sha512":"a692f8417a24c3ca7c87701f1845eafd88e600c7c317c422a3df01954a98bb1a0134cd4e3f0579e07717ed87b203fc7a246aff84e829afb4c911536a1b781309","ssdeep":"","tlshash":"fa1110b93230707dd5a30ac3a5eea746367694144407cce450e4ca4c7764dbd1af2e78","size":949,"data":"","first_seen":"2025-11-14T01:20:21.025653Z","last_seen":"2026-03-29T15:19:13.507196Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.DInlJu0p.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3412bb20341ab2b5d11547b841aa815","sha1":"5037169b6545696d40214dc3e2ee48bf7872fbee","sha256":"be2ee008548e6e5c6118d90fa0290195649b6b137fe4f0242091bd719e294faf","sha512":"f0c3d0581b3606bc751ee87be3feb3a7779b98faa2fbd770005e1beb5d1b3f23422ce91a5868d9aeab8cd43ceec6539d7604a744102fd54ab125e645b2458fc1","ssdeep":"","tlshash":"91316609629295754aaa18ed815a3721b321dfe1312cc5e1e0ac7c693d61813ca1bfe3","size":1866,"data":"","first_seen":"2026-03-04T23:34:52.521498Z","last_seen":"2026-03-08T12:35:27.995806Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/769087b8.d.m.ITzlo9tB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"a97b2ac14757f4188da0ec0ef2783734","sha1":"f609d1ed485daf753a305a91c8cf30f8aa82a2ba","sha256":"1ce54bfd9a8ef9a74e095ff20438dd261ed146d5bd74ba3db0714760b55690c3","sha512":"c85cfe94e20f8fd9a422a0b6b5be3eac8966046a92fa141f0cd12d63cf62bf5f3d24a69f538527689a25c0b439e0c5728e414292481ff01d099680605d26b4f9","ssdeep":"192:AULK5rHvInYEbNRMNVLAi2JVWUwTwqjkW6JLRvpsJY:NOPInYeNRMLAi2KUwTwqjkW6RRxsJY","tlshash":"d912c5cd73d1fa7252a6a9a5203fa006bb7f66a9681c4420d14dd4c13e7588fc933fad","size":9548,"data":"","first_seen":"2026-02-26T15:36:50.748248Z","last_seen":"2026-03-08T14:14:44.173525Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c32793.d.m.v8ZQq4JS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"912928d834eff91c2c361005cb295167","sha1":"97001362f1a7601eaadf138e7585a8800578a4b0","sha256":"e76a08dd833ba0a007c9485deabf1b3c43a8788aae4254548995b46223ae418a","sha512":"5644514cbd7aed9a4d48f7da2c74614d4348a01699d4b89be2dd9394fbdbb44431406c75f4687af9bbb403574a80521bdedd0c56ab3f20466f62e93aded8861b","ssdeep":"1536:vEL74pOyuTtYnBNwzBd4y7ESuuv3LtQiKcNampRSr9oBNUNrGMPFdP:ueOgnB+zBd4kquv3XpRs9kYpPFdP","tlshash":"46d3929a56042cfb0b710e2d5b6a76b422334c94fe57c037816abb7d3f7a116f01a2d6","size":137876,"data":"","first_seen":"2026-03-04T23:34:52.567013Z","last_seen":"2026-03-08T12:35:27.995243Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/510c96b3.d.m.CcyLrvPh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"3fb43cf0e16e938df60c09c79ec24fb3","sha1":"27fb4dbed40a78d4600a15a059ed97ddca2c29fa","sha256":"0172800dda12245d143c4acf587b7fcd03c470df9602c212c446469900212c3c","sha512":"db699ce018f078b0b9783656c4574f52f4519232adaa9883c70a22a265341791ebd66ec85e36ddca68fbf8be78a4cc8f88a3d43a619b1452fe1a89223bc65d1c","ssdeep":"6144:aGs6xz1aznsvYM6tbtKCyV49oeEtcsR88m6tub/9DnoA:aGs2JaovYM6+DV49fM88m6tub/5v","tlshash":"c5744d5873a27238e7fa50b9502b058173741f40341ae8e8f16dae697991c0dd3bbdbe","size":345212,"data":"","first_seen":"2026-03-04T23:34:52.441978Z","last_seen":"2026-03-08T12:35:28.006287Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-03-31T00:45:46.297194Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f611dcc0.d.m.BRxqmpcg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"1c087e3fc8cb6cfae4747f05873fa1e5","sha1":"a05d0fe86b323525c8ff30d5b130d27609c3a0d3","sha256":"4257ec0c2124167b95f4922d26bbe64ef5cd943130a2fa348bb6de928286171b","sha512":"9d4c1901262154dc7a2a34239d413fef00ff8d1659ed62750cd1cddec33ec0d739f7c7953544b7146af416d21b41390a30a80cf7334220204de3015b32958265","ssdeep":"192:286ZpOIWZt7IIZpOItZt7IB+IeNsBGBlMdStUbCRCVHCsCWRCNCCCgCrC3CLCMCx:2Ze/F1sBGBlMdYUj52","tlshash":"dc32349dff68a0a204939855926c70c3c0ed94a0a2351fd1980d1ebafe9f565933f87e","size":11066,"data":"","first_seen":"2026-03-04T23:34:52.422281Z","last_seen":"2026-03-08T12:35:27.943729Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1fca7f1.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"ebde2d39f138a42baa20b276bfd63fae","sha1":"116843f5a885a77c9f2ba259e9e23d1fd045dc02","sha256":"35b26c3e85d5472fa3cb91ddcfa727d44b843b651bdc033fda887ae732e75317","sha512":"e81ee8c2932550539af19077a06bc6b2bfdfd46ffe171793b73efcedbd3d986482dc4537d266c629a665c6f15a2971294ab176c03b298147dd4d2fecac6882cb","ssdeep":"","tlshash":"a841ddcb738498329b57d9acae1f6f72287ff246451ac2a84158f1f015820ddc05af2d","size":1926,"data":"","first_seen":"2026-02-26T15:36:50.677605Z","last_seen":"2026-03-08T14:14:44.244184Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47542f5453b926ee31b84dcec583f01","sha1":"a98be511b95f998eb3f3524eb98351da0283f769","sha256":"215c51760bb486283b7da84887bc192f3dd0697ca55556af3c570222488767fb","sha512":"c57b1e4a0e522dd714f5eddf1c2c2e851d03d3055b0590f37d3de8e9168962660adf38639779650ee2246ed322d79609e64dc253ae5eab3baaf94a670abd6a6f","ssdeep":"","tlshash":"a0f0c01360937471cf3368b8271f4365d99b406f89d25869f7bf8412af35e4460abc1c","size":571,"data":"","first_seen":"2025-11-15T07:52:07.145608Z","last_seen":"2026-03-29T15:19:13.505302Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/171e0e51.d.m.CPQwbfCR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"08342ab0e2ebb3e23a491f360dcb7037","sha1":"fc4ca5cf260015e594e13002b0478f9fd99e555b","sha256":"e88797b082b44c46fcb877888fa6af834cc5a9b4a91392a24e27466d483b964b","sha512":"aff2b34c400c085161a26652aad8f244d39288da7b8968cc14297c0d3cbf5bbe2830ed24e83946a61b332cc6d66d0367c7f031f94a8cd8a8e387e52e0aeed67e","ssdeep":"768:Mydu7OHIdKoVNQGcU602IiWLV8OmodgACvUWk/pWygvu5HSG90ZNu609ZU:MvKoVKpVq8OsP0cvNu6qZU","tlshash":"e9c24ce76353e1b28b7a41ca50770182d21446e5f44c84f0b5fe9c6e36ea8a2e356f3d","size":28038,"data":"","first_seen":"2026-03-04T23:34:52.564443Z","last_seen":"2026-03-08T12:35:28.043484Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cd13807f26fb83c3cf49e6e584bd94f","sha1":"934a9dfc7ea43f71794d377e265a06eb37a35d91","sha256":"87940c9f822580ffa29879a8c872c7b382e20df1ba8adc4af28958fa208e0e82","sha512":"c0d5ad65daabf703169dd6eace7c83012371f6274cbbfd403f706d6cc0b0a3257f165a93f0be591822e2ac990676cf8bef85ba6651b48340e28a3a08133b46f7","ssdeep":"","tlshash":"68c08c09fa2020313223870876f5894153204f3128e2c1fa41bd22a23e27bdea1dbb4c","size":160,"data":"","first_seen":"2026-02-28T15:40:00.807186Z","last_seen":"2026-03-14T07:22:16.835164Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f927d477.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"7f280d99c0cf5954311d1cf8af8185da","sha1":"1a3a7096eabbd628a3dd645e4f276580adad4dae","sha256":"8de8232d730813112edfb364db069d06378a4a1dd2b83248734b082e9d80f872","sha512":"8a3ec8eb36fa8fa6d2e967b19637c9a74d181c0cc80107cd6b79c1a7ce81d85c96662c42a0f0ee7ab20b458fc7a3b0c8de2e782fa98cc33463db7e75d1a1a258","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZquy:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJan","tlshash":"d9c1d6a9338e76404277147d259e1085b07c6884644d182af5e8f87a3c65caa4fffefe","size":6067,"data":"","first_seen":"2026-02-26T15:36:50.749396Z","last_seen":"2026-03-31T00:45:46.275763Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"a1eb8ae2d3829c8eee5a4f42a3371e35","sha1":"d89123871245e61996e0034dfe49e01fa928804d","sha256":"6ecba8b2e8c9c35813459c797adb31c9b3c9f44b9ca582b33e3af68d4f4d5908","sha512":"64a498c404181cd54c1705904069b4fc83c4e0b16c4dd3dd1dbdbd025d6a2ab04da06837167a88ff9b4b53bfee7d02e75c692a84b8c1d5b4e22e1e5f0098190a","ssdeep":"1536:i+sso3D0S/M6WTvLgzI/Q1VwPvIY5qvjV0VmqjyPW/zNdXHR:1j6MnZlvIY5ap0Vmq+PGNtx","tlshash":"b7732af93363b57293ee21e6407b0402f3ae68d9284d045cb2a5aedf397541850ebf79","size":80295,"data":"","first_seen":"2026-03-03T22:41:35.251783Z","last_seen":"2026-03-08T14:14:44.126933Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/11328c22.d.m.DFwhx_lW.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"2e4f16e9800947e4fbc92dc7825541f6","sha1":"85a4ca302ad84ee7039995d6415dccf16a6e436e","sha256":"30baecb285bdedebf675e46ac1ec37e70451ca98290d1fa00e1261014f154acc","sha512":"0ce12d19806207b1d295086e5e18a610bfc6c36ac784abbacb2c6a2dfd675b488140e250f9c0a4e3930ded793dfd5c868ad6f197f4598cadb9ac173333633265","ssdeep":"384:CkQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2O:9QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRF","tlshash":"2db2e8e93282707697e60ae5807b1106f2761dd6344e94d0b02ca9e73c33d9d92bbf6d","size":23637,"data":"","first_seen":"2026-03-03T22:41:34.974246Z","last_seen":"2026-03-08T14:14:44.204844Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f0836975.d.m.BAb8Tygs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"ae588fd624936ac22e3a8aa9219292ca","sha1":"b2aa9331487b8277a0ee65eeff291bda77ba946b","sha256":"2b09fba32fd2eeca12cf7970cd065fbf98d0a8cb26d7b82d954a55ac5c3923b1","sha512":"d8629519ef4522c036b0bfd84dfb6b70a7bf44ba62685a702b0e205cc84fe2227dfa883bb12f9b348ec12b53629f40fb7619b8a5cec39292d876f910b0e3ba37","ssdeep":"3072:7QRJ4My/FdwSwXwSNTQFAaugR6iVHnXlB9JaoPF0NFglgyhT5aHYO6joxppmK4XW:pYDgZFRDVHXt0NFgKP5w6X","tlshash":"3e245aa4728ab43147c99251a02d0736f26f8d6d615cc028f6adcee61fb8446637ef7c","size":216090,"data":"","first_seen":"2026-03-03T22:41:35.333624Z","last_seen":"2026-03-08T14:14:44.157173Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1610888.d.m.CyveyUU3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"506c8c0392697584b0d09c29d57ddde6","sha1":"699674cc62d43770f62e886efdd5a64deee34d2f","sha256":"0a0d6116c99cc44b37b92eed0e08110758f9b094a30ab4392e19fb02c2926040","sha512":"49853ed6f865e58933b14c166fb49bfefcb7482cf0e6aa5a31e35e383e6aa6dbe0f48be0dc376cc81a3d2083d063b7e2c4644d09a355920234e1245b152ca97a","ssdeep":"12288:21OJGn02zHl7TwBZ4qWp67h7Y6Ud5bCzjd4yQYdwg/dv2LB51x1S/:21OJG0257TwBZ4qWp67h7Y6Ud5bCzjdP","tlshash":"7fc45b957151343547b600ac806f050ab33a2a2e685dd8acf36de9ef29adc49317ff78","size":578508,"data":"","first_seen":"2026-03-03T22:41:35.041228Z","last_seen":"2026-03-08T12:35:27.947237Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/faffda3d.d.m.B8C-qUM8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"8869bc499fc36bb64cb64c9bf61ee769","sha1":"a8f895827d19dcc713d4d994ca102aaf4e85059c","sha256":"e15372a04aa19add6a4fd53c974349256b3f3ee740fa75b086d4ff60d6b09972","sha512":"5e6ab77e5c5f5b3731de94af5f34450b65ca64c04e4b36f17c8c2f1ed3556726b4ad94f88b503484c5cd46ad5e182439559b5e53fb8370f9e7f1bafe275139b9","ssdeep":"98304:KYnJ/YbdcU1RHqPvJESC7OvFUa/Ssku0nUw7AYrUVC2:KYnJ/gdcU1RHqPvJE2w7VrUVp","tlshash":"76065b46b55924b9c7f36445e05b1400ab7c1b82f2e488d1e9fc8e2f27a9d78533bb1b","size":3751528,"data":"","first_seen":"2026-03-04T23:34:52.63173Z","last_seen":"2026-03-08T12:35:28.058395Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/036a973d.d.m.DDj01hZ8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"5a56e623158dbfcf5853375bd8308664","sha1":"547e1dff805f86167550b015cc623b60116612d1","sha256":"9501eede310c3d02294cb1481653d19be86207e5e18667ee7859562cee0b95d8","sha512":"3ddb81be33c8de942b8b8397cb626dd6d38f13f66d703a7c5998c9a83d6cacbebf60f3b8d6a81658197aca43ac13f05d52b14a69d984ca9c2e1bd3d6cd9758ed","ssdeep":"3072:glPCf2+Xb0xeLKOBlv4LyFMME3VF99l/yAj6CUVZ0XjGU2/i:glq90wL7BlDFHuF9T9j6CUVkjF2/i","tlshash":"905419d931d6713353e60aa590bb0102f7355a90344e81a8f52cd9ef3dba44aa2b7f3d","size":285362,"data":"","first_seen":"2026-02-26T15:36:50.681992Z","last_seen":"2026-03-08T14:14:44.155141Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7de448608ad3c4c67c5ca701b40827dd","sha1":"a6066a685e2319ccf77a6503fe366bdd8dea6a79","sha256":"c5c62db6fc4a90fbe9d8a95fc96c67b156d5bba1e9231715a4cc83701391d8a9","sha512":"3a5fd178063c409b5dc1d20fe53fbfea8026488597efbc4e9bd45819e2516af2a16437ce668d41c4a2f28bff9c6e8b029184540dafb5c092ada9b4c2883a8d35","ssdeep":"1536:vhUQdpzojnUDvMeZ7hi1vrh11TUBKLuf3Cc59dWC0CCI190Reka4XpNfvhz1m2W+:3dmUgeZ7s1vrhpc57lepVhz1m2Wmt1","tlshash":"31933b9d79993439877b05bac53b0800a3290ec4b41885d1f1feddbe29da821d3b7e5d","size":90449,"data":"","first_seen":"2026-03-04T23:34:52.380943Z","last_seen":"2026-03-08T12:35:27.997126Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd767157.d.m.CANN4s_5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"5627e8349b7a7b0f754c7e852ce249f1","sha1":"b23c9d3ceea82aacf039e25bcec471c885bfc881","sha256":"5498d78c07fb2b49ccd247c3e074030acf86ff12e32bce7a8f0326bea1b698f3","sha512":"ca77e653c0b37fec263b14aa23dc96bcd5ba602f6443b6f3ed6734307943aba6f61bd3b3789827b93136658cb973292db0d6781828179e0be750e8aad259714c","ssdeep":"384:6AuOqKfvmAmiq7bWXgWE20ASWe4bNuKOJkmB0vufoXoGmGFjO5Ath0e4iXW1dGkn:6BEvmAmh7bwHU8Xgn0GWoPGFjDzaJ3","tlshash":"55f281c472d9f5e14393aa74803f910bf23a7c71145ca154e322eae57cb865a91b3f3a","size":36532,"data":"","first_seen":"2026-02-26T15:36:50.70844Z","last_seen":"2026-03-08T14:14:44.165706Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.CdXO8tnq.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7864d924600087dedb81e43fbb8b6e13","sha1":"c4a951070900b132a0029c49bb867bbd1dbde577","sha256":"25ccb274b187627faffae338c32144ba141976274ed25f87a185e987c491621c","sha512":"431f8ec7cfaba7511befb7d44d5e6d0f54927ea422310b5d421a20fe1b848dd57f378bf95a64b7d78190caaacb23e9ccb7168450fcd34ba742f4c20985fdab22","ssdeep":"","tlshash":"fa4188bdf091a43c036dc4eed4719194976956a0b36688e1d05d25bc0eb9c85c179fcb","size":2399,"data":"","first_seen":"2026-03-04T23:34:52.458131Z","last_seen":"2026-03-08T12:35:27.986814Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.540fc92e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"267f3aef7f9177332427869e64c2854a","sha1":"db1edcd30976c5486d162e05b342de90f92c5e3b","sha256":"c1d711f916897d2d2d1a50bf2eb8321082334ee9718e18d9bd2d7b70611beb7d","sha512":"0019a0d2c0a8dcc9c89c9af4eea1ac8f891e30ad6cc8b517e0b13148123b713e3a017bb03872f6f38892fee6a0b16d748b0e79b34d39f63cfb8c590ee566c46e","ssdeep":"6144:MK6LzOBn1n0brcmGaApqf6SOWP09f2SFCBI88C8TNJhOIdiBZ:D6LzOZZaAob0PCBI88CmS","tlshash":"52b418dd7591b46207f312f2407f180bb379296a284c4860f664e8dd78f994da23bf6e","size":523903,"data":"","first_seen":"2026-03-04T15:18:08.486695Z","last_seen":"2026-03-09T09:41:10.31056Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.12b9a01f.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf64e79b3185d0213ca685a7c4a021e3","sha1":"8cfbd5d5a92c0b807d503156f6ba18355c2705bd","sha256":"40273f6b5de739b8c56644357b67bd5febdcaff22660a5271ce9300b675e414f","sha512":"991e274440c87bc8c5bed26d9f0bf04b705aca7c69aeecec9586282b2d6d16e5ff34e6d48b503f1f2c01546ff9b15da874646c3cb72f1e2d2716ca2175bc79ec","ssdeep":"12288:uGGCSeXM5xGrZG+fRDzvGdXc4IcdZuw8wi2yw0Aa3Ox:uvut9zvGNld1a3e","tlshash":"2745b5ccb2d2f06a43976575812f200bf33ea996b54d8050e629e8d1bcb958d9237f7c","size":1167356,"data":"","first_seen":"2026-03-04T16:27:14.352866Z","last_seen":"2026-03-05T09:01:08.194009Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cd13807f26fb83c3cf49e6e584bd94f","sha1":"934a9dfc7ea43f71794d377e265a06eb37a35d91","sha256":"87940c9f822580ffa29879a8c872c7b382e20df1ba8adc4af28958fa208e0e82","sha512":"c0d5ad65daabf703169dd6eace7c83012371f6274cbbfd403f706d6cc0b0a3257f165a93f0be591822e2ac990676cf8bef85ba6651b48340e28a3a08133b46f7","ssdeep":"","tlshash":"68c08c09fa2020313223870876f5894153204f3128e2c1fa41bd22a23e27bdea1dbb4c","size":160,"data":"","first_seen":"2026-02-28T15:40:00.807186Z","last_seen":"2026-03-14T07:22:16.835164Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de67a6c6aaaf800dd47099cb738c73da","sha1":"dbfad2730311def8f2720b5a8e0a669d09d41d0d","sha256":"acf908b14f29165de87dbc1c3ec37b7f04935cb917921ec280b8c4e3ab7af31b","sha512":"0c50673ce74683ef2377c054805c7438a18d6da1c60a37f0e157c2eb635800ff904104b5b4de7c96474c3cdada07b8f63c3e31b1e9a8293d76440c65872360f7","ssdeep":"","tlshash":"07f0270e9cc507a457f810c453bbff1df29f210c985d8665c3c68892761af9798363e8","size":484,"data":"","first_seen":"2023-12-10T15:49:15Z","last_seen":"2026-03-29T15:19:13.506535Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6808b734a8226f932ccbed46abd4c3","sha1":"e99369c89962018d66d6d9d6ab2e044957a72c83","sha256":"e906c2f60e55c9f55751ee306c0c8d68f1b4b5dafadbdfba9f866b116b01c299","sha512":"8eb79da7d960c77acedc69726b2d30bf7aa2db055bc89869c0309e8f07bf9df2d76d9f2a3c2314c7fb27dda571c8bab56ec2dfd518710e7159c5fd42b75f01fc","ssdeep":"","tlshash":"b3f0970e9cc503a043f800c483bbff1df29f210c881c8264c3c78882760aa9398323e8","size":487,"data":"","first_seen":"2023-11-07T14:36:47Z","last_seen":"2026-03-29T15:19:13.501559Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","size":9327,"data":"","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.C61TuaTh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"8855ba100fdebc2cf6c766ab044303ed","sha1":"9d96a1a65f51283656c671012fc8f1cd4e8e4cb3","sha256":"0ca45e486284e14e52a0e829feec849fd6d665edbe674dba126363cf6c354fc0","sha512":"b6103af56d3c75f40c553e4b1c3daf80399fd86b5553421571c6400da55f73f9b0890af8c2bf26a299976f36c53a7f4dde3c69ebe0b17f43752736b10dcf8fce","ssdeep":"1536:8Xm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPp:82YMGB2C62PmQJDbPp","tlshash":"717363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2026-03-03T22:41:35.077304Z","last_seen":"2026-03-08T12:35:28.01871Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"902879accbae1a6e7d4023179a5f5582","sha1":"eb32502a93060cafa892ed9a96689b5a356ed9cf","sha256":"5e077e267743c2a25ba1b85e6cd184c4fd8a9b42a9f077a73f9458cb1ebadc16","sha512":"705c2a0551187db0135f284c4489f46c47095ec831453ed3808eb49f8825de7d2aea554b98f75063485499ccdbbccddfbaec839d0f8a33cf414fbeb1c62b8890","ssdeep":"","tlshash":"17e0ca6d572d7503937620937f71635d243541fd3d0058951c4c9d14289aecffd27c50","size":370,"data":"","first_seen":"2026-02-26T15:36:50.794922Z","last_seen":"2026-03-14T07:22:16.720919Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-04T14:50:17.505894Z","times_seen":62958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/no.s6YevAOV.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/no.s6YevAOV.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-1bc2c48cb386aad57320640cf0a4b596-2a9c2726f9d21e45-01\r\nlast-modified: Mon, 16 Feb 2026 10:19:45 GMT\r\netag: W/\"6992ef41-14a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc20\r\nage: 1224964\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-18T19:18:05+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2072cb659bfe23b3d0163006af1aee6c","sha1":"693c27833ee0647755f2b13021bedaeb59c23662","sha256":"b90d2629e1cea6a55bc55ab7cf2edbff2d1a593cb252cf20ddaff8525f97426b","sha512":"bde0651392ad6f40c0d2890f8c74032eb7faea38ef00b7c1c87318cbe04ab6cb577655325606c92257b3470319e415c1bf890f81091cbb649ba01b30b929230e","ssdeep":"","tlshash":"7ae0c2dde37cb820cb1083510f2d72f29695f4dea2d521d7f94069a8212e6878ee3ec4","first_seen":"2025-02-23T03:47:48.678197Z","last_seen":"2026-03-14T07:22:16.769304Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.193.165.2","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 698\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":698,"data":"app_id=cnjqphyx\u0026v=3\u0026g=3b0364a60cbc59ae1714bab6528467abf1f9fed0\u0026s=61e81f4a-4af5-43b2-a090-5959dfcf579c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=d65b031317483347\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=undefined\u0026user_data=%7B%22company_id%22%3A%22LI-LEONCASINO%22%2C%22language_override%22%3A%22de_DE%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-intercom-version: 5e3e7317b5284d47e51035926fe6f8bfa0d2c940\r\ncontent-encoding: gzip\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-request-queueing: 0\r\nx-request-id: 0007crjdke8j5l9f29rg\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\netag: W/\"8011d0c19a764b4bccabe4295161a936\"\r\nx-runtime: 0.211134\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6520,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"40968b4940251e02f57b922ffffaf427","sha1":"28616dc1597f6e2491376b23a67510e698779306","sha256":"8011d0c19a764b4bccabe4295161a9367b4168c23ac841e2b1fbc231915a20b6","sha512":"e42fb89a1eb64a14ac81837eb774abd52ec361f9868600d6a72c6fa96ffc6be5b33ab8ad20b125659b576e911cc9aaff7015f33fe9bbb00cf6e2b2e176363a89","ssdeep":"96:4rpN7YOyaRvkqRo2JoHA56zlGjzK14zMwaLjGMlbjfZ9B15AOU5zVfwHwhPD1M6m:4rpN7YKRvTQgKTxDBSlw+1MFptl","tlshash":"5cd1978c89481c7e73cb83d5c7597e0a0b7991abf1902d98f9acce2d21d7399516f207","first_seen":"2026-03-04T23:34:52.356702Z","last_seen":"2026-03-04T23:34:52.356702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":210,"dns":8,"connect":97,"send":0,"wait":307,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/171e0e51.BX1Yg96g.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/171e0e51.BX1Yg96g.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 561\r\ntraceparent: 00-314993e954ad92273b08240d1ac36e1b-da3838d60691a123-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-231\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 51670\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T09:12:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1887)","md5":"978b7d184a879c9d6e3c9c85599bc325","sha1":"c868c588b1a2a24d0b6d43a7c121534e3b8588c4","sha256":"dd04df8f6527ae8668407b2777477459183dd365679d5d96ee413a73143e4f61","sha512":"6aa58727cf3ad60d38ae6cf2d82400532767ef93d981fbb5ba56a2ad88affd6224368e1ed7c444c107edd2b8e57172cb0d4d9d0f72a9b233829a699e637b60e3","ssdeep":"","tlshash":"14410ff30a0ce334ac63b54f6474d64ac02ad052f55b16e811ff722f86cfae099906ac","first_seen":"2026-01-18T23:41:56.178602Z","last_seen":"2026-03-08T14:14:44.243604Z","times_seen":17,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/eda0a406.d.m.DEvmYJeT.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/eda0a406.d.m.DEvmYJeT.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-54c18ff45698e83e52d73fba107a3782-b7d0838a1cf0c9d6-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-6d77\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28023,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14320)","md5":"08c7a5cd62ba0665b8ee022710a0acdc","sha1":"d8da9d928dcc998a0ac5b30ca660191e4bed4a6b","sha256":"6a156f2cb797a22a5749d4e908d9152481ce8c805b92d47b8c98171d4dd91ad8","sha512":"456f58255dd73cac46e5975b3c2e32c460c2c9fdcc132e1cab49dae0bbfe4ffa0acefced0e9ccda8da24416bdf66f285cf15afe15ee56150d170bd46915c1036","ssdeep":"768:5jFRIzGsrCF6XeaX7HXG/M47959s25CzXUr3JTogPEoTok4ervoNAX/DDVYgaMCP:BKVCF79gq4AX/DDV3TCi01GOl","tlshash":"e1c2f9c1329276a1838684f6ea320212f33e24543805a8b979bd75d779c1d47af73bf4","first_seen":"2026-03-04T23:34:52.363659Z","last_seen":"2026-03-08T12:35:27.965114Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/i18n/de-de/1772639408584.8cf7c.js","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /api-2/i18n/de-de/1772639408584.8cf7c.js HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:04 GMT\r\ncontent-type: application/javascript\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncache-control: max-age=315360000, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177394,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"b8d90b3238155a737aa91d07d70da837","sha1":"db7766a73dcdb71268ffcec410b76991bc90fca6","sha256":"6ef58349c761e001eeb35680fbe47911331ce651fccfef202bdffaa21ed97088","sha512":"4635d17b12e7a8ca5c75901c77a0fc26f382bdca35f73de2a088745e5c15443d388bf1448159f0db6092f5b3ee3d19780e637dc5914a2073dcff99a7c9c77b07","ssdeep":"3072:Jzb8QnARHh38DpB3SkLASaq1uUY8bLFXZxNOobDUt1uMCr0E:tzAlhMdBik0SBuUBXlZx5DUTud","tlshash":"8e04b826ea97e7fbfa96731431510c9ab173d31b7388528a40da8036348f26d727f4e5","first_seen":"2026-03-04T23:34:52.367137Z","last_seen":"2026-03-04T23:34:52.367137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":842,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/sunSw.DL-onBB5.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/sunSw.DL-onBB5.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/faffda3d.DVb6TqPZ.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 240\r\ntraceparent: 00-5eeb7a96d84ad5718d5df5cb5ec8e3f1-53dbc94087b15ddc-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-f0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 631637\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T16:06:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0811eb7ab652dc7ee7bee06fed53671","sha1":"1192b619f776177819ebc73c6f6f31b11b891d24","sha256":"0565ef51f5934a1fc6f8a6e25f958de335b791559e5e0c100b2649acbe64f92b","sha512":"89bdfee5cd795ad373e227320ee5ad9b5509e9e1321726170fd93642d694389df569212784af41ed18a6a21f578507ea65d15cfe5d599e168ed956eae70f4ac9","ssdeep":"","tlshash":"d8e068d34b0af6ac92418636d9a83ae0321e64aa107420a8846e05a020569cee207ce8","first_seen":"2025-02-07T04:57:00.938579Z","last_seen":"2026-03-31T00:45:46.258466Z","times_seen":105,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.12b9a01f.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.12b9a01f.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 246783\r\nlast-modified: Wed, 04 Mar 2026 16:09:25 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: V53Mires_86DatzjcBBDimZ_yNWDMbCD\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 22:13:25 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"c37f00d0558d99a79387e175ec614d39\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: J8EMcCMQ1D85P3CywJDhYdjhhjznHZX_TBHCz2aFoELYIv0mvor6Ag==\r\nage: 4851\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1167356,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"5dd2f090336bf7f310de11a34126c4b1","sha1":"6769a9e8f9c724b332da676db3d37a9ae443d0a4","sha256":"b99c98d550177f93b57258c79b1bbf12ed2a87365af5c53082884aa994b8da5c","sha512":"9928fd3400aa097dbd9a16c0f0be27533d6221b18fd2eedd7223e30fb51c3d70f6ab89f5cc36c98fcd901e45222c1371a1b74c165aa43d2125018d03f8409113","ssdeep":"12288:uGGCSeXM5xGrZG+fRDzvGdXc4IcdZuw8wir:uvut9zvGNlda","tlshash":"7925c5ccb2d6f06a43976575802f200bf33ea999b54d8050e629d8d1bcb958ed237f78","first_seen":"2026-03-04T16:27:14.318484Z","last_seen":"2026-03-05T09:01:07.970065Z","times_seen":146,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":82,"dns":66,"connect":1,"send":0,"wait":2,"receive":13,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/winners.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/winners.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5772\r\ntraceparent: 00-5bf6b8346937f8edec257c252ae8af3f-bd729fe4e025510e-01\r\nlast-modified: Fri, 28 Jun 2024 13:43:26 GMT\r\netag: \"168c-61bf36e9740bf\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9a04d5d641da307a6d416f7bdca8de6","sha1":"6872c0cd650572e3207bca785ebd290d156df639","sha256":"25d002e623903b320eb203f271ef153ee2df8a51e2aed4878c7598d9f6a6ca6d","sha512":"88d73b7b558d91b6146bf4e368508db289a6f861f92cded175408788a361b706d923428a9876e6b7e72fb40d48e4e0f508d6bc99f755f6ae9eab00717ea75059","ssdeep":"96:Sp3FcBAtU1yTkrUH9/kq52Z9SoF/0HcU8mnsAC9gl05nuRJLEkVNxkzD+NWI2bL1:Sp3Fk/pQn52Z9SmHqs79u05yVfgqNWnt","tlshash":"f8c144f5e2d8a3e099469ba1e9358423f6af3cbd9fd9cf848190dbe4e5110d84acdc44","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.157824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.deviceinf.com/js/v6/agent.umd.js","fqdn":"cdn.deviceinf.com","domain":"deviceinf.com","tld":"com"},"ip":{"addr":"104.21.26.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deviceinf.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 05:18:50 GMT","end":"Fri, 17 Apr 2026 06:17:21 GMT"},"fingerprint":{"sha1":"1C:6A:98:D7:7B:30:57:F9:CE:20:04:BB:73:3B:C5:5A:A8:47:60:53","sha256":"C9:47:47:90:63:1B:A6:0C:20:EB:D7:5F:6F:0C:FC:1F:E1:F3:79:EA:B6:55:01:7B:B1:9A:71:5A:6A:DC:22:83"}}},"request":{"raw":"GET /js/v6/agent.umd.js HTTP/1.1\r\nHost: cdn.deviceinf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 12:20:09 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=14400\r\nx-amz-version-id: Vavu8mZmXPH4NlM7QChMV774F8jcN7y6\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo5K2DXtEKFiFeFki6Y6Jrnt1dHjrI3ucLlgp361X%2BR4G03Bk38ck03OV9cd5CDI0nGUOAGfPWnxU1%2F%2BlSg%2FBj1ae3a6QdIv0Oadfn%2BB%2B5pP\"}]}\r\nserver: cloudflare\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _waMsQLBvAhhYMngYmCGYy7SmsyKT0AU3erCgojfqhn_k6Eub5UpXw==\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\nage: 640\r\ncf-cache-status: HIT\r\netag: W/\"7155ee02b1ba54d06e232d17f7fdc6c5\"\r\ncontent-encoding: br\r\ncf-ray: 9d74b0a3780c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65505), with no line terminators","md5":"7155ee02b1ba54d06e232d17f7fdc6c5","sha1":"fc70e13ac46ab3e1b7469e8a8c85a1147c5fc7e1","sha256":"76fd6728970bf70baa08c08a9c191ebd04fb026c4ea58fc2b4858d0d37987ae5","sha512":"1c2569346aea5b54aed81fc08d90ba3e7d728b621fd2ed0bb884fb41f18ebbefc5613d1c5ea835e8bed90c72e873c743d19444a9229761fa4dd4b71a81ee8025","ssdeep":"12288:uQyTY6obd/8uEC3oPoO5I6RiobG4qsGEjMX2DsA9ig+pCkQI7n6OhsCwwRpzthfJ:uh06obd/8uEC3oPoO5I6cobG4qsGEjMf","tlshash":"41e419cdb6d6f89547627837026f102ba63e6f02680ea16de552e1c43cba7465037fac","first_seen":"2026-01-20T12:25:36.078654Z","last_seen":"2026-03-09T13:58:17.658222Z","times_seen":450,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":35,"connect":1,"send":0,"wait":23,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.Dwrk_h__.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 26312\r\ntraceparent: 00-4e9c3a59435f3fe40b2109cf2e0196b3-6a469213012fae03-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-66c8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90449,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55752)","md5":"7de448608ad3c4c67c5ca701b40827dd","sha1":"a6066a685e2319ccf77a6503fe366bdd8dea6a79","sha256":"c5c62db6fc4a90fbe9d8a95fc96c67b156d5bba1e9231715a4cc83701391d8a9","sha512":"3a5fd178063c409b5dc1d20fe53fbfea8026488597efbc4e9bd45819e2516af2a16437ce668d41c4a2f28bff9c6e8b029184540dafb5c092ada9b4c2883a8d35","ssdeep":"1536:vhUQdpzojnUDvMeZ7hi1vrh11TUBKLuf3Cc59dWC0CCI190Reka4XpNfvhz1m2W+:3dmUgeZ7s1vrhpc57lepVhz1m2Wmt1","tlshash":"31933b9d79993439877b05bac53b0800a3290ec4b41885d1f1feddbe29da821d3b7e5d","first_seen":"2026-03-04T23:34:52.380943Z","last_seen":"2026-03-08T12:35:27.997126Z","times_seen":4,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 23:34:02 GMT\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"56bcb2ad9939efbe2c969346b0152b9a","sha1":"7a4afccf58bf029d9f10457d5faf1dc0094cb78c","sha256":"e56c03cef6c4ed2ad4c5cdeea6ec1686dc2cad70a70dd85d3446cec33775e83e","sha512":"993c88d81590b289ce72e70a3b849e6ac4b35e5e3ebe233a5dec368a704ccf4e196cb324da234d5a2dd82438f394c921a23960cb59226af09997a67e70626825","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqj69tha4L8sEDS99YURRuWDyjooYhREHPM5svk:KuGH72NFEIwLzie2Uyll3","tlshash":"2773fda1041b9500eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2026-02-26T15:36:50.796393Z","last_seen":"2026-03-31T00:45:46.222125Z","times_seen":17,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":138,"dns":1,"connect":27,"send":0,"wait":49,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.BUphhELS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.BUphhELS.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1616\r\ntraceparent: 00-0230a3e0a2ef5df499bf55ec9c8c917d-62dae10274726382-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-650\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3746,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3695)","md5":"db8bd97a65ffbe42be11483fa2e7454a","sha1":"b8da5853af4fb0726a752d64a8ddaef70f6da02d","sha256":"684b59b41b31e9491f8383968dcdc57b4161764b28a39438346c2524897e3e73","sha512":"8076aa3d5de25a552009e6ecce8b8d914902d03594dce3777cff2d3f811be5d630e2a995e133168bb26b42c8e8fbafbd0c4844d7ea2716b30e7c94e67263eb6c","ssdeep":"","tlshash":"a171d8ab7fb9e536818285f2a03d72059234916c7415c4a061acafc93a63fe18da6f09","first_seen":"2026-03-04T23:34:52.386845Z","last_seen":"2026-03-08T12:35:27.972938Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/DivineFortuneMegaways@3x-1.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64167\r\ntraceparent: 00-31a47696309c9d354669d19c952e12c8-9df6341f6de9e149-01\r\nlast-modified: Tue, 24 Nov 2020 11:14:44 GMT\r\netag: \"faa7-5b4d86af947ab\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 10:40:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 547219\r\ncache: HIT\r\nx-cached-since: 2026-02-26T15:33:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":64167,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"8474cb125cde5afaca51d98801f345bd","sha1":"00e3da15a1936d0ab1057909bf23a0838a33bd79","sha256":"39efd764f69c73cea9e707b3b46c624e3157915843eca2948faa0be79d3cee82","sha512":"7c604b970e8a0f731194b41d227f04e543bec101ccc89b0e04acbf3e02e054ed605d29a0c5ed8de9d70606d305a80d950be2765d5cd0e481e3e03939ffc7e986","ssdeep":"1536:F3HMuHfOiSMXeyZYQGGa1gfeHmG2q4ZtYYMW904b:FXMuHm8ZZYjJgemVqgYYg8","tlshash":"7a530242e4dd69a0833c7b6f3ee258119b8581fc26341b163a7b6c6980876be474d7d8","first_seen":"2024-12-31T04:55:51.625482Z","last_seen":"2026-03-14T07:22:16.805002Z","times_seen":33,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:11.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGLDT3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Mar 2026 23:34:11 GMT\r\nexpires: Wed, 04 Mar 2026 23:34:11 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 04 Mar 2026 22:41:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134162\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530433,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (43657)","md5":"7b3f0d27d6e0ea387afe84afbec9e507","sha1":"e3e791a5f37107fa33f164dc0c2470fc877076c3","sha256":"6c7a95b231eab929c2c0e29937226e151fb9fb817b057535ccaee550f8dd3f2f","sha512":"20deee640d5db2b8266cc6787b93268bae82e5c7450703750f931399e3c7ddf69f73c509ff31207f56f83ce988161ce85b1759e82e54154c315623827b49e2a6","ssdeep":"6144:RFgtTEarkKfml/jvN5B/KI0D8RGI/V0sApXxMNZir:w/+Vjv5U8lC","tlshash":"deb4f98eb7d4a87ac3a65524643f060a663c20e2b14c9590f0daccd42e799797163fff","first_seen":"2026-03-04T23:34:52.394543Z","last_seen":"2026-03-04T23:34:52.394543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":50,"dns":2,"connect":8,"send":0,"wait":58,"receive":20,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 186\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":186,"data":"[{\"id\":\"5b60cd2e-2505-4a52-8435-72b07c8f888e\",\"qKey\":\"da53e521-177\",\"operationName\":\"setCoookie\",\"variables\":{\"options\":{\"cookie\":{\"name\":\"firstTheme\",\"value\":\"DARK\",\"httpOnly\":true}}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: firstTheme=DARK; Max-Age=315360000; Expires=Sat, 01 Mar 2036 23:34:05 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"de3db7a066a8c3dc17207b5636cd1a45","sha1":"440c2bfef09380d93d77eafe2c999dc9b574ae06","sha256":"74f26f688833dd58c2df19417521f793406f0a36ca9fd2b091a4e809a4f98755","sha512":"12d49c784d8a968da156faefcb163a832ba61ecdca4f446fd37869e3d4b0ab0ebfbe6e5058202eea82fca25006d303b0af350fa5bb410577fd598dcc0a23fd2c","ssdeep":"","tlshash":"98214c4c11904c7fc6470761b551fe89e39c55e364d8fe7e99c1df5ca8fa8a86222cc2","first_seen":"2026-03-04T23:34:52.396521Z","last_seen":"2026-03-04T23:34:52.396521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/girod.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/girod.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7383\r\ntraceparent: 00-a162c3b870003baeefd28ea1eb99b0ae-9c3ae87f09f6f734-01\r\nlast-modified: Tue, 11 Apr 2023 11:04:12 GMT\r\netag: \"1cd7-5f90d738e444f\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7383,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e770c506c87d6342b4a28db97f352855","sha1":"dead88f03adcfe29014b2bf7312c527ac3f693e4","sha256":"5772c389a603339f06a55b1ed62b3c2e319631bd00ea47c0803b19a5de94fb88","sha512":"479c14efe8bc3285810f00f9b21996276bdd8f1c87ef9e3f39b6da8a985181a8b2a7b4a13f17f2137b5bc7868f762fee6fac4bace49917dd5061692a9e6444cd","ssdeep":"192:cWLdHLv5P2dIkOSUZsOwSa3Hpg0Tew+pC/C:NbtG9UZd7a+j3","tlshash":"5fe1a58c6b54c7f4e8c163fd660219b53a416ceb6ea2c6bcc7a12c5578a25adc804ce7","first_seen":"2026-01-23T03:09:51.777059Z","last_seen":"2026-03-08T12:35:27.959349Z","times_seen":6,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7ad78725.d.m.D1qVjhTC.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7ad78725.d.m.D1qVjhTC.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-92196513c3c5d6a03b0baaa2c9d8f8c9-d3d415c154a07c69-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-2fc5\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12229,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12178)","md5":"16867e2a01fcc70ab15fece635615655","sha1":"3837108756a5f58f1018003b1b132209b012ecd6","sha256":"d340a7a9f29fae5c112e0a80411cc64288ec64055ee6ceb051c0b0ddf5c6e6d2","sha512":"c7c2a8aca75fbfa5d7d994085f2bfb5da38b66ffcecb17634a5518ce963e0110f5959ec96f1a78dd015dfe68937eec38e4636d0447acb7a1c288fb9fb7294b51","ssdeep":"192:TmRtM/Xthoi8s3Hiyy/jin1lKIE3nHHNePhO6M0viquSNoRkxp0Wq9HozoMHkFHO:Tmm9aasuvXKnu5MVk3Z","tlshash":"68423066d2c5cc316213c9fa00b42480f54dce06526886a6a5fcd9bdddb1c3fa07ebad","first_seen":"2026-03-04T23:34:52.401977Z","last_seen":"2026-03-08T12:35:28.037709Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 224621\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-de-json.30bdfb96.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~locale-de-json.30bdfb96.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 22416\r\nlast-modified: Wed, 04 Mar 2026 15:05:35 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 3HBz_BNMMFq59XBc6MGNv8evnG.XQzPi\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 23:11:05 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"2d0d6b0a578e40f4393e6184e36af903\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 0q7UuHIo9kHxzq8tsJcXunwUUZm78_T8wTvR3AItE43k572XyOv2-Q==\r\nage: 1440\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":86669,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65024), with no line terminators","md5":"e22b291f1663196951bc7ce60ac66afb","sha1":"0b63958f7eb3f2787b9ebbfdc594a91dc868dcc6","sha256":"90a74545339cf92ce5a00bb50877df34d88444dc30f3729278282187b8de1ecf","sha512":"f1837efd3fa9478670573acc04186e77c0a9bafd8cc8d788ea1fcb6164a30890e800606dde895a843a210b39d25621fbd16e05de9216a529689a61a27d35d0aa","ssdeep":"1536:mbO7Pty6aW7fXMwrpdFXFMcc7kia1Z0KEgEmtyxHfYhtonLr7+TsKUvXNwA:XI6Cy0UKYPlTvUvz","tlshash":"4a83a40e8c65ad76475f07e32c8a6dbebbf483ae62c4561afc85c91d01c9b81c16f306","first_seen":"2026-03-04T23:34:52.405629Z","last_seen":"2026-03-09T05:35:27.537233Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b1348dcb0bbeb5fd545c9bab66b81db1-eae0a4c67378e0f4-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-d9c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 639969\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:47:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":189,"dns":36,"connect":7,"send":0,"wait":8,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-qtag: a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nContent-Length: 830\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":830,"data":"[{\"id\":\"7c8df105-9398-4ce8-94f1-054c7fa2cf36\",\"qKey\":\"93dd9da9-132\",\"operationName\":\"getCookie\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"a797a654-f2f4-438b-af32-4534993822bb\",\"qKey\":\"790886e7-467\",\"operationName\":\"getRootSettingsInternational\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"ad2842aa-3aee-4db7-b637-f48482f15e22\",\"qKey\":\"b120a8be-122\",\"operationName\":\"getApiSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"35745574-586e-4216-9415-ebc4bc2bab1e\",\"qKey\":\"a389434c-16347\",\"operationName\":\"getSiteConfigSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"8bb9b0e1-ceea-4e7e-b950-487be88ac7c8\",\"qKey\":\"f9753f3f-92\",\"operationName\":\"getRoutingConfigs\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"be959701-cf13-4cbb-a34a-230f239d83aa\",\"qKey\":\"c2e6684f-112\",\"operationName\":\"getNavigationConfig\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:04 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: ABTestSeed=5; Max-Age=315360000; Expires=Sat, 01 Mar 2036 23:34:04 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; Max-Age=2592000; Expires=Fri, 03 Apr 2026 23:34:04 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; Max-Age=2592000; Expires=Fri, 03 Apr 2026 23:34:04 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nreftag=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nipfrom=91.90.42.154; Max-Age=31536000; Expires=Thu, 04 Mar 2027 23:34:04 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nx-app-language=de_DE; Max-Age=2147483647; Expires=Tue, 23 Mar 2094 02:48:11 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143661,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"411b628bd8d667f9d9ebc642943abc09","sha1":"d3bd9ddd7abb07b77520054ffcd4875f9480c02b","sha256":"fc023db2eeb337d50a08b83401ca8968a963ce3b94ea4b95c059cf6d89a70b09","sha512":"824dd72151b1f717e34c5e3c5c7503b6fb15046489ae79a8f4d513670aa8ea88b11ad6f9dd2a17893372ea124cd8bf20b82eaa28577c3668b01f0af2c199e6d8","ssdeep":"3072:oZuV2X5Xv3B9Qy0Ly9uzZxA52f62gvmxKvWT2/gZs5KVML8pfAPGRqPt2JQPY1sa:GJXv3l0Ly9uzZxA52f62gvmxKvWT2/gH","tlshash":"cae3ca3a721cdd6fc4474e9d733f2e370429e42a21caac98d98dce6581ef2f4613255a","first_seen":"2026-03-04T23:34:52.407842Z","last_seen":"2026-03-04T23:34:52.407842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com/","fqdn":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","domain":"seondnsresolve.com","tld":"com"},"ip":{"addr":"52.49.104.56","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:10.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 03 Mar 2025 00:00:00 GMT","end":"Fri, 03 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F0:01:26:37:F7:6B:3A:26:65:34:C4:ED:48:26:E1:FC:97:C4:BC:6A","sha256":"B6:AB:F0:4A:46:AC:30:25:94:FE:D0:D3:EC:7E:E8:85:FE:94:9C:98:C1:B9:5A:E3:E3:0F:AE:53:CA:E2:51:A2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\nconnection: close\r\ncontent-length: 800\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ndate: Wed, 04 Mar 2026 23:34:10 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":800,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (800), with no line terminators","md5":"4bf5b67ad6bb9aaaf9f9d78f87eb4432","sha1":"3c0aba62eee2d5eb121d495a5741599d40b1f51b","sha256":"a8689d57394d5c0a655939d2d598914c876e11aa90c47d40d674899743b9c0e6","sha512":"700dd34afd9fe0623b080b704d5ed4a4661c5b3eaf9542581602c20bec7b48c475c3e623b34f1de27368533cf22a0a69b1e3d60ffdab243132487ee27772f7ff","ssdeep":"","tlshash":"5c018681a564a7e0c53487fb5d4c32516d9be8e4ccf651a2843b06444752477f5f121d","first_seen":"2026-03-04T23:34:52.412165Z","last_seen":"2026-03-04T23:34:52.412165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":223,"dns":28,"connect":34,"send":0,"wait":40,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/bdddc725.d.m.D1Yqn2lm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/bdddc725.d.m.D1Yqn2lm.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-eee039e72944355e59728ad29385b5c3-3a5c22eeb990b9b9-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: W/\"69a578cb-18f64\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 202958\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T15:11:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":102244,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d613c144ee261f4cc28d787029b93ce","sha1":"4154259c2949a17fd67022bec810daacc705b3e5","sha256":"dd8488df556161550ff9d50fa976db582b7cb00f23af0ee71002070457bd69b8","sha512":"eda0e614753e7f7ee522fbed516ecfc2b9d80b397ffedee3443bc8ac62f5cd8ff364a8fb6839ce600425e213f069eea271904ae9873e513752bf7ec5e5af8d3e","ssdeep":"768:/tXdZMMezJnhsVPiNeTH7DPnZYnMUbSytGPx+:/PZM1zdhteb7FYS0","tlshash":"dba37c983b84bc6022a67e42c809d145f4dc4e56e6fcfdf6f65add88118198e3390fa7","first_seen":"2026-03-02T20:05:03.538602Z","last_seen":"2026-03-08T14:14:44.225929Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/sevens-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/sevens-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3508\r\ntraceparent: 00-c01261a66a404a11a52bc93144d8b604-ad8a8f6dd5d24f8b-01\r\nlast-modified: Thu, 11 Jul 2024 12:31:11 GMT\r\netag: \"db4-61cf7f01e8600\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:47:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 569229\r\ncache: HIT\r\nx-cached-since: 2026-02-26T09:26:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac855577c78f4bd9edad9b490788b53","sha1":"d2deae54c7d3bc48016c1195e1a40592b15340d7","sha256":"046036e7f874f492979b65f952a66e194b8f1739f24a64d40b2052f944114bc5","sha512":"28401e4f1338a0bccb32462e90b4fb7c8c5054ab3bda45a0799cd63c84358f5e606d149129418a9995f3403b8715389f337cc4a966982cf48fa828b96ddecb3c","ssdeep":"","tlshash":"847113e5b3d8b3c0d909a7f1147b5974baff34b77b04cf865345b9a4a71a294892cc20","first_seen":"2024-12-31T04:55:51.417914Z","last_seen":"2026-03-31T00:45:46.252606Z","times_seen":55,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:13.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 41348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 20:17:03 GMT\r\nexpires: Wed, 03 Mar 2027 20:17:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 98230\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41348, version 1.0","md5":"1097956fa17313da073e6216a7ce860b","sha1":"205228bc618a378a36ef6200894c10aa1decda09","sha256":"7cb4281a0ccc84cc18617842c639fc66541cbef94a9dd245c754700210b4fcec","sha512":"d2f56f8ac5c1d6923329a6f731d4363682a336496eb70b7b097f463e49ab98ac2b647274a3ec20d7100a423be87544ac0695664ffe7fb7e75b4794aad9838bae","ssdeep":"768:TGU5B51vUw+tWqAGDH4WfomxkTXmXCoGCUjNjI6kBt8rx2rKCyrFAPkzFe:awBAbUqAPdT8v/Yj/UrKCWne","tlshash":"08030281e1301fcbd501e8b666bfb868ead51e5458e312b596f3c614c05b0eba35cfc1","first_seen":"2026-02-19T22:44:03.51646Z","last_seen":"2026-04-04T14:05:31.64557Z","times_seen":1674,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f611dcc0.d.m.BRxqmpcg.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f611dcc0.d.m.BRxqmpcg.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3322\r\ntraceparent: 00-8de4653fc2c20702f9493b287cc42a1f-25f92d9bb597538f-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-cfa\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11015)","md5":"1c087e3fc8cb6cfae4747f05873fa1e5","sha1":"a05d0fe86b323525c8ff30d5b130d27609c3a0d3","sha256":"4257ec0c2124167b95f4922d26bbe64ef5cd943130a2fa348bb6de928286171b","sha512":"9d4c1901262154dc7a2a34239d413fef00ff8d1659ed62750cd1cddec33ec0d739f7c7953544b7146af416d21b41390a30a80cf7334220204de3015b32958265","ssdeep":"192:286ZpOIWZt7IIZpOItZt7IB+IeNsBGBlMdStUbCRCVHCsCWRCNCCCgCrC3CLCMCx:2Ze/F1sBGBlMdYUj52","tlshash":"dc32349dff68a0a204939855926c70c3c0ed94a0a2351fd1980d1ebafe9f565933f87e","first_seen":"2026-03-04T23:34:52.422281Z","last_seen":"2026-03-08T12:35:27.943729Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/moonSw.DTmx5t_S.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/moonSw.DTmx5t_S.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/faffda3d.DVb6TqPZ.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 209\r\ntraceparent: 00-f225a03759dc514fa9448d03ff54b0c0-e09537047fadc909-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-d1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 631637\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T16:06:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f673be269667167e50ad29b3c8d4ca22","sha1":"1884d32e417962d76ad00b4b342243ee5c5ee813","sha256":"1248692f89afc35d90d402e22d5db4ddccd51391372bb1db5ecc317385255fe9","sha512":"0d12c27d1bcd3109bccb82f486e6b817aa7f9c14290c8979d68d4ddb5b8443f7c73a83d478cceffbd14e6aa8c83437863b4befabcbaf2a7a492c946e7fb4acca","ssdeep":"","tlshash":"00e07df24689880c342bcd72575146a523cf00fc346808e6d5ceca7af0c7a94e61bd44","first_seen":"2025-02-07T04:57:00.93733Z","last_seen":"2026-03-31T00:45:46.273576Z","times_seen":105,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/collect?data=eyJpX3NlZ21lbnRfaWQiOjE1NDAzOCwiYl9zZWdtZW50X2lkIjpudWxsLCJsaWZ0X3VzZXJfaWQiOiI3YWRhOGRiNC1jZWM2LTQ3ZmUtYTY5Ni05MmZiNzM3MzgwZDgiLCJwaXhlbF9maXJlX2lkIjoiMTc3MjY2NzI1NTUxMy1iZDliYjMyNi0wNGM2LTRkMmItYTU3YS0wMDU1MzMyZTdiNTAiLCJwaXhlbF9maXJlX2dyb3VwX2lkIjoiMTc3MjY2NzI1NTUxMy0xYTk4MzUxYy1iNzI1LTRiZmEtOTg2ZC1iMmQ2YWE3NDJkZGUiLCJjdXN0b21fZGF0YSI6e30sInRyaWdnZXJfcnVsZSI6bnVsbCwiZmluZ2VycHJpbnRfb3J0YiI6IlRXOTZhV3hzWVNBb1YybHVaRzkzY3lCT1ZDQXhNQzR3T3lCWGFXNDJORHNnZURZME95Qnlkam94TXpRdU1Da2dSMlZqYTI4Z1JtbHlaV1p2ZUh4bGJpMVZVM3d4TWpnd2VERXdNalI4VlZSRGZGZHBiak15ZkRJMGZEUTRmREI4Tlh3eE5qSXlNekV6TWpnNWZERXhPVFUxTlRjMU5IeE5aWE5oZkd4c2RtMXdhWEJsZkdWdUxWVlRMR1Z1ZkRGOGZEQjhWMmx1Wkc5M2MzeG1ZV3h6Wlh4aGNIQnNhV05oZEdsdmJpOXdaR1lzZEdWNGRDOXdaR1o4U0dWc2RtVjBhV05oTEVOdmRYSnBaWElzVUdGc1lYUnBibTk4IiwiZmluZ2VycHJpbnRfaGlnaHJlcyI6IlRXOTZhV3hzWVM4MUxqQWdLRmRwYm1SdmQzTWdUbFFnTVRBdU1Ec2dWMmx1TmpRN0lIZzJORHNnY25ZNk1UTTBMakFwSUVkbFkydHZMekl3TVRBd01UQXhJRVpwY21WbWIzZ3ZNVE0wTGpCOFpXNHRWVk44TVRJNE1IZ3hNREkwZkZWVVEzeFhhVzR6TW53eU5IdzBPSHd3ZkRWOE1UWXlNak14TXpJNE9Yd3hNVGsxTlRVM05UUjhUV1Z6WVh4c2JIWnRjR2x3WlE9PSIsInVybCI6Imh0dHBzOi8vbGVvbjc3NzIuY2FzaW5vL3JlZ2lzdHJhdGlvbj9xdGFnPWEzNDMwOV90MzkyNThfYzE2N19zd2w2bzJwZHJtZHEwbDdvZ2owaGVmZ2o4IiwiZGV2aWNlIjp7InVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0OyBydjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsImxhbmd1YWdlIjoiZW4tVVMiLCJwbGF0Zm9ybSI6IldpbjMyIiwic2NyZWVuIjoiMTI4MHgxMDI0IiwiZGV2aWNlX3R5cGUiOiJkZXNrdG9wIiwib3MiOiJXaW5kb3dzIn0sInRjZl9zdHJpbmciOm51bGwsImdkcHJfYXBwbGllcyI6bnVsbCwidXNfcHJpdmFjeV9zdHJpbmciOm51bGwsInRpbWVzdGFtcCI6IjIwMjYtMDMtMDRUMjM6MzQ6MTUuNTEzWiJ9","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /collect?data=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 HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 0\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\netag: W/\"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk\"\r\nserver: nginx/1.28.1\r\nx-powered-by: Express\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: dbyMKSWvDP_vP7x1-WOx8uYF_bnKD5n2DJrzHp_VF5m2Go7yFjNGWQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3ed1c1c4.d.m.u51vjh9r.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3ed1c1c4.d.m.u51vjh9r.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-75f024b013c23013aff7ee85929b7866-f7796f76dc0875ab-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-3998\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":14744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14693)","md5":"f12567e1fcce322faf0b0920d49a589c","sha1":"f60c219c0efc44078df9637199d010a2ddb193c1","sha256":"09f670c1bf2bbbbedeaf476920164d45d09b49fe230abe4c20045bd36f3e850c","sha512":"f08d46178bf6fd2b969671d87dcb4403bb62f8a94ac0b8d1a36f7f9e70f9c55496d361d2675a6d511e644e3e4e8e8ff4c1a3331688d8269c61467e41cf7f4b54","ssdeep":"384:AyCRbRbsCBQmjArdP/LDbcnxAofaRxncvt825L4RJdh/3WFgBBYxTha6O:zCRFbssdAR/LPcnxJ+xncvZ5cPD/3WFy","tlshash":"2562f8f174ed657043e616e0a0770106e6e9512830c9c4a0f59fc9ff49eb980a9a7f7e","first_seen":"2026-03-03T22:41:35.256517Z","last_seen":"2026-03-08T14:14:44.15343Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/favicon/favicon-228.png","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: W/\"69a6fec6-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-03-29T15:19:13.454848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/exclusive.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/exclusive.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5618\r\ntraceparent: 00-46c807a55875496811ecfbcd07680124-b2679c9e4936f9e1-01\r\nlast-modified: Fri, 05 Apr 2024 10:28:02 GMT\r\netag: \"15f2-61556e915c6e7\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:47:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 566776\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:07:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":5618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f310f82bd99f64d82ebd1f091658ca17","sha1":"de9c07b5b5f3f4635a9e825a14af16e2c184ebcb","sha256":"7fed836409217f5ac8eddc5f8193b5c0c5e4e02bc3af1d18b4bc00287b8cfa33","sha512":"4bca13f43a59c62f670079fef9ff73ad9feb04c01784604b3d5af29d0984401e5c788e1fae0f68baea530c0b21b1a5b85cb5d9318e8d3d99b074209f56a85bcd","ssdeep":"96:wN7lHxPap1jRULBVUkiaBn/G0kOvw6rXtrbFY2W8RikDwrkCK3P:wN79ZapNRUlV2a+Ov1JnFY2BRfC2P","tlshash":"46c150f6a3e872e48147db90d8275876ba5a38fb3f9183c94240ee90b561095cdcecc8","first_seen":"2024-12-31T04:55:51.41943Z","last_seen":"2026-03-14T07:22:16.75251Z","times_seen":45,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 23:34:14 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 387\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":387,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"34661bed3d02c3ca84ff0fcb188516e3","sha1":"96cb189c3903862a93b58124a3a8f638a035b61c","sha256":"86b9a87224dedbeabd3767e9c7554ae29717a9eb7133be23addf231d6acb57b2","sha512":"8ce4348596237e3aaba893aea829bc4e6684caeef09e6294099a0720825ec173464f7d2e82c247106ca462ef31d51ccd0330e7f8c616fc6a690291f61e938554","ssdeep":"","tlshash":"a0e0f16e432db502e2a920937f31260c3431c1ff3b00c8c50c4c5d14288af9bfa39c54","first_seen":"2026-02-26T15:36:50.744806Z","last_seen":"2026-03-28T03:46:07.88586Z","times_seen":14,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":223,"dns":1,"connect":102,"send":0,"wait":102,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/sofortd.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/sofortd.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2858\r\ntraceparent: 00-337dbd14f5a0959f122a26e4234ad910-b098a6d07d3252ca-01\r\nlast-modified: Tue, 11 Apr 2023 11:00:45 GMT\r\netag: \"b2a-5f90d6743751c\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2858,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"327b40d04675ca6e0c328eeecb612435","sha1":"0f74312977493bfd6493d68d7222b0408f032451","sha256":"169b7b7cdba123fe0ddec2060fae78f6e12c44a498b5f179e2ead34153ea3811","sha512":"93472a657b8a0e952b03077c1d6197fa606602651a8ea40cb0fb8216be67ce9e9f13fed82922d6ceca700bae1ba81d888385b33543779b1caa135b6bb1deb6b8","ssdeep":"","tlshash":"4f5135c42b3586da8811e5fde32e91e63c752cc976418d60d7e62f24ec449754c0abef","first_seen":"2026-01-23T03:09:51.812424Z","last_seen":"2026-03-08T12:35:27.96259Z","times_seen":6,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":113,"dns":21,"connect":12,"send":0,"wait":236,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/bonus_buy.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/bonus_buy.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1496\r\ntraceparent: 00-b91ec60a18061bba2e8baa37b0e8f134-1af6b93dae23ff14-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:52 GMT\r\netag: \"5d8-61bf3656318b7\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cc7ff5133430a2bb78f34c3442b720","sha1":"0b8442472d38d17efdbf59c2849d0362c3b90687","sha256":"22eb05f821c7cc95e715dc17de449edd34c22e15cd62eeb916824dc6b87b31aa","sha512":"f70c09ab0097bbb5e75b417860f3d09d41032654af0f8a967bab915228f284cb3b4fe35b4e7b3c99bace421f1f3e428d39b9c3b3931612f7734bbdab203ad54d","ssdeep":"","tlshash":"2631a7d2564c60f4570ed774c526ff967baf34ba7adc8bcc61400a844e20188b98d9c0","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.250859Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 35\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"metricType\":\"TTFB\",\"value\":\"849\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=167\u0026anid=wl6o2pdrmdq0l7ogj0hefgj8","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T23:34:00.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"i64cl3er5t.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 21:48:28 GMT","end":"Wed, 20 May 2026 22:46:10 GMT"},"fingerprint":{"sha1":"E7:FF:54:95:3B:ED:55:6E:44:5F:AD:A3:B5:1C:03:64:4B:B2:71:2E","sha256":"03:C0:41:7F:53:42:24:F7:76:C8:83:13:B9:2C:AA:D8:8C:43:80:E0:C5:FC:0A:65:29:E4:5B:D0:AF:9D:BD:C0"}}},"request":{"raw":"GET /?serial=39258\u0026creative_id=167\u0026anid=wl6o2pdrmdq0l7ogj0hefgj8 HTTP/1.1\r\nHost: i64cl3er5t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 04 Mar 2026 23:34:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: 22dd9ce02b981810b897a7b3f2a26099\r\nx-runtime: 0.018851\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvYDJtINl1dtHaOaj%2FJkVMSHSsQmpO9gXe3vPXkr1TM0t8TS7z1rTa40Lt1QF2DN6zZYZkAsv8VQpwrVJcgNW2ggkZN8L0vWj6LE6cEi\"}]}\r\ncf-ray: 9d74b06d5f57120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":28,"dns":9,"connect":1,"send":0,"wait":164,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1457\r\ntraceparent: 00-8beb39189fa6ab7dc6e1c7d1159c202c-a5810e81565c7203-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-5b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225743\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":146,"dns":41,"connect":7,"send":0,"wait":10,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/telegram-20-1-3-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/telegram-20-1-3-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1092\r\ntraceparent: 00-59c582f1b220debed7483a1e197b0ba2-6af326298a547fdb-01\r\nlast-modified: Tue, 02 Sep 2025 07:25:20 GMT\r\netag: \"444-63dcc63fc7ad8\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"33a6b37c35799458f311e579b88a535c","sha1":"e3a109451dd5bee8ddc098e6a6c7b9bf0eb987e5","sha256":"352216d091549ff6c7f14890b503117e39a6eab0875ec11d4e0048760ec89e74","sha512":"4e430d416c90178fb550ddc0ab38bc8a3948975e83f622345f665f9a64e602d5594b1844403f450c5aa03a2cb7cd8a8b35aa664ba3c81ec129fbbe1d8478f1c4","ssdeep":"","tlshash":"951175b9aac4f445e401d3e8d978e5a33c1f35fb760ddba88fd06b24e50105d01e1c84","first_seen":"2024-05-15T05:49:44Z","last_seen":"2026-03-29T15:19:13.355958Z","times_seen":85,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":123,"dns":35,"connect":8,"send":0,"wait":239,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/visad.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/visad.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3232\r\ntraceparent: 00-dd1d7f852ccd88b0cae73c1ced69c841-850caaa57a4ca8f3-01\r\nlast-modified: Tue, 11 Apr 2023 10:59:57 GMT\r\netag: \"ca0-5f90d645e5e12\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4125ee6012faeb482156fae1bd9781c5","sha1":"ec9a8266f8e367a9faf379fb9f6e228c62f33bfb","sha256":"48af2bee6dd2cf4cb122f21f0323b2587da67f129c8c16bba290be236ce6c627","sha512":"48052af542e62b336091073009c9f3e531d6fbaffc94b16ac38aaf53f611dae602c6fa6a6fbcb1d8a58f3e32b021840f4952ab0ead889b3652bd5b33e8457d98","ssdeep":"","tlshash":"9a61fad9332846aaf44072e9cf52a4dc290eeff483c54475cb422f1670a50d55f329eb","first_seen":"2025-04-27T23:05:09.881162Z","last_seen":"2026-03-08T12:35:28.052513Z","times_seen":27,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":114,"dns":22,"connect":12,"send":0,"wait":237,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 5458\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; shield_FPC=SC6gW2zj5AVKbMi70dxH8NR31d8LhlaxUl; _ga_JZZNGY93CC=GS2.1.s1772667254$o1$g1$t1772667255$j59$l0$h0; _ga=GA1.1.476134653.1772667255; pixelsink_uid=7ada8db4-cec6-47fe-a696-92fb737380d8; f3k2kqs7xc=92554f36c64d6a7aed4f9a7bfb6566ae\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5458,"data":"[{\"id\":\"2dd73ddd-dfc2-44f4-9597-67c575a0e62d\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.132.2\",\"level\":\"ERROR\",\"line\":0,\"column\":0,\"error\":\"YandexMetrika registration error: config={\\\"counterId\\\":71598811,\\\"isDevIP\\\":false,\\\"accurateTrackBounce\\\":false,\\\"clickmap\\\":false,\\\"trackLinks\\\":false,\\\"webvisor\\\":true}\",\"file\":\"\",\"url\":\"https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\",\"ts\":0,\"stacktrace\":\"r@https://leoncasino.gcdn.co/js/ba8af1f8.d.m.BTq0UWdl.js:1:2708\\nV@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:4:4301\\n$C@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:8746:10662\\nonerror@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107522\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:1:44527\\naddScript@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:1:43790\\nTe/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107662\\nTe@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107253\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:108994\\nregister@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:109573\\nIe@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110532\\nde@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110197\\nU_/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110468\\nemitFrom@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:1:19464\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:1:19333\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:91\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3834\\na@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:2892\\nYt/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3304\\nsetTimeout handler*Yt@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3239\\nHr/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:4051\\nYt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:18839\\nNe@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:18909\\nZl/s.call@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:52938\\nY@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:53932\\nZl/p\u003c@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:54145\\nZl@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:54254\\nqt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:52669\\nHr@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:4009\\nid@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:10:13482\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1287\\npromise callback*g@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1266\\nasync*@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1319\\n\",\"payload\":\"{\\\"name\\\":\\\"$C\\\",\\\"message\\\":\\\"Script failed to load: filename=https://mc.yandex.ru/metrika/tag.js; message=Possible cause: blocked by an ad blocker\\\",\\\"code\\\":\\\"SCRIPT_ERROR\\\",\\\"metaData\\\":{},\\\"stack\\\":\\\"r@https://leoncasino.gcdn.co/js/ba8af1f8.d.m.BTq0UWdl.js:1:2708\\\\nV@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:4:4301\\\\n$C@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:8746:10662\\\\nonerror@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107522\\\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:1:44527\\\\naddScript@https://leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js:1:43790\\\\nTe/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107662\\\\nTe@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:107253\\\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:108994\\\\nregister@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:109573\\\\nIe@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110532\\\\nde@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110197\\\\nU_/\u003c@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:110468\\\\nemitFrom@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:1:19464\\\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:1:19333\\\\nemit@https://leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js:2:91\\\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3834\\\\na@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:2892\\\\nYt/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3304\\\\nsetTimeout handler*Yt@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:3239\\\\nHr/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:4051\\\\nYt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:18839\\\\nNe@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:18909\\\\nZl/s.call@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:52938\\\\nY@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:53932\\\\nZl/p\u003c@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:54145\\\\nZl@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:54254\\\\nqt@https://leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js:1:52669\\\\nHr@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:6:4009\\\\nid@https://leoncasino.gcdn.co/js/64da48c6.d.m.Dwrk_h__.js:10:13482\\\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1287\\\\npromise callback*g@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1266\\\\nasync*@https://leoncasino.gcdn.co/js/app.DInlJu0p.js:2:1319\\\\n\\\",\\\"silent\\\":false,\\\"interactive\\\":false,\\\"cause\\\":\\\"null\\\"}\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e03b6819b20379037b592c08b2335b39","sha1":"76f3265cbc74d55fa5c447b103428a3443b96f8d","sha256":"b4137cda0167b5ff3099da37b1bc84c5345ba65796d1721a7e9cd57a4a63bab1","sha512":"c623d61a6b758a02337ef20584f6c7644d4b2c6d9b326f38493368b94dbba6cf94ce5e126b42284cf7092ad887582f828d844fe6e39d423fce40133aadef4679","ssdeep":"","tlshash":"87c02b582d010244bf158a4d6261d640e35db40104840c0443c87001504442d1087e91","first_seen":"2026-03-04T23:34:52.437718Z","last_seen":"2026-03-04T23:34:52.437718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/6449d237.d.m.ByWm2iQu.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/6449d237.d.m.ByWm2iQu.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-199013078b5c05cdad3d06eb6aef3e8a-20081240bf37eeec-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-a0b\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2520)","md5":"2f3e76b7228717616f74106af52bae74","sha1":"5e2de4c1399bb2d492e286086b92bc8a8f067ecc","sha256":"afeea915b31a1ea72839fa741dae9c72960dcf30ee46235d77e24634bdb557fc","sha512":"aac003e2d2099ed9de61022107a0640e2c33c49382a6652e91849db7489071a26016d64caceb95235aeff0e522ee5714588ea0f0682c0ad9ad694e327813f42b","ssdeep":"","tlshash":"a95141c035b17a61966b2af3c53f012bf57a1895fb0e64c1b816edd97834032a35fe89","first_seen":"2026-03-04T23:34:52.439414Z","last_seen":"2026-03-08T12:35:27.951587Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 20:17:17 GMT\r\nexpires: Wed, 03 Mar 2027 20:17:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 98207\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-04T13:39:57.320782Z","times_seen":2964,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":110,"dns":1,"connect":21,"send":0,"wait":12,"receive":2,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/510c96b3.d.m.CcyLrvPh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/510c96b3.d.m.CcyLrvPh.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87334\r\ntraceparent: 00-fdddbd88d2bca565c93589c25a048b74-f2d6835be9cb9f30-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-15526\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":345212,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (37439)","md5":"3fb43cf0e16e938df60c09c79ec24fb3","sha1":"27fb4dbed40a78d4600a15a059ed97ddca2c29fa","sha256":"0172800dda12245d143c4acf587b7fcd03c470df9602c212c446469900212c3c","sha512":"db699ce018f078b0b9783656c4574f52f4519232adaa9883c70a22a265341791ebd66ec85e36ddca68fbf8be78a4cc8f88a3d43a619b1452fe1a89223bc65d1c","ssdeep":"6144:aGs6xz1aznsvYM6tbtKCyV49oeEtcsR88m6tub/9DnoA:aGs2JaovYM6+DV49fM88m6tub/5v","tlshash":"c5744d5873a27238e7fa50b9502b058173741f40341ae8e8f16dae697991c0dd3bbdbe","first_seen":"2026-03-04T23:34:52.441978Z","last_seen":"2026-03-08T12:35:28.006287Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/4e25ffb2.d.m.BiorRAM8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/4e25ffb2.d.m.BiorRAM8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 304\r\ntraceparent: 00-75df9ed62260343bfe756b8c66473b10-63e9db620c1ab1a1-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-130\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"34e4ed8466376ebe51d11f0cadcc796f","sha1":"54421cf3a7ae34cf21d5ef1ed70bee8f119c7fc7","sha256":"6a258fc037db30c5588468b4ce9fa420ee40ff2af68fded7ada7580879ab45ca","sha512":"62863a2a4708d9f2b76c5400408a99f574658880a3a2b1dc6942df80d2998f021c406eaedfe4aac4f12290c1233e65150832a5f601fb09857b016fcd9fe752bb","ssdeep":"","tlshash":"faf0c0cc72c2b45402670479803f9c1ee63a799037cf80d0d50590b42a7041b8137f29","first_seen":"2026-03-03T22:41:35.225253Z","last_seen":"2026-03-08T12:35:28.034313Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 756\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":756,"data":"[{\"id\":\"868b1be9-c377-42ac-bb23-9776bd2c3dd8\",\"qKey\":\"feb2448d-302\",\"operationName\":\"getSearchGroups\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"448b69d7-bb38-429f-b6c8-03cede7fb2d2\",\"qKey\":\"f48f5ccb-276\",\"operationName\":\"getEgsCategories\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"c4e548ff-61d5-4c7a-bc2a-cd4aeffe4953\",\"qKey\":\"05e90ef5-3804\",\"operationName\":\"getLobby\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"sportlineFlags\":\"reg,urlv2,orn2,mm2,rrc\",\"ts\":0}}},{\"id\":\"49c9dc5a-351c-4e39-8f5c-2fbf625c65d9\",\"qKey\":\"39df8872-1248\",\"operationName\":\"getBanners\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"23f24a5c-ce4f-44ae-9e9d-6949e657709e\",\"qKey\":\"6352b886-793\",\"operationName\":\"getAvailableForms\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":983646,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e5938559e3c2c015b4304cebe884189","sha1":"91d2e34f8204efa177dd98a7d3af34844b405cff","sha256":"56d16383ec99ad034475ad87475c8017f64b940f11bd38c732af0315a3f14631","sha512":"1a1afbae6dd746ac595265d5e2c2b9044abf74f3caa24d106a95e8ea20a10e0240c894d0ef289857be8b8c8ad78e6e5ea62775aba33e3f11a8e50d588dfa9a4d","ssdeep":"6144:xs7w9CBGY/kRetf3GZshiOY/kRetvzqNwdOeY/kRetytoTKPwv+5mnMrzJMnurMY:7caToTbT+Le9YdykTf","tlshash":"3b25fc7b6688782fc38913943caf34c8a21e34177a40e756b35e69654bb4dfa30b719c","first_seen":"2026-03-04T23:34:52.447625Z","last_seen":"2026-03-04T23:34:52.447625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":981,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":981,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/BookOfGods2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/BookOfGods2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86242\r\ntraceparent: 00-2eb9743f9bf1f94c058cac1bad8ab312-ebac4fbb3282ebfc-01\r\nlast-modified: Tue, 19 Jan 2021 15:32:28 GMT\r\netag: \"150e2-5b9428bda24c0\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 08:06:00 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 655539\r\ncache: HIT\r\nx-cached-since: 2026-02-25T09:28:30+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":86242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"ef4f201355dfda0b185294d8c4db3597","sha1":"11fb3ce01f48c7e8788af7154be69a315a656459","sha256":"a246edad75f2c6156f38f95bda0e17df6eef2147595663aefe04d8cc7baa376d","sha512":"86166868955aae3d61477208a65ec03b369b9b4b583c9457205546d1440fc84f0ee89c9a7546281bd081bf4b7942aea1ed4f0bb98216c4e7608df825d1e98780","ssdeep":"1536:MDmkJP6AT3wHUGPzQv9Ak6jPQQAktbJlaB0RhC/dzq8A5VDMOr2OSUnX7hOV6o8:XkJXH9Ak6jPJAybJlaB6C4vJSUnXe6r","tlshash":"9a831244a3b986d2672498453e47e53c1d9207eb3e638930c2bee9375781db603a3e87","first_seen":"2024-12-31T04:55:51.657149Z","last_seen":"2026-03-14T07:22:16.755131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.l.liftdsp.com/ac786b28-283a-4d76-a40b-23e03f94ae14.json","fqdn":"ps.l.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"52.84.50.113","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ps.l.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sun, 05 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:FF:93:7A:39:16:1E:F6:27:5B:22:3F:5F:C7:A6:C3:6A:22:BF:62","sha256":"0E:06:CF:4F:55:41:8D:9F:FF:83:14:09:B2:03:4C:67:98:C5:19:10:75:CB:52:BB:6F:5A:2C:81:E1:FF:B2:29"}}},"request":{"raw":"GET /ac786b28-283a-4d76-a40b-23e03f94ae14.json HTTP/1.1\r\nHost: ps.l.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 50\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 07 Aug 2024 15:08:37 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\ncache-control: public,max-age=900\r\netag: \"e96cd5af6f065e5048b3ddd2913dac50\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5VNTAxfUG1dqMjKFCIGel0bsWlZj2o7FWe7QY0yxHYziugk3KgVwPA==\r\nage: 243\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e96cd5af6f065e5048b3ddd2913dac50","sha1":"98f5fff6913c150009fb01c2cf5bbe83c250f80c","sha256":"88c38dd5fd1531be2d044c85bfd00517c41ce29b03c514d620d80a80241a1f11","sha512":"9478fcbed66ba6836ed9bccc5f3f3c1681d7527489c521c85566a2368089191fe173735d89f1277a5f86da659be50879b9e0ac7f62c1d7a1d4a905af8c49f990","ssdeep":"","tlshash":"6790041740037457c457c75041443d55d75d0d370c170f7404551d4503f53777540117","first_seen":"2024-08-31T07:43:55Z","last_seen":"2026-03-29T15:19:13.337153Z","times_seen":103,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":124,"dns":95,"connect":2,"send":0,"wait":25,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.CdXO8tnq.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/17ff6b76.d.m.CdXO8tnq.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1106\r\ntraceparent: 00-651b65eb122ed64cb3aafc05a42fab83-99d2f02f391062ac-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-452\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2399,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2348)","md5":"7864d924600087dedb81e43fbb8b6e13","sha1":"c4a951070900b132a0029c49bb867bbd1dbde577","sha256":"25ccb274b187627faffae338c32144ba141976274ed25f87a185e987c491621c","sha512":"431f8ec7cfaba7511befb7d44d5e6d0f54927ea422310b5d421a20fe1b848dd57f378bf95a64b7d78190caaacb23e9ccb7168450fcd34ba742f4c20985fdab22","ssdeep":"","tlshash":"fa4188bdf091a43c036dc4eed4719194976956a0b36688e1d05d25bc0eb9c85c179fcb","first_seen":"2026-03-04T23:34:52.458131Z","last_seen":"2026-03-08T12:35:27.986814Z","times_seen":4,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-originals.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-originals.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1955\r\ntraceparent: 00-9f7257a6692b748ad4e0e54f41e313f6-96005523f2e8ab47-01\r\nlast-modified: Tue, 01 Jul 2025 11:02:44 GMT\r\netag: \"7a3-638dc157b9648\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:47:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 566776\r\ncache: HIT\r\nx-cached-since: 2026-02-26T10:07:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"702b03a00b38c08b38d63d5ab58702ba","sha1":"bd5aebde1dc0e3ae5f0b6a6820123e1167e8b50e","sha256":"faac8568e1e3f31fd222cf39b2fd2bd2c3a23c3d00c008551edf1e83df355e78","sha512":"a616af84acb3a46ed9e01b77877e73da6688a36be4116bf2b15b01453d68fd9fbc0bcaaa0870e9e458e558e37020c59d970b7d919ccaa215aa6cdb1a34ef9449","ssdeep":"","tlshash":"ac4152f9d7ec81e49407e792c9f3992978af34b2eb45cdc6c0306a81f16b884ca05c50","first_seen":"2025-07-09T00:32:09.400099Z","last_seen":"2026-03-14T07:22:16.733341Z","times_seen":43,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/pixel?id=154038\u0026t=js\u0026sink_id=7ada8db4-cec6-47fe-a696-92fb737380d8\u0026\u0026timestamp=2026-03-04T23:34:15.513Z\u0026fire_id=1772667255513-bd9bb326-04c6-4d2b-a57a-0055332e7b50","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /pixel?id=154038\u0026t=js\u0026sink_id=7ada8db4-cec6-47fe-a696-92fb737380d8\u0026\u0026timestamp=2026-03-04T23:34:15.513Z\u0026fire_id=1772667255513-bd9bb326-04c6-4d2b-a57a-0055332e7b50 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\nlocation: https://pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=7ada8db4-cec6-47fe-a696-92fb737380d8\u0026\u0026timestamp=2026-03-04T23:34:15.513Z\u0026fire_id=1772667255513-bd9bb326-04c6-4d2b-a57a-0055332e7b50\r\nset-cookie: tuuid=7d2b446e-7a83-4e0c-b234-a5d84ed7e3eb; path=/; expires=Thu, 04-Mar-2027 23:34:16 GMT\nc=1772667256; path=/; expires=Thu, 04-Mar-2027 23:34:16 GMT\ntuuid_lu=1772667256; path=/; expires=Thu, 04-Mar-2027 23:34:16 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":1337,"timings":{"blocked":652,"dns":575,"connect":28,"send":0,"wait":31,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot.C4J6IXOg.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot.C4J6IXOg.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-d2657c55f85e55eca933610b45843b05-0b5f1afb84dae057-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-2a3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc20\r\nage: 642673\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:02:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4cfed5dc8f597a9ce3ace9cc0d54468","sha1":"d02e363b2a9a00da32b6a9d73a03b904ce5650fc","sha256":"86ac12bafdcfdceeca1301bec6db2de3b5d02cf3982a6f11da62e2c383f61662","sha512":"36716691243cea3866beeefab568cc29f891e356ae23a8d02ba59549a74db3119b02b40f017f4841610f27bdbdc17c4f8aa1b34064d10a6c0e413f36b7d1ee19","ssdeep":"192:Mw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0q:M6YAXsI14g7V6scBUCVz","tlshash":"812276e437f9a3e4f106f3ec8756e4247e5328fa7a61c569c3aa2c58ea4145c0d98cd3","first_seen":"2025-06-01T01:07:13.940104Z","last_seen":"2026-03-29T15:19:13.408178Z","times_seen":92,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=d796s9\u0026event=regstarted HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 23:34:14 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 370\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"902879accbae1a6e7d4023179a5f5582","sha1":"eb32502a93060cafa892ed9a96689b5a356ed9cf","sha256":"5e077e267743c2a25ba1b85e6cd184c4fd8a9b42a9f077a73f9458cb1ebadc16","sha512":"705c2a0551187db0135f284c4489f46c47095ec831453ed3808eb49f8825de7d2aea554b98f75063485499ccdbbccddfbaec839d0f8a33cf414fbeb1c62b8890","ssdeep":"","tlshash":"17e0ca6d572d7503937620937f71635d243541fd3d0058951c4c9d14289aecffd27c50","first_seen":"2026-02-26T15:36:50.794922Z","last_seen":"2026-03-14T07:22:16.720919Z","times_seen":12,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":350,"dns":46,"connect":104,"send":0,"wait":104,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-30.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SiGMA-Awards-Europe-Negative-30.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 124642\r\ntraceparent: 00-baeccef97af62f0773904cbfd259176a-c65a1c7b049578ff-01\r\nlast-modified: Wed, 29 Nov 2023 14:34:40 GMT\r\netag: \"1e6e2-60b4b6f6e3e94\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124642,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"065691d045bfc538dbfde5499a6d2674","sha1":"6cd30a84f1eaadf7e5dfc0b63b4767fd30a8df50","sha256":"c38f15c7b168fd96961ea9673f5ab93f5e1eeac70ba805e27369f5d1febbb285","sha512":"8fa87b3aa5f20681301f0e4ceadc73e7e7bee3a280af44c602419ab274f38248235df2887d214ec0cf9e23fe6389f2ea91477781620cb459369a78fed086a507","ssdeep":"1536:9g1mplOk3XLELTLyO/aCBNZsv/7GHLIe6Ej:Re64","tlshash":"36c3835bf3f9e6f6e109d3a8c6818430322a1af37d91c6a443f5af5edd1404e1c6da92","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.489458Z","times_seen":107,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":301,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/de.D2kQJO1m.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/de.D2kQJO1m.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 127\r\ntraceparent: 00-95846ac6fcf2e601fa4188da07781a7f-a71687019abf951d-01\r\nlast-modified: Mon, 02 Mar 2026 11:47:23 GMT\r\netag: \"69a578cb-7f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 151126\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T05:35:23+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"246a5fcba5ed21747c2a108e5e635ec7","sha1":"53b22c166e0f07b6e040b34c314f56d303e17393","sha256":"ffa84d949bb38ddc31e3680c882e9249a6731310387f864dde24612450a2b713","sha512":"cc17998c3c57bfee5008b6ce163f5d4e9b560c8ce7087f8547213d90518ca773d75413d9be79b8182280271dc423e87ede1496c99faa7174316a661e34e037a7","ssdeep":"","tlshash":"8ed022e8e72d7700c900c3200fbc62e2d289f0caa38800cbe5602ea8101d08bdc9eadc","first_seen":"2023-07-12T15:54:46Z","last_seen":"2026-04-02T03:18:27.118837Z","times_seen":42,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/scratchcards.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/scratchcards.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2305\r\ntraceparent: 00-1687eb5f0fea31e35d61a2bd562c3013-728721ef804d65f6-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:25 GMT\r\netag: \"901-61bf36af57c9c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644383\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:34:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938141af1359f4354cc7d73a69af21a2","sha1":"3953b0622646db4fac74401cd03e3fffbeaee8e9","sha256":"9bb2c583bfe0cfe4ce25dcad5944668b5da72f52f04163654804a03238897b42","sha512":"0663be7226353fdf94b17a69c2b33aedb3fcfac06628092ecd2064f96859e0790a450d155bfbd3c58a264c4f26c673d70cbf32ecf133f7328b9369647ecdbd4c","ssdeep":"","tlshash":"e4410ff2ebe852f49547e76590275d7a369b2cba7f85cbcd82406bf099b40a0958dc00","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.233067Z","times_seen":57,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-3b1e790cdd68afb96a5782e18cf11935-256cb4c11291dcdc-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-10bc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225742\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.UQn0UXT3.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.UQn0UXT3.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-e245dd55546561ef9616e06c12bfe539-6eff4d848f6d36d1-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: W/\"69a6f20b-422a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 51670\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T09:12:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16938,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16937)","md5":"0115255b5f5fd90b0a23839e532ef4cd","sha1":"88ac721ec4fdc13ea7b61d81847a03263d6bf322","sha256":"cd16a90ff2203a26dbd0623f2972479eba169e21f6a361a17f6fb1682eaad9fa","sha512":"5df066399351ce215240f0bcea367e24fa2b3b54e5db0894b4b5688d1fc3e83347bb1c02a4cbd5cb169c62a0bec2dbf83b9fdd56792e31bad8c64148195a7d2a","ssdeep":"192:Jw7vLZ03o2kZVz80GJCRjMiS7cZmn0A3tMHWbkRnHOp8Lv0vCizJzY7gToDx:K7vLCulGWJDJRWvhzJzWgToDx","tlshash":"047295d50d64367abb3bb11fd6e29a0ca21ecc46de9326d5b6e1e52c43c638192f3d04","first_seen":"2026-03-04T11:29:42.844917Z","last_seen":"2026-03-08T14:14:44.213524Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/faffda3d.DVb6TqPZ.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/faffda3d.DVb6TqPZ.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 126561\r\ntraceparent: 00-8e48e6cc9feeaad8781850d6b615134c-ed22f7d64c452197-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-1ee61\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1024255,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a7cc54b88fe0522c6ef7ff2dedadaa85","sha1":"076b9eef259c92ff3c707ebc9f01bc44c0318d49","sha256":"ce29f72780ae4cb5296636a5a1f53f2c878a85777a68446092fc920cedad64a0","sha512":"c4ff40e5aebd978aa9ef0a96278c9339c9e63d5ee7086abe4afedaa5d84f10330982f81c48bc625a0a50565011af1f80706384f75f6c73ee98743ce22614a1b2","ssdeep":"24576:kpQY7t35lPJB3VHpLU+QLZqMX6EgsTdTkwR8qPJZbPBBnVjDN29J04We8xwOW10r:kpQY7t35lPJB3VHpLU+oZqMX6EgsTdT9","tlshash":"6125d8bb5e60b13ef6b7b52ee1e5ba4d7118dc03c863469ad4b1962cc1c77925332b08","first_seen":"2026-03-04T23:34:52.478892Z","last_seen":"2026-03-08T12:35:28.005237Z","times_seen":4,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/18+-dark%20(1)-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/18+-dark%20(1)-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2763\r\ntraceparent: 00-6a1cef3b76afd141eaae019b14a05b44-08f2c15a41b9b024-01\r\nlast-modified: Mon, 11 Sep 2023 08:05:05 GMT\r\netag: \"acb-60510c8b890fe\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e9bdf84336ba2f0d7fd0116bbc47e0","sha1":"5f1882ed3aa41267bbdb1c083902955e2a965022","sha256":"2c0b2b2f7ac364b363a152aeddf08ad89a3b4043e3347cead0206158492c8a2a","sha512":"f59720c3a786afb91c58de81a4097faebb49e15008f2918805b041afa60d8e790d2296ccc3b01b008992ca92135c59135f27b7c5760542999f8a5c7089e9b5cb","ssdeep":"","tlshash":"145101efa7d4b2c0d807e3b094094a793adf287f77158744425aaee6fb02094484e8c4","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-31T00:45:46.207178Z","times_seen":122,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":117,"dns":0,"connect":8,"send":0,"wait":241,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/mifid.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/mifid.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15983\r\ntraceparent: 00-8318b79aa15a862d3679b6095d6fef10-823351ebcff3cda4-01\r\nlast-modified: Tue, 11 Apr 2023 11:01:30 GMT\r\netag: \"3e6f-5f90d69ea6890\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cdb2249c53625a267f2a0cbc402aea4","sha1":"c3c8b6cae07bfc101fa3b20d4191fb44bec8ea2c","sha256":"655d40b803d0c069859c3de3d8edee8540d9913a158b40b915211606d7d02625","sha512":"39c04cd8f25ece9d135ef975cf99fff0aa8e438bca311178bacb5db0596c8f23602f65fbccb2dc608fa4c81f72ff98de3b90845c2b45d52fda182a296fbee394","ssdeep":"192:wqYVG7iAXWgYvKdGNbirHFWBtADpfcMho+9rIEf6/t9BiKgsydO87lwivO2VFqqL:YVGGJbiMBt8pPe+JIq6V9BiMANGAgov","tlshash":"fc72439a7369d7f2d88ae3ecd9025434761940e2a6c0c7b0c3a4bf0f58474e6fc5aad5","first_seen":"2025-02-23T03:47:48.718829Z","last_seen":"2026-03-08T12:35:28.035737Z","times_seen":7,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":115,"dns":23,"connect":12,"send":0,"wait":301,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/08c19264.d.m.CUzuJc5t.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/08c19264.d.m.CUzuJc5t.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-c36eb38f524a78ca66809fe4b1896f1e-c7da90750519ad1e-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-ba1\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2977,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2926)","md5":"32f827af1e16c1e7965ede45da493240","sha1":"1df728a1eb53e56f0759bcb54d62ad1e0cfbc3c1","sha256":"5b6f99c9c0c792119a7e4046b44dcc460a20963057d810fdd6d672ff8e763953","sha512":"81517b057908e936af53174eabaeb8ae7ff407e33a13c53d87f9ebc61ed3389006d2e291252c546a82eedd1a0398a0293ea6c849f06a79348d85ace158118674","ssdeep":"","tlshash":"505112f8f167e170805b5cdff02b62db63360b967859b067502ca9b03532b245726f78","first_seen":"2026-03-04T23:34:52.487673Z","last_seen":"2026-03-08T12:35:27.940954Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 12:31:17 GMT\r\nexpires: Thu, 04 Mar 2027 12:31:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 39767\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-04-04T14:04:46.922003Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":107,"dns":1,"connect":21,"send":0,"wait":18,"receive":3,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/tada_gaming-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/tada_gaming-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10478\r\ntraceparent: 00-443078feeab7d8246758b589aabd3216-622028ae1c5e1142-01\r\nlast-modified: Wed, 17 Jul 2024 14:08:05 GMT\r\netag: \"28ee-61d71fdb69b21\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:28:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 562434\r\ncache: HIT\r\nx-cached-since: 2026-02-26T11:20:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":10478,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26bfe02c4096fb7c9ca21b15f7e28f83","sha1":"031e1bcf6815a6c39cadeb75e4650ba9e8fccae4","sha256":"6689d9fa9aeac5efbbdd54728b667aa6426567b9a6aae44b4059d0a3b63088f9","sha512":"8c0c61797c51a1677bcfc76cb62698b504a8ba838711b0b37a7ae8eae7193fb152552541a77e43364f89ef22c8a782d1aa90d2c1cd15d006fec759cc00581520","ssdeep":"192:nVa7bNesvytEWTXfZeqU9HwvZJOFs6E1Agwwka8E4y4pUI:VGN67foJ2CF+KjwLSpT","tlshash":"9a22a6a9677da9b8f004f3fccb1250347a5934e77892ca61c3a6ae0eb41584d4d9dce3","first_seen":"2025-03-04T01:59:19.627135Z","last_seen":"2026-03-14T07:22:16.791829Z","times_seen":45,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/assets/sprite.Dm8me6Vv.svg","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /assets/sprite.Dm8me6Vv.svg HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:06 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: W/\"69a6fec6-ebbc3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":965571,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e61430b6a15117ca6523e7037b5d1217","sha1":"178df17bd5f5d287178188853c4976a2796e166b","sha256":"24c26b81ff89fc60b7f57ad1f121572841ab6ba9599259703777aab0214cfd4b","sha512":"0b6f2e726e0da0fd0e95f464b02c4b3016d0c9292215ddfc6e9ccbd734bec8cbf6c02c5339894cc7ac59786dcea4f6d2fab867c282e138b3cde2bf0c381829a5","ssdeep":"6144:clO0DikAXtLUHMqeEXTPYUMoV4kILcPLWt6aL9oJ2OYHNAMotVsZTiT:cgMei6o0cDQy2fxs","tlshash":"fc25edc51128538ca04bba6ddb7ffec0172f30a7795545821aafc7dc915f680fb8a868","first_seen":"2026-03-02T20:05:03.686986Z","last_seen":"2026-03-08T14:14:44.176093Z","times_seen":7,"resource_available":false,"data":null}},"time_used":775,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":775,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.24","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0 HTTP/1.1\r\nHost: d1cr9zxt7u0sgu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nserver: nginx/1.14.2\r\nlast-modified: Fri, 19 Sep 2025 13:00:04 GMT\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\netag: W/\"68cd53d4-2c9b0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: oZ8tklCWHAsrzeN71jc7WPtILnquVYNtAFJLU3uCd0TlQX5qO1pW-g==\r\nage: 57\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":182704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-02T09:36:05.663821Z","times_seen":79,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":38,"connect":1,"send":0,"wait":24,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772667251733\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=476134653.1772667255\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026sid=1772667254\u0026sct=1\u0026seg=0\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026en=customerRegistrationStart\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772667245778\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.reg_form_name=default\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=14560","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772667251733\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=476134653.1772667255\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026sid=1772667254\u0026sct=1\u0026seg=0\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026en=customerRegistrationStart\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772667245778\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.reg_form_name=default\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=14560 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon7772.casino\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":57,"dns":0,"connect":21,"send":0,"wait":30,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1610888.d.m.CyveyUU3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1610888.d.m.CyveyUU3.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-6189fb911c107e7225020ae5979a09ef-9e4e6519f6bc6074-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-8d3cc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":578508,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33867)","md5":"506c8c0392697584b0d09c29d57ddde6","sha1":"699674cc62d43770f62e886efdd5a64deee34d2f","sha256":"0a0d6116c99cc44b37b92eed0e08110758f9b094a30ab4392e19fb02c2926040","sha512":"49853ed6f865e58933b14c166fb49bfefcb7482cf0e6aa5a31e35e383e6aa6dbe0f48be0dc376cc81a3d2083d063b7e2c4644d09a355920234e1245b152ca97a","ssdeep":"12288:21OJGn02zHl7TwBZ4qWp67h7Y6Ud5bCzjd4yQYdwg/dv2LB51x1S/:21OJG0257TwBZ4qWp67h7Y6Ud5bCzjdP","tlshash":"7fc45b957151343547b600ac806f050ab33a2a2e685dd8acf36de9ef29adc49317ff78","first_seen":"2026-03-03T22:41:35.041228Z","last_seen":"2026-03-08T12:35:27.947237Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/favicon.ico","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 03 Mar 2026 15:31:16 GMT\r\netag: W/\"69a6fec4-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-03-29T15:19:13.331537Z","times_seen":277,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=\u0026site=leon7772.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026p3=undefined\u0026p4=\u0026site=leon7772.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 23:34:15 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/017fc061.d.m.6jXZaT8y.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/017fc061.d.m.6jXZaT8y.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11560\r\ntraceparent: 00-a685a556f620fbfe54c7935c0b12b6ae-8e5d6f80fd9a93c7-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-2d28\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225742\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"7473a31f3263453185cf557250b29f38","sha1":"6a2e1eedc05dfb2ac61a4abd81de3e6f5a2c9ca2","sha256":"103b46bfd5001eac175c1419c8f8d2aaf9b5a44ab3d596c54ca14a8a57c0435d","sha512":"df3f21abd0ab7e701f43cf7aeb68cc4eaa3f45f6d3e5c560cbe8f6f21dff2c0bd167e5483b5d27d9d4300a2ba23c5b1b13401db2f28eca788b89cf3e0254b1f4","ssdeep":"768:I61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Y:nzmp7QA/BPWUY","tlshash":"c903fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2026-02-26T15:36:50.671476Z","last_seen":"2026-03-08T14:14:44.19034Z","times_seen":13,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e6340h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e6340h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Mar 2026 23:34:14 GMT\r\nexpires: Wed, 04 Mar 2026 23:34:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143172\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424634,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"ca35270efcdf6d70e7b700c33706b324","sha1":"fd03e123c7b9f0dd6a0930e47b6f2ee5f023ce3b","sha256":"31165d395a205704f3d367db12b0cdd71fe7172864a96f38b68676555879bde0","sha512":"3311bb502170a61b0bccc291730722b19d0c7e1041f05f77480100732b563c2abed2425533a1946366a7bbaae577bf1397ba34f555c46c43e28413104a2e0dc3","ssdeep":"6144:t8kKfNl3HjvNQB/KI0SfZ8RGw/V0sApXx2ZeVJw:+/FxHjvIDfZ8v1","tlshash":"40942aceb3c674225396f478403f018ba57b68a2b48cc89af189dcd46e7459a8137f7d","first_seen":"2026-03-04T23:34:52.509398Z","last_seen":"2026-03-04T23:34:52.509398Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-k9TXs2ZXK-Ih2SYKsfWt1hcjxSzvwXY8CjiRSsf4901UEwyanDa6rRGJC2VPuZcuVCRAo2wG9Hq3sq2PcZ_n23x8XDgMHPpvqkGX?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.5\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.44","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-k9TXs2ZXK-Ih2SYKsfWt1hcjxSzvwXY8CjiRSsf4901UEwyanDa6rRGJC2VPuZcuVCRAo2wG9Hq3sq2PcZ_n23x8XDgMHPpvqkGX?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.18.5\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon7772.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: utPG25PV8iq76TZW6fGDeQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 23:34:16 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Pto4xWhUOA4gFV8bBdfVdpCwEP8=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":1,"connect":96,"send":0,"wait":96,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/d1610888.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/d1610888.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-c8f0fc8d9102421a0b344132246c0cb5-b0bf9b1356e0e7ce-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 51670\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T09:12:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-03-31T00:45:46.166838Z","times_seen":129,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1fca7f1.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1fca7f1.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 751\r\ntraceparent: 00-11f4e28142467898829abd89551c287a-d6ec12efe5ea9b80-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-2ef\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225742\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"ebde2d39f138a42baa20b276bfd63fae","sha1":"116843f5a885a77c9f2ba259e9e23d1fd045dc02","sha256":"35b26c3e85d5472fa3cb91ddcfa727d44b843b651bdc033fda887ae732e75317","sha512":"e81ee8c2932550539af19077a06bc6b2bfdfd46ffe171793b73efcedbd3d986482dc4537d266c629a665c6f15a2971294ab176c03b298147dd4d2fecac6882cb","ssdeep":"","tlshash":"a841ddcb738498329b57d9acae1f6f72287ff246451ac2a84158f1f015820ddc05af2d","first_seen":"2026-02-26T15:36:50.677605Z","last_seen":"2026-03-08T14:14:44.244184Z","times_seen":13,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/slots-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/slots-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1832\r\ntraceparent: 00-19a79894730f3e9d3c39bfaff56ee7aa-eba663a35a403537-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:39 GMT\r\netag: \"728-61bf3682e8cd6\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64ccc1ab66cb91bd441d3cb46cd948b","sha1":"9608b42a44b67da4be82d09c933f09b5ea3110cc","sha256":"1ae73f949ce1ca94b58f32ac5fab711d948e93073d8432e06228d5dc3a69321a","sha512":"43b77ebaf033ddf4d15d21492facc9ad846cbf57ebe6b406193891a8f029340c10f92bc5ff4e6ea165342aa0cc36037bcb7f086fa38d85d054e06f0a98dd7c7a","ssdeep":"","tlshash":"be3100fa97c0bae4f04bebe9c439d5a9729f34f93fb492810144a788b75506d8c8de04","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.147581Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.DInlJu0p.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.DInlJu0p.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 856\r\ntraceparent: 00-83b329c882c7aabf3f7b9f0f28d55451-e12ab137cc323087-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-358\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 7688\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T21:25:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1322)","md5":"c3412bb20341ab2b5d11547b841aa815","sha1":"5037169b6545696d40214dc3e2ee48bf7872fbee","sha256":"be2ee008548e6e5c6118d90fa0290195649b6b137fe4f0242091bd719e294faf","sha512":"f0c3d0581b3606bc751ee87be3feb3a7779b98faa2fbd770005e1beb5d1b3f23422ce91a5868d9aeab8cd43ceec6539d7604a744102fd54ab125e645b2458fc1","ssdeep":"","tlshash":"91316609629295754aaa18ed815a3721b321dfe1312cc5e1e0ac7c693d61813ca1bfe3","first_seen":"2026-03-04T23:34:52.521498Z","last_seen":"2026-03-08T12:35:27.995806Z","times_seen":4,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":130,"dns":32,"connect":11,"send":0,"wait":9,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:13.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29392\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 00:02:23 GMT\r\nexpires: Fri, 26 Feb 2027 00:02:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 603110\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29392, version 1.0","md5":"a6323dda0842401b2923554d0ed8945f","sha1":"6a5e89b2f9b47f5a2fb11831479c02b4eebe3089","sha256":"cedb374b05a35034cf96db185db4eeb8f8ce49e1a56197673702ff11b5533d6e","sha512":"6fe8df13c6dbc738b1cfd40c14bda19dca6114b3a4f521ff46fa7ebe25f6ce11046b7d41c1a8528d2294afea5a1c985ff43db37a2de028c1fb61b7197210dac1","ssdeep":"384:Wz9Te6aaq6lpCaascbVjmWd8NifWrHJi9grlYlMl1EfUxFvskjZAFWiMhv4K6Nb2:u9jN2bVjmWQFqgskSWiVK6NbKd","tlshash":"65d2f15cb579c636a098e4b70df5e3bf9599cb39224b9b288341c0385aa3941e442b97","first_seen":"2026-02-19T22:46:38.271285Z","last_seen":"2026-04-04T14:38:08.755375Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ba8af1f8.d.m.BTq0UWdl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/ba8af1f8.d.m.BTq0UWdl.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 39569\r\ntraceparent: 00-24ad33116e2b9d7f9d33a277344dad64-4166e53edc5b18f6-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-9a91\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":134593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"83f4ec756eb7e5d705cd9184e6bee854","sha1":"65e1a59678db2c98e9bec54e70dd14b16f281ff4","sha256":"7d96d4172d9788f21b8205aa110e0a584eb8c2ba04906c175a9cf8452b2b65e2","sha512":"5edb2d04a701b5084ef91083b186e24e6292df54cdb67dceab49dc7c16d1f9a472ded4a99ce0ae0ad25363aa979aa1df01763750323e248f66dc5a044268f1ce","ssdeep":"3072:PNj4WRI1JRRYYIkPXE71Vm0GPe74Thz/ZzgVSVnq:1j4iI1JRRYYIkUVm0Ga4Je","tlshash":"dad3e5c8b6e3f06183e22070402f440af27e6d69949cd494f6a6d4f53df995a8637f2e","first_seen":"2026-03-03T22:41:35.008011Z","last_seen":"2026-03-08T12:35:28.01963Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f0836975.d.m.BAb8Tygs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f0836975.d.m.BAb8Tygs.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-ddfd92a241b914f3ad074c15b4daeaab-ddc6dcaa96098ede-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-34c1a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":216090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24590)","md5":"ae588fd624936ac22e3a8aa9219292ca","sha1":"b2aa9331487b8277a0ee65eeff291bda77ba946b","sha256":"2b09fba32fd2eeca12cf7970cd065fbf98d0a8cb26d7b82d954a55ac5c3923b1","sha512":"d8629519ef4522c036b0bfd84dfb6b70a7bf44ba62685a702b0e205cc84fe2227dfa883bb12f9b348ec12b53629f40fb7619b8a5cec39292d876f910b0e3ba37","ssdeep":"3072:7QRJ4My/FdwSwXwSNTQFAaugR6iVHnXlB9JaoPF0NFglgyhT5aHYO6joxppmK4XW:pYDgZFRDVHXt0NFgKP5w6X","tlshash":"3e245aa4728ab43147c99251a02d0736f26f8d6d615cc028f6adcee61fb8446637ef7c","first_seen":"2026-03-03T22:41:35.333624Z","last_seen":"2026-03-08T14:14:44.157173Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/other.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/other.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1220\r\ntraceparent: 00-1cebb0ca87657bff357d24ee00e3d500-d6fb6130022e0d32-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:21 GMT\r\netag: \"4c4-61bf367262f3c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04de3fb1fb28c7e3a6d905cfaec4e513","sha1":"7823b05f9bc9f0a16145f9468fc8e5df9d573ce6","sha256":"3c584108e1d8685d12332171f34879003c01a21d55ae5bf753b8e034bc020e2c","sha512":"f1c62e53cd1d6d4e3a72345e59903656acdee191038db1c1f7bb85d0763d785dc98f414531b61161aa045aa575b6dc52a95117c893a158d43f2ed8c7871b00fc","ssdeep":"","tlshash":"f121e0f196606350a0099b6fba2ab56271eb3cfe3e624dce93e0fe1210050d98c4d986","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.257946Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot-animated.DZ53syVI.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot-animated.DZ53syVI.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4576\r\ntraceparent: 00-db7a6e137a31391ff9303f134e8247c7-9d92dfd96339b84a-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-11e0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 642677\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:02:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02c2b186b902e2d40b0dc138f083ca80","sha1":"203e6ffeeba97cfbc2aa11965b073f2a8c29feb6","sha256":"642050e727aee3f059adaad0150fbb7355e30f78e072bc79bfc939d032d42d66","sha512":"1270072f581827f00e2fac5a83d453d37285757b0feb4298fab057bc335231a1ec33e7939bbf120b9da1116e11b7ebbe031cf6a186113c35b90d67cd7bed4ac1","ssdeep":"192:SW5PDinj1C0JTw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0t:STnj1Z6YAXsI14g7V6scBUCVqn","tlshash":"eb4285e027f9a2e4f106e3ec8656e4247e5318eb7991c569f2ae2d58df0144c0e89ce3","first_seen":"2025-10-06T05:00:55.723421Z","last_seen":"2026-03-04T23:34:52.542712Z","times_seen":15,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.BhNfCntJ.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.BhNfCntJ.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 7131\r\ntraceparent: 00-23b8fe01c1c873bbcb1cd9aa09f9c367-665d1beb30c1440d-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-1bdb\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 51670\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T09:12:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":41157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41156)","md5":"a7b4020f6d4e9eafd65c34f9295fe509","sha1":"0b8af5aaba32eacc0416030093af2f247c20faef","sha256":"b2d337b03ee9411afdbc14e8898e03ce218fd4798e433d9c01b5568c5a3b4512","sha512":"04932d1f14df0e7039d28f9078d4e13146e5147beac32a84fab8d0c7804db41d97aed7bea1a773d83c65c3bc0c143fae636c599c6924e76855f7bec7c550aba8","ssdeep":"384:MN1UNdN81MfOjDv6oQlGDA7tFBXW0VTRRq1qlNTISGjaw7yV+ypXmW0cnLXABhH:MjUNdNxgDvyLDXWMFFGWuyp2Wvyp","tlshash":"c003c7fb8f4c616ab76bf06fd3a5f518690aec43c85258e6c1a4715ca1ca7d383d070a","first_seen":"2026-03-02T20:05:03.655414Z","last_seen":"2026-03-08T14:14:44.189627Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 364\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":364,"data":"[{\"id\":\"326016d6-e66e-49a9-8416-2dd69f40e426\",\"qKey\":\"5b49cd5e-162\",\"operationName\":\"getSpintaxMetaData\",\"variables\":{\"options\":{\"routeName\":\"home\",\"routeParams\":[],\"ts\":0}}},{\"id\":\"44aa503e-27da-42da-8af0-ccc386b46ae9\",\"qKey\":\"33368f52-237\",\"operationName\":\"getCmsContentSpintaxBatchTranslations\",\"variables\":{\"options\":{\"contentKeys\":[\"WEB2_SEO_HOME\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21569,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a3f5e18e81c6340dea8a3c69c4e2ed82","sha1":"7afad85a418fd6110fd01386fae14bf604836f71","sha256":"e9a72de13ce5b98b37089a5393a61f90b0e06eec6de0ab952776bad41934aa44","sha512":"69f3131bc08aa94b032a268122f254b223cf18053605bc0512c376ffe7225bbcf8bca12c2023ad365ae62c18f20bc374275ce45b003c4e76c15242cdde9a7e32","ssdeep":"384:QyM3seD8azIPaSHEM/GvEdR1Rnsz8gH00W:o3e0IX/QED1RsQy0J","tlshash":"5ba2d852edd9b62af507e75636138eb3bb0db02d8371129598ecc2b3d20a6b5d87c10d","first_seen":"2026-03-04T23:34:52.547838Z","last_seen":"2026-03-04T23:34:52.547838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"leon7772.casino/subscriptions?platform=web\u0026skin=leoncasino","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:07.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /subscriptions?platform=web\u0026skin=leoncasino HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon7772.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZwZ3rDmfIaChuqQC4/il+A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.27.5\r\nDate: Wed, 04 Mar 2026 23:34:08 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nupgrade: websocket\r\nsec-websocket-accept: KS9pETjsGzA4hGbLj2zNtiY6Hys=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":889,"timings":{"blocked":0,"dns":1,"connect":153,"send":0,"wait":568,"receive":1,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/instant_win-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/instant_win-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 413\r\ntraceparent: 00-7136ec4cc1ccf2dcd8dd4529dee7908b-abbf0241fd45f62a-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:59 GMT\r\netag: \"19d-61bf36cf7dfa0\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d8467444ec8a15407dd22a104df3c8","sha1":"c57ff6a14e02b2d2b88bda518f2ca548254d9fbc","sha256":"9e8fadb0932ffc1f1a4937d9ab37505a34a35b6d0c05fdcb7f00f8290934c9d6","sha512":"3a2e6ee1c391dcb602d2767169dac90216669c2d8279d0f6d4877c03f86c91b1e1df688ab5b75a0ad6088801337f3fa1bf1b59496ffa3e5784ab03a16d6cc84e","ssdeep":"","tlshash":"77e0abb9c448b7d4ea08c7f1a32c6b6da2bd70c2b37009d592c1760961060bfac8a888","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16463Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/top-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/top-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\ntraceparent: 00-4a46cd4b1f752a0969303f36aa8368e7-b3f44388e68b0038-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:31 GMT\r\netag: \"2b9-61bf36429d66e\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644054\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:39:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0848796581e9266f80f9c559e3de8a8","sha1":"cf5f98440ce0f2c0edfcd5985dcaaa90da3d419f","sha256":"7e3f1836401d8d45ae3f406467c7bc7b78193dc00028d63d7659a7809bc4c083","sha512":"9f131505c274a867ed7ec98f409ebebd5a59edc16f5c7428b0e237b72d54ff24eac3e164c60047c6b7610c9fb054c60eb74b0064eb08c86ffb47d5b8d307a422","ssdeep":"","tlshash":"730170e797a451a1d7098ba12794b66e2edf3df136d14b868044b9b8d6042d5cd8c8cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.172779Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/faffda3d.d.m.B8C-qUM8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/faffda3d.d.m.B8C-qUM8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 695095\r\ntraceparent: 00-d885623635d2b0008084ca853c41eb87-e1fb402faa1a1233-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-a9b37\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3751528,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65140)","md5":"c9f125597d57e5a0dc94d1628517ed49","sha1":"11ee316add536eb47453afe5a655ceaf1a427653","sha256":"9ac1c8656cfdd7f2d376da1c894687dab36be86c9271692ad8843d6ad31de0de","sha512":"5d9f7919460d20ccae812a4cfd9dfefcbdb68c449e1fa54f76c87c05deec9e8e989be48332423778e31e06bd29524f582e643965a88ef4cee9049e605b536e25","ssdeep":"24576:NQYn717PH6LAD+dUsFSrh8GbV0kA7Dued5mxFRazb91as7OnTOje:NQYn79PH6LAD+dUsFSrh8GbV0kA7Dueq","tlshash":"e1255b5a750d3576c3f34556a0aa0440aa3c5b50f16488c1f9fc8e2a2aded3493bff9e","first_seen":"2026-03-04T23:34:52.552328Z","last_seen":"2026-03-08T12:35:27.982931Z","times_seen":4,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/video_poker.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/video_poker.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\ntraceparent: 00-a6fb3a9e4c9b59fada6fab03c1da2112-9aac2a7ead7772eb-01\r\nlast-modified: Fri, 28 Jun 2024 13:45:12 GMT\r\netag: \"859-61bf374e1215d\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f54a335dc512bfbb32a481dbe99fec65","sha1":"93be1232f742dfa382f3349b7ec5e0db9a8a2230","sha256":"13b710020acb4a4914b3773ceee2b981f8c96e443e66616feb8c449825aa0992","sha512":"4ea64bc628e9c2dc6c60b8bd360ac0ec75543190ea2cae33c41976733afa8a638595a6e009b6c1c5d58c8bd647cbfbd3ddc49f0d09d345180eabe080d50b1146","ssdeep":"","tlshash":"c94144e657d453d07d0feb61c9234d32f96b34b7e5bdd70d9120e99061232b68849cc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16732Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.13.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"match2one.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 11 Jan 2026 17:42:04 GMT","end":"Sat, 11 Apr 2026 17:42:03 GMT"},"fingerprint":{"sha1":"20:25:E3:91:37:36:57:45:FC:53:D0:0C:9A:A8:2F:DD:65:37:90:14","sha256":"49:B0:09:D8:05:A6:92:22:02:6B:98:D3:08:62:81:7C:83:1E:DB:43:24:F7:E2:E8:5F:E0:F1:9C:1A:C5:E4:78"}}},"request":{"raw":"GET /tracking/m2oe.js HTTP/1.1\r\nHost: cdn0.match2one.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:14 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: b9vbybQ/rgRzK/X1ew0BoHyP8NhmQVOTKpCZtgNFWr2hatQSdfX9nKYqjsprMwjv3D8JN0fANwE=\r\nx-amz-request-id: JJ66B1CQNMM1RQC0\r\nlast-modified: Thu, 18 Sep 2025 07:53:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 68793\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCZqzJRqTjNWGkBD2QGra8IYKQQ4ILhzHHPxE6GyGJpF7ggWW0J2zKYHZS6kzATYE%2BrWd8UDJJxRBQxZKtxyT%2B9x7AqvPjze6iHbu5QvEGfPFuyVSa0p9UY0lz6q9KFHbDGFu2nKL%2FgSw1KFU5UjHyvROPM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"76401bdbcf3ea72cd04aa2d225f6bccf\"\r\ncontent-encoding: br\r\ncf-ray: 9d74b0c4be1535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":37,"dns":21,"connect":1,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages3.gcdn.co/HRJLWPLB/files/top-nav/vip-ic.svg","fqdn":"cdnimages3.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /HRJLWPLB/files/top-nav/vip-ic.svg HTTP/1.1\r\nHost: cdnimages3.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-6d61229acf7e0934e11026516eccf0b2-67c1e7604ed924d8-01\r\nlast-modified: Mon, 29 Jul 2024 11:38:11 GMT\r\netag: W/\"106a-61e614bbda1cd\"\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc16\r\nage: 308628\r\ncache: HIT\r\nx-cached-since: 2026-03-01T09:50:17+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ef082510b46a6aeb00c0df559b2de18","sha1":"b483a67c1a80a1db0afdd67246d5faf47f846f42","sha256":"155705ad90a321b396a52fbab695bc92f9a2046aac18371fb9a172657e97c2a6","sha512":"b23cde6916243bb8bd8695e5a97722d815217395a2727cd39aa9f459f344b88c951a260a56557d6bab22af21307f9765e408b8f67d310970747131cd6fdb2d11","ssdeep":"48:e8O6IHpZU+i2/zId7HoWsiN0thXLiJpwO/b37IvgFLQLZi/hABNFkg62venBHcA2:go0kMWsA03i/bYgF0I/hABLkrQeBB5K","tlshash":"c681892aa144d61d5883e24dcbbf91e1134e4066f1ea92dc7affd3aca10f4d4f946834","first_seen":"2024-08-31T07:43:54Z","last_seen":"2026-03-29T15:19:13.373051Z","times_seen":108,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":16,"connect":37,"send":0,"wait":8,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/dd2143ca.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/dd2143ca.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 20582\r\ntraceparent: 00-4a85b890eee4cd9898054dabd279a6c0-7b0ab847029f6ab5-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-5066\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225740\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"173016191c06704eef04f03986b14bdd","sha1":"9c12772a51df61ebaef02952023c16c464dfca3a","sha256":"b23a26c77610197fcf71c118bb19b4f0f67403cf25eb4c0048c42ba0da66f91f","sha512":"d63d4789357a1eb484c142e89df23fbfc84fd32ac94d52555cca9d00f7aed910d9769993db3e918d1357ad54785f4caab085ef42d9949560340a8afaf1f63212","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5d:440yRbYVfh7WBknQL61PHd+ejJm8","tlshash":"b05380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2026-02-26T15:36:50.678293Z","last_seen":"2026-03-08T14:14:44.173037Z","times_seen":13,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/jackpots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/jackpots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1666\r\ntraceparent: 00-ea074bd772e3246b9b3e3681e0d2b67a-016d34dc404dd547-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:33 GMT\r\netag: \"682-61bf367d55ec8\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644054\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:39:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d078c57099cadb8866bdf0cf7e6fb1","sha1":"9db3f9769966f73119b118489aef70be6c435b10","sha256":"fd1792c86362ee56c8ca9479b4bf023862faec59991939d1a4e8d568877df028","sha512":"c4e39f897618c3635f2710359262a143db4edbba3b2ad27598e562c88648bcb463cd30c372516659a876d17827cfc5317baaa23aa23144c6cd992d3b94a8e854","ssdeep":"","tlshash":"c83106fc42e8b2c496465b20fa27f8d262962dfceff39ec951e25b314416191490e9cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.195707Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:13.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 11:51:04 GMT\r\nexpires: Thu, 04 Mar 2027 11:51:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 42189\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-04-04T14:25:29.81262Z","times_seen":6604,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/769087b8.d.m.ITzlo9tB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/769087b8.d.m.ITzlo9tB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-04fc313a638344c90fe275cebbf84c7d-6d5e87f814cf707e-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-254c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225742\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9497)","md5":"a97b2ac14757f4188da0ec0ef2783734","sha1":"f609d1ed485daf753a305a91c8cf30f8aa82a2ba","sha256":"1ce54bfd9a8ef9a74e095ff20438dd261ed146d5bd74ba3db0714760b55690c3","sha512":"c85cfe94e20f8fd9a422a0b6b5be3eac8966046a92fa141f0cd12d63cf62bf5f3d24a69f538527689a25c0b439e0c5728e414292481ff01d099680605d26b4f9","ssdeep":"192:AULK5rHvInYEbNRMNVLAi2JVWUwTwqjkW6JLRvpsJY:NOPInYeNRMLAi2KUwTwqjkW6RRxsJY","tlshash":"d912c5cd73d1fa7252a6a9a5203fa006bb7f66a9681c4420d14dd4c13e7588fc933fad","first_seen":"2026-02-26T15:36:50.748248Z","last_seen":"2026-03-08T14:14:44.173525Z","times_seen":13,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/logo.CTzo9Wgk.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/logo.CTzo9Wgk.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 533\r\ntraceparent: 00-a53d1f10b35aa956498d230b2b73e0dd-2d3b7a4562fdfb0b-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-215\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 621257\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T18:59:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c084e668671b35036439f1639690ef75","sha1":"9988516ab917ea62df37ef9136a9ee89da7e049c","sha256":"6516e9411efd44270ddd1ed1af1523a9c63a61a1bf29b697e1aac53302963b36","sha512":"edec61a2a75471788a707cabe122822827b51e7ae00390f54c00b36dc201a0885b035718ea7f4ec9b2e6344dc485b7d2182c142019daa3fd17f1cae14864a80f","ssdeep":"","tlshash":"0c1121eb861062bcab55afa5ea307416b10f547e3f4a86acc26c830014939d4e40cc54","first_seen":"2025-02-12T21:05:05.539064Z","last_seen":"2026-03-29T15:19:13.409426Z","times_seen":96,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.540fc92e.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.540fc92e.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 160193\r\nlast-modified: Wed, 04 Mar 2026 15:05:34 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 2Ef.NmGrE4VrT_uFmDyr5B_g5t8Wl9gG\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 23:10:16 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"808e31bf38a11b685dce0cadebf6becb\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DiPGX9rQIRDaXkkfFAtZQTSmImnKyO9w4PMHiDxqROJ_jUCW2QWahA==\r\nage: 1439\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":523903,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"267f3aef7f9177332427869e64c2854a","sha1":"db1edcd30976c5486d162e05b342de90f92c5e3b","sha256":"c1d711f916897d2d2d1a50bf2eb8321082334ee9718e18d9bd2d7b70611beb7d","sha512":"0019a0d2c0a8dcc9c89c9af4eea1ac8f891e30ad6cc8b517e0b13148123b713e3a017bb03872f6f38892fee6a0b16d748b0e79b34d39f63cfb8c590ee566c46e","ssdeep":"6144:MK6LzOBn1n0brcmGaApqf6SOWP09f2SFCBI88C8TNJhOIdiBZ:D6LzOZZaAob0PCBI88CmS","tlshash":"52b418dd7591b46207f312f2407f180bb379296a284c4860f664e8dd78f994da23bf6e","first_seen":"2026-03-04T15:18:08.486695Z","last_seen":"2026-03-09T09:41:10.31056Z","times_seen":839,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":83,"dns":65,"connect":4,"send":0,"wait":14,"receive":8,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/71c69379.Df-RY1xq.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/71c69379.Df-RY1xq.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-e05b91bc5dc8f757d9469bbc5fe461f6-b75e6c70347977c5-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-db\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 639967\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:47:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3423d7cc3aa7ac44d033e2e4be0b00d4","sha1":"a4d591bc0446811187b44bbc1b41c07a7f48f232","sha256":"152add0de253a858678d73d9988ee6214da2dc169ad58e26e2f95e472b50fed6","sha512":"65c19ef7f61a6266e6f34255b873f9d0d88f42971a124787b263063acf53f4c0759f3b40a563d4aaeeee269edf833b3921dea4e9b2fa89f82423aacd6cd8f2e9","ssdeep":"","tlshash":"87d0a7568df1d6336cd0590bb3444a8c30c29c0b85175b04c49a140cf4b359b3202384","first_seen":"2025-04-24T07:07:12.797229Z","last_seen":"2026-03-31T00:45:46.183155Z","times_seen":113,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/cnjqphyx HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3164\r\nlast-modified: Wed, 04 Mar 2026 16:13:21 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: qQCohb0qCjKmYX8Z8vzDh39S209C85o.\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 04 Mar 2026 23:32:29 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"8c3e61548654a696ec3c01db9de49d99\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: CKaIFLFlCEw3E6tO5naXgTdInBCuoX5Mcgm9BCwJp3G-ZgRVs9yzEg==\r\nage: 107\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7614), with no line terminators","md5":"67ed7006d72a612c7dcdbcbbd266e343","sha1":"05e6a480a6707dc120ddaca22b061e1ad3eec27f","sha256":"e5e92dba952a599c8eb061cb5749ded9eba89441e029b17f8e4b81b13fd6dce1","sha512":"ffe77f02c56d455484acc9a0fa50079ad20be85c6015208f6a868de574e12ddc064a25875918fd216b3476dea5082a8120a977ae3c68afd5bce61354426facfa","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0FfpYJRzfDsJeiMw938I5Zv1JVqUP:v2YVNCH8bMFOWTMMiZ935pqUP","tlshash":"14f194feb6c2797806a31566623f770c7f3b658428494890d069c8c8797adcbc11bfad","first_seen":"2026-03-04T16:27:14.337278Z","last_seen":"2026-03-05T09:01:07.969447Z","times_seen":147,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":31,"dns":22,"connect":1,"send":0,"wait":26,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/171e0e51.d.m.CPQwbfCR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/171e0e51.d.m.CPQwbfCR.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8798\r\ntraceparent: 00-f13d3be2aea9eca7a5977bf2f135da1d-523915ccf1c07b3b-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-225e\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":28038,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27987)","md5":"08342ab0e2ebb3e23a491f360dcb7037","sha1":"fc4ca5cf260015e594e13002b0478f9fd99e555b","sha256":"e88797b082b44c46fcb877888fa6af834cc5a9b4a91392a24e27466d483b964b","sha512":"aff2b34c400c085161a26652aad8f244d39288da7b8968cc14297c0d3cbf5bbe2830ed24e83946a61b332cc6d66d0367c7f031f94a8cd8a8e387e52e0aeed67e","ssdeep":"768:Mydu7OHIdKoVNQGcU602IiWLV8OmodgACvUWk/pWygvu5HSG90ZNu609ZU:MvKoVKpVq8OsP0cvNu6qZU","tlshash":"e9c24ce76353e1b28b7a41ca50770182d21446e5f44c84f0b5fe9c6e36ea8a2e356f3d","first_seen":"2026-03-04T23:34:52.564443Z","last_seen":"2026-03-08T12:35:28.043484Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/pgsoft.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/pgsoft.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8175\r\ntraceparent: 00-77ba249ddf7f0e4f270a8350796bc0af-1c602a7f73e13978-01\r\nlast-modified: Mon, 07 Feb 2022 08:53:03 GMT\r\netag: \"1fef-5d769ba7bc5e1\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644054\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:39:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8175,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1dddf128184ff94915ce0f5eaa677f40","sha1":"4350c5408da28db397df35481d8077c21d89138b","sha256":"265a5b03e475f9fa4d6823052721e48393494b1d2f6e1874a00698894d6e65ed","sha512":"400bf499f6e853a5022cef129694c286034728c4f9d4382aded0f1eb10b619ff02f73d89246cef9a5d782aff7a7910bdf8abdf8173cd23a819aa180d2bb6a49c","ssdeep":"192:WnF+DtRPQaNurMnpxvzugABoMyEMK07VV3LxdS:Ht1hAMnz5EMKUVVjS","tlshash":"18f144c6f6d283f06e8c43bce5305cbc607759e9bd60f588ca772e67b8c825668584c2","first_seen":"2024-12-31T04:55:51.581704Z","last_seen":"2026-03-31T00:45:46.162461Z","times_seen":56,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c32793.d.m.v8ZQq4JS.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1c32793.d.m.v8ZQq4JS.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 25295\r\ntraceparent: 00-fcf323c0eb5b609e7ab05a4bbbc5053b-d3521e8e9b35f735-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-62cf\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":137876,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65087)","md5":"912928d834eff91c2c361005cb295167","sha1":"97001362f1a7601eaadf138e7585a8800578a4b0","sha256":"e76a08dd833ba0a007c9485deabf1b3c43a8788aae4254548995b46223ae418a","sha512":"5644514cbd7aed9a4d48f7da2c74614d4348a01699d4b89be2dd9394fbdbb44431406c75f4687af9bbb403574a80521bdedd0c56ab3f20466f62e93aded8861b","ssdeep":"1536:vEL74pOyuTtYnBNwzBd4y7ESuuv3LtQiKcNampRSr9oBNUNrGMPFdP:ueOgnB+zBd4kquv3XpRs9kYpPFdP","tlshash":"46d3929a56042cfb0b710e2d5b6a76b422334c94fe57c037816abb7d3f7a116f01a2d6","first_seen":"2026-03-04T23:34:52.567013Z","last_seen":"2026-03-08T12:35:27.995243Z","times_seen":4,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/65c7eb77.d.m.DIGp6D7R.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/65c7eb77.d.m.DIGp6D7R.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1135\r\ntraceparent: 00-3cf455a8ceb94392f07aa13ddfcd14d7-f2599837b186c62d-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-46f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2546,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2495)","md5":"cb6b2195d2a791493689af8b64d9e933","sha1":"e0fe14ed2b78312a7f189fa4cd1615ae2e3b3f62","sha256":"3350fbd8d2ac7704e5e19b2f96f234f34958ecb7831278cd492161918bb61bcd","sha512":"307d3a0ac85586f29bbbe6097817a2dd1c4dfd0fecc73e8f2ebd2e8014edb3e50c5a558678c9364ea55064bcdba3f146a14a95e4bd7500874a4695d105fc0808","ssdeep":"","tlshash":"fc5144ccbbff60702aa9089590a7b007b3bfe995712d5152f02c95b1794349f916b90f","first_seen":"2026-03-04T23:34:52.568615Z","last_seen":"2026-03-08T12:35:27.975934Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/036a973d.d.m.DDj01hZ8.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/036a973d.d.m.DDj01hZ8.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 81440\r\ntraceparent: 00-705a71296a036e15bd50b7a32707f486-75c793236744dcd4-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-13e20\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225741\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":285362,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30460)","md5":"5a56e623158dbfcf5853375bd8308664","sha1":"547e1dff805f86167550b015cc623b60116612d1","sha256":"9501eede310c3d02294cb1481653d19be86207e5e18667ee7859562cee0b95d8","sha512":"3ddb81be33c8de942b8b8397cb626dd6d38f13f66d703a7c5998c9a83d6cacbebf60f3b8d6a81658197aca43ac13f05d52b14a69d984ca9c2e1bd3d6cd9758ed","ssdeep":"3072:glPCf2+Xb0xeLKOBlv4LyFMME3VF99l/yAj6CUVZ0XjGU2/i:glq90wL7BlDFHuF9T9j6CUVkjF2/i","tlshash":"905419d931d6713353e60aa590bb0102f7355a90344e81a8f52cd9ef3dba44aa2b7f3d","first_seen":"2026-02-26T15:36:50.681992Z","last_seen":"2026-03-08T14:14:44.155141Z","times_seen":13,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 17:21:40 GMT\r\nexpires: Wed, 03 Mar 2027 17:21:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 108744\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-04-04T14:47:10.838637Z","times_seen":18132,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":101,"dns":1,"connect":22,"send":0,"wait":9,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/novomatic.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/novomatic.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9561\r\ntraceparent: 00-c14521bd42c1c44f6e01c27bff5f65a1-27d2c757cd7682f2-01\r\nlast-modified: Thu, 23 Nov 2023 08:45:18 GMT\r\netag: \"2559-60acddafc9ab7\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"145998df0c33373dfacca434386d6b64","sha1":"eae73c9d71e9b5c560f5b997bb67651fc7c3a967","sha256":"c1202da0159789e5f9bc04689909f37ac67242790a2e2c7001a4203c113bf25a","sha512":"0d29942f1d0a6ecc174bda031b213961ae9005ecff1c85c3ce2dfd109c01a4ae1d21018b8ddc16627f8cf21db46661a399921608e9c22b42bb9591a2addfe83c","ssdeep":"192:Nnq9gb2ogtLL0SLU5tZxCGymBPUqZzZdGRNif:Nn8CWLfLUDZdGR0","tlshash":"6212a4e8ab69d2f8f00af3b88717d4786f522ee1bf11d5aa87d11c16e05102d8d94cd3","first_seen":"2025-01-04T02:54:47.931324Z","last_seen":"2026-03-31T00:45:46.203828Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/best-102.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/best-102.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 54547\r\ntraceparent: 00-648db08a180203a6aa317b4407f54534-8be39f37c4663073-01\r\nlast-modified: Fri, 14 Apr 2023 10:04:50 GMT\r\netag: \"d513-5f948f8cab939\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84252d3bb3f7bec6a007a3dade8d84e4","sha1":"eef631d5a1527bc7bbcbd424b5272afb4386a96c","sha256":"b146039c094babf2ce8c0d5bd5af4a4d6b390bb2c4c33a60f84a3bd992230c39","sha512":"afdc61cd7f9d2d8013db82b4e36ff9a1e7c53089450d7af034334d4008e6d0c69bcf812cda8bef5bd28e9a803f25177c98e77f7fb39c02d64e2b0afb9b63779e","ssdeep":"768:krgkNuIumlYeh5C2pjoJAPHImabrjJjhwyWB0YgBA:k8i95uJAPoPjFq5V","tlshash":"7f336399e3e5a2e4e005f3f4c62ac8b63a632ef93912ce5583e56d55dc9102c49fdc83","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-29T15:19:13.415857Z","times_seen":74,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":112,"dns":23,"connect":12,"send":0,"wait":299,"receive":36,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.193.165.2","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 507\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":507,"data":"app_id=cnjqphyx\u0026v=3\u0026g=3b0364a60cbc59ae1714bab6528467abf1f9fed0\u0026s=61e81f4a-4af5-43b2-a090-5959dfcf579c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=b94791d1a7a35dd8\u0026internal=\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 5e3e7317b5284d47e51035926fe6f8bfa0d2c940\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0046sdoga9doml0jv6g0\r\netag: W/\"602a2cbc3eb1e4f97a338041dd344c76\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.024390\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2e16c0fa5bc36cc68f12bafd4185a8c9","sha1":"03c96970fe5812b20e7315df1b33d163e373a09a","sha256":"602a2cbc3eb1e4f97a338041dd344c762c5b3772da3174ffd58778afeef52294","sha512":"1d25a891917c7b6b4f5b0086080b56f3f68a2fbc947abd673bb25df3f3a9df539f7b84d84926078a4d355d8633294b5ad1842d62e33e6eedf6e9a9731d162179","ssdeep":"","tlshash":"d9f0e1e9978d4c2537c147d9c21f6e0b0796459a62901df1f0b4dd98d0fb607594d507","first_seen":"2026-03-04T11:29:43.05104Z","last_seen":"2026-03-04T23:34:52.574613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":207,"dns":14,"connect":93,"send":0,"wait":120,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"44.193.165.2","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 729\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":729,"data":"app_id=cnjqphyx\u0026v=3\u0026g=3b0364a60cbc59ae1714bab6528467abf1f9fed0\u0026s=61e81f4a-4af5-43b2-a090-5959dfcf579c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=34ca42a435e86c85\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%22cb16bb94-0b33-4949-94e1-ea659c8a3bdc%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026device_identifier=49d25c7d-bdcc-445f-a190-fe66d250fc70"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 5e3e7317b5284d47e51035926fe6f8bfa0d2c940\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 000871qch5e989l1tg8g\r\netag: W/\"baa9d680bde1b9eb82b3d3db2f1472f3\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon7772.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.191964\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-05c78277a6b2db1be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6589,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8bf38a0a0dc3c1b52aa366a96d65f50","sha1":"56481b24b5377dc21485e3aa888a846f9000a387","sha256":"baa9d680bde1b9eb82b3d3db2f1472f3ed08cd61bdcad6751fa0d40aaf239176","sha512":"3763005e5f6751e4f80907a9dd26fb666befca3071605b126c5caf6de5f9b90039193c148330a6db5d7d8bf329cf71e1cdbd5a4f7f47015f0a8a8754a0e8192e","ssdeep":"96:4rpN7YOyaRvkqRz2JoHAwnzlGjzK14zMwaLjGMlbjfZ9B15AOU5zVfwHwhPD1M6Y:4rpN7YKRvT9gwzTxDBSlw+1M7ptl","tlshash":"35d1888c89581c3e73cb82d5c7597e0a0b799297f1902d98f9accd2c21db399526f303","first_seen":"2026-03-04T23:34:52.576335Z","last_seen":"2026-03-04T23:34:52.576335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7016086.d.m.B95bN3MA.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7016086.d.m.B95bN3MA.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6104\r\ntraceparent: 00-b3ea41c1e87dba38ff81355b9c96af7f-0ca85c46ae1594b2-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-17d8\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225741\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16084)","md5":"952a970e6cb65c7f5f81ffbe2e407c37","sha1":"010df53790d74f09f12a84d1c544c0b4377d464a","sha256":"6d3c933ffe12068ff6f4afa5ec3d44cb9829f662005ef9ac6d40ef2127df9bb7","sha512":"4bc0253824499de28ad4cc866350902ef238a9d8d3ec4c579186db26831882481114208050a49caea3e633b6553f3c14621a2490d0e5006b6529440df346847b","ssdeep":"384:dxtL7YoplhKdhsOT3NqWEBI8YALo3lcS++VHYLIaGPfWwj1qXqYU5P9tlIgg/UJu:dxtL7PD4hsy312IhALo3aS++FwIaGPfC","tlshash":"bf72a4e93183b53553eaa9e7403b010af33c3944344f9494f6aeaac63d7651352b3e7a","first_seen":"2026-02-26T15:36:50.730644Z","last_seen":"2026-03-08T14:14:44.227827Z","times_seen":13,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-63.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/SBCAwards23%20horizontal%20logo-63.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 32963\r\ntraceparent: 00-c9c27f4a1d567a727ad5c6d0b8cf4ec9-9756b7541355528f-01\r\nlast-modified: Wed, 29 Nov 2023 14:30:43 GMT\r\netag: \"80c3-60b4b61556bf0\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 03 Apr 2026 23:34:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32963,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39f208963969a20927c77ff170d58fe2","sha1":"157f6e26b782db4a04d09122b259cf005ff47079","sha256":"7b626c040aadee9765e07e14b599af4cc2ed9f265653b5b5ef05aee038338a7e","sha512":"4dfe4615d190c87884b12becb29311f49d0295b64099e82acc41fc50e707536e3aa2da8cfd6ad60503a17ecb45521cc594ee32e4f19c55ac3ce451f9f82ab0d2","ssdeep":"384:RwW7ILFIilDA/XifM1VSVsgMILWtGB9ROdBdhH22jUWQRZ:tMF0SW9gAdBTrIRZ","tlshash":"33e29c5fe369dd77e18ae39cc5008034226a82a779c1c794c2f9ff4f566648a6c0ebd1","first_seen":"2023-12-10T15:49:17Z","last_seen":"2026-03-29T15:19:13.474228Z","times_seen":107,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"261a3687e95f909fc55ce476823adbaa.seondnsresolve.com/","fqdn":"261a3687e95f909fc55ce476823adbaa.seondnsresolve.com","domain":"seondnsresolve.com","tld":"com"},"ip":{"addr":"54.154.208.0","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:10.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.seondnsresolve.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Thu, 19 Jun 2025 00:00:00 GMT","end":"Sat, 18 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:3A:69:36:20:7C:AD:B5:16:79:42:DB:86:03:35:85:F2:94:92:F5","sha256":"FF:A7:15:80:50:DB:B0:9A:B6:72:0D:47:26:BF:71:58:AF:A2:28:B8:7E:45:5B:42:C1:D4:25:82:E5:FD:FF:F0"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: 261a3687e95f909fc55ce476823adbaa.seondnsresolve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:10 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f26b21bed09b377813f6c111904aa42","sha1":"2820cc6a0ad4e046532779dbf8e2dbf40be96a0d","sha256":"2d7a270c1928be61476bfe7e9a662b5d23101783e646e0b241b3955ad5ee786f","sha512":"09fa0d9d01974bb860ae2fd0a2a1ed538ccc3490cadee576e83549e184cdad9ce536ee0b6d3b40b3b79f2998092934cda28bdc5f00200b05b17bd7eace5f0fef","ssdeep":"","tlshash":"2d5000003c300000cc0000c0300000c003003300000000030cc00000c0000303000c30","first_seen":"2023-04-14T18:46:24Z","last_seen":"2026-04-04T13:57:53.97949Z","times_seen":3038,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":234,"dns":69,"connect":59,"send":0,"wait":48,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a1c6617b.d.m.FaP19qJP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a1c6617b.d.m.FaP19qJP.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 30612\r\ntraceparent: 00-b9586806b3480fbceb529193ab0e8588-566947080dfa8140-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-7794\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124730,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (33911)","md5":"be61dc1190f14024ac73bdfc0789010a","sha1":"d4d350c8bfde3e9c812decd5c4caab02d42779c5","sha256":"1d9bcae096ae844b105fadfb6eaa3ef3a9d5c5770e8dc2b2ccbce3baf6a4dcd2","sha512":"a85a0d1688e865c7f75d9e102c225245cc7054c79273a063f91dfe5c50f6f496c852e69c994efac893acff73166d0f92edd83108ee2a4e26ad634b7dccaecc03","ssdeep":"3072:qL0KfKGJvEvGdrSaV67dmcgUxHtu8cAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5fa:MpfKGJvEvGdrSaV67dmcgUxHtubAUA44","tlshash":"e2c32a89bd457075c7674ece823a1400772e1f92e2598891f0ba8ffe267e8149376b1f","first_seen":"2026-03-04T23:34:52.580275Z","last_seen":"2026-03-08T12:35:28.026684Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.DeWkVyrZ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.DeWkVyrZ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-2cba9f3ae9d116f2ded05f3c96965745-731779dc0b9f5045-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: W/\"69a6fec6-f94\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3988,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3937)","md5":"f1d9c81c34c30fa08cf789e79a7ee9ba","sha1":"e443aa2b3b28a6b538cde510d5be97f5d08b523c","sha256":"ea0186be3114889b598480ba135f743a0154e248e7f8979eb47b5d651a87c95e","sha512":"dc55ad64d28e87d803ab01c79608a3652a6352cf3744841ea152ab2167327e6d86242a95fbf29a92ce1fb6bc57bac07a8ecf429ddf99d00e0996538c9518ce2b","ssdeep":"","tlshash":"4a81964db1d670b9d33700d0c02704a9422a57687273acea906f56365a49c68f3ff567","first_seen":"2026-03-04T23:34:52.581781Z","last_seen":"2026-03-08T12:35:27.966153Z","times_seen":4,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-jackpot-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-jackpot-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7254\r\ntraceparent: 00-224f34a50bfbaf3552dbbc516246274e-e9342e0a8e87e309-01\r\nlast-modified: Fri, 03 May 2024 13:47:51 GMT\r\netag: \"1c56-6178cf7491cfe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:47:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 569229\r\ncache: HIT\r\nx-cached-since: 2026-02-26T09:26:59+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4570ae06b8ad61194283284076493ee1","sha1":"49664b96846ccfc818cf2dbb254d1e88a9f80080","sha256":"fe94ea56b20d7c1b1f1822d1f8c4033e576bc98c886881a51a52e6b5601b2cc1","sha512":"f639b70d1d94856da07411783f7e6bcb653d0ba03111bd072a6235e923d4622ae84e1b496666bf0a503b24f05c474d7e8651aa1447986760f4d8e4a68995ec0d","ssdeep":"96:wPxQNjGPj5YZFIua0lo616bJ5XWq65F7UIcGcYafN+FyXl8fUFi+n91Mj/HbuhC:wPvj5YZh5NyNWq65F7UhfBiiM/HbuhC","tlshash":"f2e173eb66e475e48a40eb90d9272c65f19f247e7f338390c340d7a1a6a44f84f4e8d8","first_seen":"2024-12-31T04:55:51.407987Z","last_seen":"2026-03-14T07:22:16.736618Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/holdandwin.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/holdandwin.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1193\r\ntraceparent: 00-ff0f5d4ad7c186605958a1dea7e67cee-9dfcc67da98f6ac3-01\r\nlast-modified: Mon, 25 Nov 2024 15:44:32 GMT\r\netag: \"4a9-627be9be373f6\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e6b24f8e1304a6d30fcf66915302f8e","sha1":"fd521e2f3e992e8f4421212496441e288ed82588","sha256":"d1d27a4fa7dfa49d65591ad727ea33e2739418dd6975b6cbbe0844e03101d179","sha512":"5e97f4c5fb96dd6b29e3a7affcb7bd03c2bd4d5def50338d59a8d5e83605978bf6b8d10daf1c33c4d973ce723d9d6f5fd656af52ad7d79052e83abdf134e983a","ssdeep":"","tlshash":"8f21cbf7e3584bc1c1038342f53aa8b1803f587cb3e58ed580797de28114987ca88481","first_seen":"2024-12-31T04:55:51.414787Z","last_seen":"2026-03-31T00:45:46.283415Z","times_seen":58,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com/shield-fp/v1/api/web","fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","domain":"csftr.com","tld":"com"},"ip":{"addr":"172.66.43.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csftr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 01:34:31 GMT","end":"Wed, 29 Apr 2026 02:34:13 GMT"},"fingerprint":{"sha1":"11:89:14:E4:C0:DE:6B:33:22:2C:E7:6F:0F:F5:DC:84:88:2A:33:FC","sha256":"3B:C7:C8:FB:9D:DF:F8:60:5F:77:BF:74:D0:4B:B2:B2:49:20:5F:EF:7C:CD:25:EF:3E:8B:02:4C:82:C3:CB:67"}}},"request":{"raw":"POST /shield-fp/v1/api/web HTTP/1.1\r\nHost: 5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 27256\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":27256,"data":"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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://leon7772.casino\r\nset-cookie: shd_persistent=57e61100-d70c-4bf5-83a8-2c627add489c; Path=/; Max-Age=63072000; HttpOnly; Secure; SameSite=None\n__cf_bm=6VTZGdv1qwgHsqrh7Sbn34f2Arpu29ZuF2LEfY0YHic-1772667255-1.0.1.1-9hkBz9dWCfEYC7kvl4YEHp6VYwxcvneRaIcCqzSoRMypjU19JRnTFXHuU5X21Ry2smeI4wklP0rAw_PEVEWbnp2qSUs2c78JrFYXb.1.TGw; path=/; expires=Thu, 05-Mar-26 00:04:15 GMT; domain=.csftr.com; HttpOnly; Secure; SameSite=None\r\nx-request-id: 0cc322ab-d4ed-40aa-b0e5-bfc20415733e\r\nx-envoy-upstream-service-time: 14\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d74b0ccfb5432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"24949a1e9a1d5ed9b0c272c47883822f","sha1":"12bd574afcec58e5f014338259fdaecc2cecc082","sha256":"a6f19dd3a9ec1a8fdb28f89e8d3080a997b469a512bdaf9f4b43adbcc570929d","sha512":"decfad8a1a652f6be32223e777e59ef715ea86d002e4475d3ea4fb085e5f2ce0372b642b6aed20c1cf09002da4a1d4d8347099f6524fdd02d56a8064e4c6b065","ssdeep":"","tlshash":"59f0ab8807d8287ac1738356a2083ed07b7a047318c8304ccc7e890c28d76c2716861b","first_seen":"2026-03-04T23:34:52.584911Z","last_seen":"2026-03-04T23:34:52.584911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":63,"dns":42,"connect":1,"send":0,"wait":75,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.DInlJu0p.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.DInlJu0p.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 856\r\ntraceparent: 00-d2e7b45fe46d08c240062b61dd2d5172-71a39ae15df9c8ee-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-358\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 7688\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T21:25:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1866,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1322)","md5":"c3412bb20341ab2b5d11547b841aa815","sha1":"5037169b6545696d40214dc3e2ee48bf7872fbee","sha256":"be2ee008548e6e5c6118d90fa0290195649b6b137fe4f0242091bd719e294faf","sha512":"f0c3d0581b3606bc751ee87be3feb3a7779b98faa2fbd770005e1beb5d1b3f23422ce91a5868d9aeab8cd43ceec6539d7604a744102fd54ab125e645b2458fc1","ssdeep":"","tlshash":"91316609629295754aaa18ed815a3721b321dfe1312cc5e1e0ac7c693d61813ca1bfe3","first_seen":"2026-03-04T23:34:52.521498Z","last_seen":"2026-03-08T12:35:27.995806Z","times_seen":4,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":186,"dns":31,"connect":15,"send":0,"wait":8,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 46\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"metricType\":\"VUE_APP_LOADED\",\"value\":\"3168\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:06 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/spinomenal-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/spinomenal-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10323\r\ntraceparent: 00-5aa32e9aaaa20c4868f621625ca0fa69-7cdd087aeda3cdbc-01\r\nlast-modified: Wed, 30 Jul 2025 15:44:05 GMT\r\netag: \"2853-63b2765099182\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:56:11 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 562434\r\ncache: HIT\r\nx-cached-since: 2026-02-26T11:20:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10323,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9e5ba03c64a51d9e7cd49527da4acfa","sha1":"b839fd267d3bf355653a70fab7051e523d397ae4","sha256":"6d2e5253bee63c8aa0da5c82a9107c0461b64bb28815a3ff208ce374a1d8e858","sha512":"d9c7057aab9a42a4f47579f1f8fa112998be456df6f69c9e1c3d342c915f0a3f4b09614f022f1bbfb2e871cede396381b45d45b2f063923a1e30e347f026add2","ssdeep":"192:9yv4EU5WiBVLGyMTrmBtBS5iLg7capbYwiZtithAo4tMKL39dkx4CbvPD+LA:9yv4EqWb2tBSRQapbYw+8AfMKL39ipbn","tlshash":"212283ceab3647fcb000e1ecda9658743a819cf53855c966c3f86c26e8a205c1976cdf","first_seen":"2025-09-29T03:15:31.367647Z","last_seen":"2026-03-08T14:14:44.21474Z","times_seen":29,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd767157.d.m.CANN4s_5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fd767157.d.m.CANN4s_5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9e9d7049ac709752f753fec9d221f190-73cd10b88f6cfc86-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-8eb4\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225741\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19172)","md5":"5627e8349b7a7b0f754c7e852ce249f1","sha1":"b23c9d3ceea82aacf039e25bcec471c885bfc881","sha256":"5498d78c07fb2b49ccd247c3e074030acf86ff12e32bce7a8f0326bea1b698f3","sha512":"ca77e653c0b37fec263b14aa23dc96bcd5ba602f6443b6f3ed6734307943aba6f61bd3b3789827b93136658cb973292db0d6781828179e0be750e8aad259714c","ssdeep":"384:6AuOqKfvmAmiq7bWXgWE20ASWe4bNuKOJkmB0vufoXoGmGFjO5Ath0e4iXW1dGkn:6BEvmAmh7bwHU8Xgn0GWoPGFjDzaJ3","tlshash":"55f281c472d9f5e14393aa74803f910bf23a7c71145ca154e322eae57cb865a91b3f3a","first_seen":"2026-02-26T15:36:50.70844Z","last_seen":"2026-03-08T14:14:44.165706Z","times_seen":13,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:45:28 GMT\r\nexpires: Thu, 04 Mar 2027 19:45:28 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 13721\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-04T14:56:09.834603Z","times_seen":22481,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 140\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; shield_FPC=SC6gW2zj5AVKbMi70dxH8NR31d8LhlaxUl\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[{\"id\":\"0a126e59-0b93-4d96-871b-301ea5bf6ec7\",\"qKey\":\"1a804ae7-152\",\"operationName\":\"getIntercomUserHash\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"389ae14ac3cf65c180722a24e99d23c1","sha1":"35c70348c916ee49d74de10c704c90b86754dccd","sha256":"50cc9e336817c80110e21da03f71b4ab8d613213b515b1b10d52c15133ecde47","sha512":"aa4ce7d0f6b84f3dc488d7cf733e9a554c2bb20f1387a63d2feea63958d423f7d5f83077c714c84395562a74c07949450001d2364b7bf1564b0f6f4a2ae303f1","ssdeep":"","tlshash":"ccd022c2541b0c021e0099c86039f08b4a2e343608d52830d5c96e0ddccb8bc524c728","first_seen":"2026-03-04T23:34:52.58834Z","last_seen":"2026-03-04T23:34:52.58834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.CE00Zgc7.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:05.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/71c69379.d.m.CE00Zgc7.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:05 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1744\r\ntraceparent: 00-8dc6fee80e9e9153cd9f82db12f1fd89-d4e05808641ff613-01\r\nlast-modified: Tue, 03 Mar 2026 15:31:18 GMT\r\netag: \"69a6fec6-6d0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4658,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4607)","md5":"91178ec76c295b596415690a7f991450","sha1":"7926a6567497b3758f9114fe3478b2d03c978169","sha256":"865cd0cb3c76e4625edf2d191e3c44901e3986a4ff000b2b3dee72302de6677a","sha512":"982e1bd4c4a4395eb9e58462a3c291954385123f2c97e0efab33cf349efa59b4a8d9a8349d500f4b1c51c4dfc4a53341c0348d88e324128466748c692537cafd","ssdeep":"96:b2l0LhPac0uGzGtmIGm0uGz0lYLx3LyLDuGz+NaMvbrXHvSwrSA:K6LsWUi1U0YVXU+BTrqw+A","tlshash":"2da1c88e3c7e5471abef944fe1680c19ad6d0ea726554e8190ff04b727ab850e252523","first_seen":"2026-03-04T23:34:52.590225Z","last_seen":"2026-03-08T12:35:28.023471Z","times_seen":4,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/books-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/books-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1804\r\ntraceparent: 00-c5cebd4ea38ce49929d30fed77b1a3ab-c1a54e6fe28403f1-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:41 GMT\r\netag: \"70c-61bf36bec16f3\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21f4a5481d615224b3062e2bda5a69d7","sha1":"2587846cdae3aadc39f9168b4a62c4ca50cc2bb9","sha256":"049e51bec3a57f5d4f4ff4d0a592ce5a25e418fa08841f345cc7b7ba2e6b1581","sha512":"7e52fd485a521bc2683434cd1159d6d2e624c4a87916df5584f8b3224a98f683de62f7e467b9aef7cc15f4be4c15a096d049542f648653aebbc60ed70169a497","ssdeep":"","tlshash":"0b3165e94fd870dca615a7c1ad2f892bb89f28f97303cf4653c09a54b8120c4cd8ec10","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.237177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/new_slots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/new_slots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1699\r\ntraceparent: 00-ff886810f70c2c0ceef815ba06193ede-4564705c9e6c88de-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:41 GMT\r\netag: \"6a3-61bf364b9c54c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccbd6c3b7279dc7e0c3e32460b07d77b","sha1":"d8400d43aa8abf54af0ba8a052192f1f1331e259","sha256":"98596f703ec5e76243f01c178e27e944f494fbda0e8e4dacd6291739b078ac8b","sha512":"bd75a96f89454b29baf742ebe76c471f2744d5e79f44ff64051d04ae236c1f08bb4270cb34b63933232213688b0e55c798b132e0e737bb9dc69beef92b003f0e","ssdeep":"","tlshash":"8a3102f7d3a952d0970bcbd5e22ab62674a73cf77c82679442006a4432535e9c88ec90","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.270025Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/WhiteRabbitMegaways@3x-min.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/WhiteRabbitMegaways@3x-min.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 75730\r\ntraceparent: 00-80b2b068b045610b473d0a1eadd8c40e-ed346b82867cb20c-01\r\nlast-modified: Thu, 21 Nov 2019 16:37:06 GMT\r\netag: \"127d2-597dde86c36dd\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 13 Jan 2026 00:53:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 1774729\r\ncache: HIT\r\nx-cached-since: 2026-02-12T10:35:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":75730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 375x561, components 3","md5":"b077f9efe89375d9194f7311264caa7b","sha1":"126b3c80be663e7d4d2c0a963ade4b8b00c9cc5f","sha256":"0951dd5e50037de882de1eb47857e9717c613c24bed8c3ae50e033d991533950","sha512":"e991b513066f60eaabdfc3ce6e0763f989f36e9826774c2ff4bb2535d76e075ddc8feb7ded6d2a84f35d53677974c8c1612d7764cbe2b794d52f8a48c20f19bb","ssdeep":"1536:gktlBEAyaPFRZKgo0R2I++Zze1W6Hc5DINf1NF5rZ:aPInV+gMzNjFJZ","tlshash":"327302de4d1c723a68a3c8344e2ff69327aa75543ada21dc5c4a6327a0509f68e08d5f","first_seen":"2025-12-20T03:09:17.626452Z","last_seen":"2026-03-14T07:22:16.801892Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/92bec47e.d.m.Dfvbgj-f.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/92bec47e.d.m.Dfvbgj-f.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-1a366d9b48a4cb11911c1839ee90ff4e-d218002ba1f11ae0-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-5dde8\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:20+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":384488,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46958)","md5":"51f70b9bc0296249fa8ed66683ff9e24","sha1":"706f15430cb4846bea73ebb6f808164814315e6d","sha256":"909db3dfc15faa1d209620efdf44ae17df13980d95920b47a3bc83876bb3d68f","sha512":"902a0f99b263196e56aee1a40cf4c06979664b426c989eee9af1145e6981e43fe792e761bd7b5f21fe86893b52baa15b2417a8dc07fba8dce5433cf7edf9a6ab","ssdeep":"3072:brXEcLVA7lxpI0dqpHMSrfF7w8YmGfDPRUTmXf0FqzF4Q/BBO/tVDbL/:lZp9rV/8mSf0FqJ4Q/W/tRP","tlshash":"5884e68d72f426b04597b0b4b53f09327234e503340c4daabd9e12989f99714eee2fb6","first_seen":"2026-03-04T23:34:52.594737Z","last_seen":"2026-03-08T12:35:27.958839Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 47\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"140\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 17:36:12 GMT\r\nexpires: Thu, 04 Mar 2027 17:36:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nage: 21472\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-04T15:12:59.537019Z","times_seen":5118,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":115,"dns":0,"connect":21,"send":0,"wait":23,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 224625\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 480\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; shield_FPC=SC6gW2zj5AVKbMi70dxH8NR31d8LhlaxUl; _ga_JZZNGY93CC=GS2.1.s1772667254$o1$g1$t1772667255$j59$l0$h0; _ga=GA1.1.476134653.1772667255; pixelsink_uid=7ada8db4-cec6-47fe-a696-92fb737380d8; f3k2kqs7xc=92554f36c64d6a7aed4f9a7bfb6566ae\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":480,"data":"[{\"id\":\"b750d241-71fe-468c-9c1d-5903d3c147c4\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.132.2\",\"level\":\"WARN\",\"line\":0,\"column\":0,\"error\":\"[shield][success] {\\\"session_id\\\":\\\"a49ca500182211f1ad138d9c5014327c\\\",\\\"helmetId\\\":\\\"5a96d223bcf50629a1d9fcb2c4c3934f\\\"}\",\"file\":\"\",\"url\":\"https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\",\"ts\":0,\"stacktrace\":\"\",\"payload\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7939af424be5004615803140ab0a664c","sha1":"25552c018fb94f9e0a9ceab0b0f6d7a4d75106d4","sha256":"593b199ca7745d6df4473bf6f73c8a79d38ad66e46ca703fce1a61b59a14d019","sha512":"d9b28a7c18aa1c850607f362cc7c375a6b47e6cd5ae67ab9bcc072ad55ce4c03f94d575b825822b0792f8dc6cf5c25c81e57932181617998d387ae3e36207478","ssdeep":"","tlshash":"8fc024c03d4c13041c04c10c7331cc007774701004d04c0cc3d571004045cfd1fc7411","first_seen":"2026-03-04T23:34:52.596875Z","last_seen":"2026-03-04T23:34:52.596875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 42\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; shield_FPC=SC6gW2zj5AVKbMi70dxH8NR31d8LhlaxUl\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"metricType\":\"GTM_READY\",\"value\":\"14108\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.99","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 30 Jan 2026 13:11:06 GMT\r\ncontent-encoding: br\r\nserver: nginx/1.28.1\r\nx-powered-by: Express\r\ndate: Wed, 04 Mar 2026 23:34:14 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"246f-19c0f075a10\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: XCOAnrfLJfUFz97unBRQUYw_PoG6fG6Kf6ioUe77YauKAXEVUUVvqw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9284)","md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":83,"dns":82,"connect":1,"send":0,"wait":23,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/penguinking-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/penguinking-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 10474\r\ntraceparent: 00-e5d1ee3648e6a7d6579e90af688c7dc1-192251afab2585e0-01\r\nlast-modified: Mon, 28 Jul 2025 13:23:02 GMT\r\netag: \"28ea-63afd30ec847f\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644384\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:34:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":10474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a520c53a4c4f807f2f9772bc0fc238d2","sha1":"2737e36e228a2e4582fd2f3045965179cddd7c1b","sha256":"ea55ca4625763943293e65791cda181524d21ed24cb5ed645f87272ac3e695b6","sha512":"6e278c8dbb8a8db474d7be4e3e83e9a2bae361d13bdfc52c77e807d5243194b1d7c8df9244db5dfc4f3b92b1459d4c52329ec1b4cacb46c1370d612deb2328e0","ssdeep":"192:UmBDeKCq3lkvYil5RRsjzobVmfMCtUtZyWtjk9PJorqPe:UH5/eMCESnPe","tlshash":"2122a4887367d6f8f40eb1fa53164879b54baae83c40e0e9c7b62c52f25451c2e06cc7","first_seen":"2025-08-05T20:12:02.96847Z","last_seen":"2026-03-31T00:45:46.173608Z","times_seen":38,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/11328c22.d.m.DFwhx_lW.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/11328c22.d.m.DFwhx_lW.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8805\r\ntraceparent: 00-f8b84697d98de65184152d26657c0dfa-f3354d46a11f8f52-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-2265\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":23637,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23586)","md5":"2e4f16e9800947e4fbc92dc7825541f6","sha1":"85a4ca302ad84ee7039995d6415dccf16a6e436e","sha256":"30baecb285bdedebf675e46ac1ec37e70451ca98290d1fa00e1261014f154acc","sha512":"0ce12d19806207b1d295086e5e18a610bfc6c36ac784abbacb2c6a2dfd675b488140e250f9c0a4e3930ded793dfd5c868ad6f197f4598cadb9ac173333633265","ssdeep":"384:CkQdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2O:9QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRF","tlshash":"2db2e8e93282707697e60ae5807b1106f2761dd6344e94d0b02ca9e73c33d9d92bbf6d","first_seen":"2026-03-03T22:41:34.974246Z","last_seen":"2026-03-08T14:14:44.204844Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/table.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/table.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2051\r\ntraceparent: 00-431f3aeea33b8771d970e3f159e3014e-6c445ae3bd4b88e4-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:09 GMT\r\netag: \"803-61bf3666cddb9\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4739eca3bf889f229641c474aca34a5a","sha1":"275e4368643608ce9466984958ef31f8884495a0","sha256":"533cc1795d0f8c05ba575368c4a1d156021e74d1e72c1e48f6a54c1f9c8c7b06","sha512":"7f012c42f67d4577d02227fa0e9ef5d7cd4be62762f17a67edd0589e4959b4d65ee617e75384af07749832ba09c33c27bd402a76adbe8be5c22c2b3778525da2","ssdeep":"","tlshash":"614154f2e3d480ecce07d360d937b8a63a6e5cf9c79b8764a041f680b05969549c8d84","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.242854Z","times_seen":62,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/drops_wins.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/drops_wins.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12382\r\ntraceparent: 00-18bf2076d462702d4b75411bc2cea9cd-edf4b9e84d47e0c2-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:50 GMT\r\netag: \"305e-61bf36c739963\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644896\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:25:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c33bfc0a66981351db0da8fb6c69da55","sha1":"55b49d3376218cce5808e9f5a434b6f6d99d62a8","sha256":"62b722eca58786138391eee4ef1d2d49b184341f1a4ba35c5513b40af52b5c18","sha512":"6659c986c63d1114a99119c8cb1414dafeea1db8e51327649da42936514ea4a0f7176fe1e0abbee2cf0705aca3c5fccb7f61aa94324920a61bc50fc58efa3e0a","ssdeep":"384:MslV4bttY5l8mzagkwtzzVS4klR+VHWZWFvsC:vWt2l/Kyz+IF","tlshash":"824285f7a2e8b1e4e047e7b0d83295b1f65f38ff3faa97854294dad46714198848cc50","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.205158Z","times_seen":63,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f927d477.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f927d477.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-5844b1b780b64b5ba34af008697d1081-be802e9a71277351-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: W/\"699d81fa-17b3\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225743\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"7f280d99c0cf5954311d1cf8af8185da","sha1":"1a3a7096eabbd628a3dd645e4f276580adad4dae","sha256":"8de8232d730813112edfb364db069d06378a4a1dd2b83248734b082e9d80f872","sha512":"8a3ec8eb36fa8fa6d2e967b19637c9a74d181c0cc80107cd6b79c1a7ce81d85c96662c42a0f0ee7ab20b458fc7a3b0c8de2e782fa98cc33463db7e75d1a1a258","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZquy:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJan","tlshash":"d9c1d6a9338e76404277147d259e1085b07c6884644d182af5e8f87a3c65caa4fffefe","first_seen":"2026-02-26T15:36:50.749396Z","last_seen":"2026-03-31T00:45:46.275763Z","times_seen":17,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/39f0c6ef.d.m.CXnY58i4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/39f0c6ef.d.m.CXnY58i4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-1bb18c6ce1dd27fb7b06ea51bc151c63-889cf0cecd781efa-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-139a7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1eb8ae2d3829c8eee5a4f42a3371e35","sha1":"d89123871245e61996e0034dfe49e01fa928804d","sha256":"6ecba8b2e8c9c35813459c797adb31c9b3c9f44b9ca582b33e3af68d4f4d5908","sha512":"64a498c404181cd54c1705904069b4fc83c4e0b16c4dd3dd1dbdbd025d6a2ab04da06837167a88ff9b4b53bfee7d02e75c692a84b8c1d5b4e22e1e5f0098190a","ssdeep":"1536:i+sso3D0S/M6WTvLgzI/Q1VwPvIY5qvjV0VmqjyPW/zNdXHR:1j6MnZlvIY5ap0Vmq+PGNtx","tlshash":"b7732af93363b57293ee21e6407b0402f3ae68d9284d045cb2a5aedf397541850ebf79","first_seen":"2026-03-03T22:41:35.251783Z","last_seen":"2026-03-08T14:14:44.126933Z","times_seen":7,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/megaways-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/megaways-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1021\r\ntraceparent: 00-2b7f910d04ee2281ca2d53f3b21c6afd-f9af83c28204217e-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:33 GMT\r\netag: \"3fd-61bf36b728ef1\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644054\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:39:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cdbb1a91e3cd4e2e7727c66710a767","sha1":"67fd4051cf6236f406baa5b90f6ccbe5825867e7","sha256":"9f37e4d79b64613286fbf83e86ba1a2e41279be0c2ccbd076ca5b50f9386a8b5","sha512":"e582d46b1834fa9c5e03687e9bdd314ed39cafa5b632828c632a048f39e8215927330d17c810270671597a094f563bf7c0a2d5f1da788468d3064afac762ad93","ssdeep":"","tlshash":"c111abf7a1e5b6c4a60dcb71d926e5b41e1f38f93eda048293801ad0bda02719c8dcc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.152577Z","times_seen":61,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1457\r\ntraceparent: 00-235a6b2a0b64bebcf5f2b174574307dd-2a5022e59345a49d-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-5b1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225743\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/voltent.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/voltent.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2616\r\ntraceparent: 00-89ccd9dcfe27ce76e41aebe60cc9dda9-37d032f70e13f16e-01\r\nlast-modified: Fri, 27 Sep 2024 08:08:08 GMT\r\netag: \"a38-623155afeccb3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:29:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 539518\r\ncache: HIT\r\nx-cached-since: 2026-02-26T17:42:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c0c3160ad74409e6974c3e9bb3770d0","sha1":"209269e197095ef1eecba4de5a8c897560ef1774","sha256":"e1fb8d516b3447db6430ab37aac407636ed11b2247f2b6fad5bfc2f9917897b8","sha512":"6934594f179d876094a006d4a8da10f767239c611af93891c73403adfc9d753b4268605a0f7971ff7bec8474c56933ccb112895af99df8b29e971cc638981d03","ssdeep":"","tlshash":"2851c6c8e738d120b04173a9619a94b83b5298f23f02dc69d78a2eb63445c5f5ebddc7","first_seen":"2024-12-31T04:55:51.591143Z","last_seen":"2026-03-14T07:22:16.726331Z","times_seen":39,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/netgame-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/netgame-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5730\r\ntraceparent: 00-22aeb0d36c03d2ed4630e9eb5b4db7d9-b303be2cde6bf24f-01\r\nlast-modified: Mon, 30 Jun 2025 15:37:55 GMT\r\netag: \"1662-638cbcfc7eb44\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 25 Dec 2025 11:15:51 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 797262\r\ncache: HIT\r\nx-cached-since: 2026-02-23T18:06:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a26d9674836e436b171fe0c1d68030c6","sha1":"7e0996c8b6691f29c31abd52c180b0344d44b175","sha256":"52d8a0ab7f73fb598bc22a67f2228dcd9d443d834a2f63eb0b68e4eb79f258b3","sha512":"91c69c03407c3c88716c7aab5f7ee46ccfaf06993fa1a46184f2fa178998e13e14fc3c12e463cd14ce4df2143aa5399142ae2dcc2c7158976a4726b608df61ee","ssdeep":"96:pPVS6s7ncAtpcodzq8mQDTxTq63GTFK5akQwZobB44JfHAZbNU0:p9Cpdzq/EW63GJK7QwmbtHQbP","tlshash":"2fc18688736482f49544df79c72e6c3e187638e87512929087c61d5bf8868ce1d7afc7","first_seen":"2025-11-19T19:15:03.661444Z","last_seen":"2026-03-08T12:35:27.96371Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-2/wa/collect","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:14.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\nContent-Type: application/json\r\nX-App-Version: 6.132.2\r\nContent-Length: 42\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK; ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; shield_FPC=SC6gW2zj5AVKbMi70dxH8NR31d8LhlaxUl\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":42,"data":"{\"metricType\":\"GTM_READY\",\"value\":\"13999\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:14 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=d796s9\u0026event=regstarted\u0026site=leon7772.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.17","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=d796s9\u0026event=regstarted\u0026site=leon7772.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 23:34:15 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=7ada8db4-cec6-47fe-a696-92fb737380d8\u0026\u0026timestamp=2026-03-04T23:34:15.513Z\u0026fire_id=1772667255513-bd9bb326-04c6-4d2b-a57a-0055332e7b50","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:16.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /ul_cb/pixel?id=154038\u0026t=js\u0026sink_id=7ada8db4-cec6-47fe-a696-92fb737380d8\u0026\u0026timestamp=2026-03-04T23:34:15.513Z\u0026fire_id=1772667255513-bd9bb326-04c6-4d2b-a57a-0055332e7b50 HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ncontent-type: text/javascript; charset=UTF-8\r\ndate: Wed, 04 Mar 2026 23:34:16 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772667251733\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=476134653.1772667255\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026sid=1772667254\u0026sct=1\u0026seg=1\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026_s=2\u0026tfd=19583","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:20.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1772667251733\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=476134653.1772667255\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026dl=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026sid=1772667254\u0026sct=1\u0026seg=1\u0026dt=Online-Casino%3A%20%C3%9Cber%204000%20Spiele%20%26%20Schnelle%20Auszahlungen%20%7C%20LEON\u0026uid=\u0026_s=2\u0026tfd=19583 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2164\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2164,"data":"en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772667247894\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.event_label=Country%20not%20allowed\u0026ep.first_theme=DARK\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026ep.reg_form_name=default\u0026seg=0\r\nen=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772667251731\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.first_theme=DARK\u0026up.experiment_id=undefined\u0026up.experiment_split=undefined\u0026up.experiment_name=undefined\u0026up.experiment_status=undefined\r\nen=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.132.2\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon7772.casino%2Fregistration%3Fqtag%3Da34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\u0026ep.previous_page_url=https%3A%2F%2Fleon7772.casino%2F\u0026ep.main_domain=leon7772.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1772667251731\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=de_DE\u0026ep.first_theme=DARK"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://leon7772.casino\r\ndate: Wed, 04 Mar 2026 23:34:20 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:171:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:171:0\r\nreport-to: {\"group\":\"ascnsrsggc:171:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:171:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/444dbad9.d.m.COHDy9Qf.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:03.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/444dbad9.d.m.COHDy9Qf.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:03 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 217\r\ntraceparent: 00-af3e236c76b1a9a24116de7aabae8ccd-f264395c0544b2a4-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-d9\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 225742\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-02T08:51:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"a0517c72f11103ed464859912922a96a","sha1":"bbd225f4fc02e62620c85627241b0a75276b3bf3","sha256":"c45395687da9b08de31423ae7477024b2f1b8751f1f081192491e39f5ad431ff","sha512":"5b8f8b30d31dae0d32660fc26e31b2a913dd919e8efa3d4432c51c02971526004a35fe58ff6bf96f96cfa369b52204df8e1272b0b0b988143282ebdc300f6411","ssdeep":"","tlshash":"f2e07db5457b6ff29b9a4c74676cf685ab29609137064484600c91095492f93c3ffc67","first_seen":"2026-02-26T15:36:50.591363Z","last_seen":"2026-03-31T00:45:46.151709Z","times_seen":17,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/pragmatic.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/pragmatic.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5939\r\ntraceparent: 00-e15bcd8827177374fb5d766bb75ec828-8591baa12d979cd3-01\r\nlast-modified: Fri, 19 May 2023 07:56:27 GMT\r\netag: \"1733-5fc074213b5f4\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:29:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 539518\r\ncache: HIT\r\nx-cached-since: 2026-02-26T17:42:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9fb8da17ae46b9db5722e63c56429be","sha1":"efeeb0922c67626b63bc2db6eb3d017f472d1d9c","sha256":"6148bfd444d31f82201b8758cb4efbea9058ab1a7982756389d1def22f7aef73","sha512":"f1a06898407dbbf8a10a296e18e695b6248fb46b0e8d45ee072963f83124e18e261f4888a212cf05738227212b7a237e714a27efdb4d4b5463fe36cc8cf12058","ssdeep":"96:oGeXCKmzTjHqsVd9J7zWjTuI842motCyfE3iPfSm7Wf843CyMWQSZyP/6UaoXX2f:wXKjH93L7kuI8421tZfOiH9WHRYPXX2f","tlshash":"01c1748c6f4145bcf040e6feb70268e8288aadf63953a994c3690c67a55249cdf4ccd7","first_seen":"2024-12-31T04:55:51.583283Z","last_seen":"2026-03-31T00:45:46.145408Z","times_seen":50,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=476134653.1772667255\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026z=458925140","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:15.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:39:43 GMT","end":"Mon, 27 Apr 2026 08:39:42 GMT"},"fingerprint":{"sha1":"ED:13:E6:A9:AC:5E:48:95:A0:23:B1:F4:76:2F:A3:6E:95:4E:B7:09","sha256":"21:68:42:FB:56:73:F8:86:34:2A:C7:2A:2C:BB:10:DE:09:9B:FB:20:DB:72:B9:F6:10:76:71:B5:06:27:89:FC"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=476134653.1772667255\u0026gtm=45je6340h2v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~115616985~115938465~115938469~116024733~117484252~117625637\u0026z=458925140 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Wed, 04 Mar 2026 23:34:15 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T14:48:41.416319Z","times_seen":763370,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":48,"dns":2,"connect":7,"send":0,"wait":21,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7f245f3.d.m.ByprolQo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7f245f3.d.m.ByprolQo.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 47873\r\ntraceparent: 00-023a04eae61f9698381dcd5a34136ce3-cdd2c4344ddf1dc9-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-bb01\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98921\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294302,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (42193)","md5":"e010df91eedb42b28f42e8dacf44d321","sha1":"1d443c117cfa6797286e0dd132f2344f46b468bc","sha256":"5f5d5b0fd8ecea4d8222135a2c3cb4161e5420ce4f9845600d05bd1d929d2b9b","sha512":"848f1f593570adc359ef370f45d71e463035c1583e1c45a7ebdbe8a68f60348df3196749d7b6fe425169d2d3335462d02220357f4e4054a1bad528e2703e3395","ssdeep":"3072:o4SrOVJToUQ/zN+5WNJg/OE/nXUBL5uz2opBkdK8brDou3km3:cOVJkZ+5WPgb/nXUBL5uz2opBpYrYO","tlshash":"70548514e661adfb76b0391e722a67e2603286143f51c27201d95b793f2f84dfa270f9","first_seen":"2026-03-04T23:34:52.611633Z","last_seen":"2026-03-08T12:35:27.978533Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.C61TuaTh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.C61TuaTh.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-0e7ad6b7b424c928a2e610cb285d1ee4-6fdceb05ec33bb19-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:58 GMT\r\netag: W/\"69a6f20a-12b9e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 98922\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-03T20:05:20+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"8855ba100fdebc2cf6c766ab044303ed","sha1":"9d96a1a65f51283656c671012fc8f1cd4e8e4cb3","sha256":"0ca45e486284e14e52a0e829feec849fd6d665edbe674dba126363cf6c354fc0","sha512":"b6103af56d3c75f40c553e4b1c3daf80399fd86b5553421571c6400da55f73f9b0890af8c2bf26a299976f36c53a7f4dde3c69ebe0b17f43752736b10dcf8fce","ssdeep":"1536:8Xm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPp:82YMGB2C62PmQJDbPp","tlshash":"717363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2026-03-03T22:41:35.077304Z","last_seen":"2026-03-08T12:35:28.01871Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/flowers.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:08.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/flowers.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7120\r\ntraceparent: 00-e9553a78b9caaf5ca8326a6d3ef74ddb-3379e3f8c86f3ba8-01\r\nlast-modified: Tue, 24 Feb 2026 12:29:08 GMT\r\netag: \"1bd0-64b9108aa9978\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 01 Apr 2026 07:56:18 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 229070\r\ncache: HIT\r\nx-cached-since: 2026-03-02T07:56:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":7120,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b75c321b6bea47edbb9f15dedf36680f","sha1":"555ac2c08234e6e16fa55b91d61de97a646ef2f4","sha256":"5fd50521589e34f72402d6bcb5824ed75c28a89786418228fd189f5429da5a53","sha512":"0feb8513f632326cd2d4c844ea74e21ecd0565fa3433d4ceeee6237900caf5796d82725e3a54adfee7a1dac8121014209345c9f609b46e5e0ee97be9869b3945","ssdeep":"192:Vy1LHAYC8NuEf3gzncwUSwmeoR5FBInz/yyqX1:VOLg6NuEf3gzco5R7BIel","tlshash":"cae1e9f1b1d876e4950bef94dc370825ba2f3cfa7f9682d982d0dcd446650e5c988c85","first_seen":"2026-03-02T20:05:03.612523Z","last_seen":"2026-03-08T14:14:44.227163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/3oaksgaming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/3oaksgaming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8811\r\ntraceparent: 00-3764cb0fab447e0c8e9b22786bc75bb6-a8003c777c6e7438-01\r\nlast-modified: Tue, 10 May 2022 10:18:38 GMT\r\netag: \"226b-5dea5a5ee2249\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 28 Oct 2025 11:53:05 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 644383\r\ncache: HIT\r\nx-cached-since: 2026-02-25T12:34:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8811,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e28b306999ed834dacf69c8965baddb","sha1":"e031bce7733da766b65c2e100328a86fa6783922","sha256":"72e0e0c5163c21522c3edc0ba452c797de75960afebe62fff314a3c0ecf00aa1","sha512":"cfcc55b5213047e77da35b8951655c2ce7fdece6984f9b6d3021f9c187355dfbee7d4e02b714c23a4b251ecf8076ef79d5e894e6e08c6133dd18e3ff25dfd450","ssdeep":"192:O7eR67oMkUbQzbCJN3R2DXedKi4L0X1KSv/7DiqQ26tG:O7q60Mk6Qk2DgBcSv/7DiqQ26tG","tlshash":"6802e8d47b38c6f0f049e3bdc70a40b936aa78ebb852c9a4d3b46d1fe49502c59194db","first_seen":"2024-12-31T04:55:51.589611Z","last_seen":"2026-03-31T00:45:46.155858Z","times_seen":52,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/api-1","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon7772.casino/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.132.2\r\nx-requested-uri: /de-de/registration\r\nx-app-language: de_DE\r\nx-app-theme: DARK\r\nContent-Length: 316\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; ABTestSeed=5; qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8; qtag_rfrr=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8-null; ipfrom=91.90.42.154; x-app-language=de_DE; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":316,"data":"[{\"id\":\"20350001-dcec-4d3a-ac0c-896e57378206\",\"qKey\":\"93031556-171\",\"operationName\":\"getAssignment\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"05bb248f-f632-4e6b-8bca-091227a8f4ea\",\"qKey\":\"1a9cc015-159\",\"operationName\":\"getCmsContentTranslations\",\"variables\":{\"options\":{\"key\":\"WEB2_REGISTRATION_CAUTION_V2\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:10 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: ab_experiments=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzcGxpdElkcyI6W10sImlhdCI6MTc3MjY2NzI1MCwiZXhwaXJlZEF0TWludXRlIjoyOTU0NDQ1OX0.bheCoJjEaopcOjmRsbtYuWJBj0s-Yy8k0lhFAvxa9L8; Max-Age=2592000; Expires=Fri, 03 Apr 2026 23:34:10 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":736,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"aca33077014d0dd3a3be5d58c2fcb732","sha1":"a81e6d048972a807ddf645094d8d3cf87270ac06","sha256":"a62396e35f7b771bbc11ba4ca663474c6aca6f14e64ee25b05db9789aabbecde","sha512":"1538ab03582d328514222022606f405e8e02f051be11c0973b64f2fd24b36ef332c9e88eb0b9ec723aed205fb14a5dd2d61bd72bac6a4e740205c819534ff82a","ssdeep":"","tlshash":"f3016535b50b48070e84c1c97e28d42ba2a1f02690c4e125278955099ace27ef797569","first_seen":"2026-03-04T23:34:52.616074Z","last_seen":"2026-03-04T23:34:52.616074Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/510c96b3.Cej3-qGF.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/510c96b3.Cej3-qGF.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 1305\r\ntraceparent: 00-3689aada9c9b8584bc853ca5414efec0-1a7391e91819e163-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-519\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 639968\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:47:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5313)","md5":"33dc465596a41c508994344c0fd027b6","sha1":"d41fdf2a22d8afa3d2155b5a29bf06522757607c","sha256":"4dc0d05881c887f4fe7e9be5cd642dac6138178e515aecdddb046fc16dd20675","sha512":"399cdf917b4e6f3ef3746e5d65114ebad72c9a869975db1af78187819b02825bd5d842543030e6035d1ea884d7fe8374350c359dde5a638e8bfc8899f8a90daa","ssdeep":"96:Zy7KC0+csvyz1CW6PjvdStPecRdpxvo0FYInz:Zy7KClyz1C9PTd8Pec95o0FYInz","tlshash":"69b1bfb7b5a0312cf5320d03b4444b8b7d84ed0bbbb29d85da67ed298e351af3a601c5","first_seen":"2026-02-26T15:36:50.753547Z","last_seen":"2026-03-08T14:14:44.174132Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7ad78725.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7ad78725.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-228ce738e0d895e916df9c3222cf4714-c77b5c5597313db0-01\r\nlast-modified: Tue, 24 Feb 2026 10:48:26 GMT\r\netag: \"699d81fa-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 639968\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-25T13:47:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a1c6617b.DIHKFs4j.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:02.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a1c6617b.DIHKFs4j.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 9586\r\ntraceparent: 00-f9ec78c60e6b8e2a1ac3cecf92ebf2f3-bcf22827305844c2-01\r\nlast-modified: Tue, 03 Mar 2026 14:36:59 GMT\r\netag: \"69a6f20b-2572\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: sto5-hw-edge-gc20\r\nage: 51670\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-03-04T09:12:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4f99e9bc15681bf22f989eab7417d165","sha1":"80ce9d4d1d582f3ea1c9c04d9c4988e9f8d4d74d","sha256":"ba279d66ed274ff87c8753824af1dcf0dd904a2db66f301e355d7dcabd9b046d","sha512":"8242c28095d430c284ab98f67c4b45edda1fcdcfd79ac5f5fc8d7bc3fb871749f96da053200a31e6604e9055eb9314fde294840d1fb648ab534df59278472617","ssdeep":"1536:YBlS6q6LnH7uQzI4JLcagfcgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:YBlS6q6LnH7uQzI4JLcagkgPjP7M10bS","tlshash":"d77344aecd50a37bf663adedc3e5ba48734e6c038c921a36d5b212bc42d6291d355f01","first_seen":"2026-03-02T20:05:03.703577Z","last_seen":"2026-03-08T14:14:44.255042Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","fqdn":"leon7772.casino","domain":"leon7772.casino","tld":"casino"},"ip":{"addr":"172.233.131.184","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T23:34:00.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon7772.casino","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Feb 2026 14:03:43 GMT","end":"Sun, 17 May 2026 14:03:42 GMT"},"fingerprint":{"sha1":"B5:06:71:C3:A8:E4:A9:5C:7F:12:F4:1E:8A:51:54:54:8B:52:2C:5E","sha256":"3A:FF:A3:B8:DD:F1:53:CE:00:45:66:08:E1:FA:23:A5:4F:14:2F:74:C4:87:1A:6C:65:5F:1C:85:60:E6:59:4F"}}},"request":{"raw":"GET /de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8 HTTP/1.1\r\nHost: leon7772.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.27.5\r\ndate: Wed, 04 Mar 2026 23:34:01 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFsOcoq0xfjTPdeOBA+C2ClRWvmbbNfALcMN9fvVqG/Sa880xlbzflIdOuxjJwnnhiUSvdrN3J5qeImXPgBy4G8udp0Xg==; Max-Age=2147483647; Expires=Tue, 23 Mar 2094 02:48:08 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.DInlJu0p.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23069)","md5":"bec24f57bd4b50973703c0cd0bbf8006","sha1":"3a562fd0a9ab35a79d02d9af730556341d781c88","sha256":"82e7b7c52a26c4c2d2c6e52a8df7ffa39224df312c4239f740ad37e2213ceb66","sha512":"85c5fef1e228fabd08c151f208fd2142aee9fc80c7493cd254eb502f186b36c0258e88b72f8aac9733cb7d9f3120cbd3de44fd8c4eeda5eee35803d5d62f2b5d","ssdeep":"384:Le5j1YNdNU1MfOjDB6oQlGdD6Sxm6uaQtGokYbMHuAO5sz2J3SBCW:Le5xYNdN5gDBy2D64m6vokSMQs6JE","tlshash":"c5131bfe1f1486f9fb12a3ffe756204c6a09f467dd428d74f26c725877c6a9048a2182","first_seen":"2026-03-04T23:34:52.620062Z","last_seen":"2026-03-04T23:34:52.620062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1558,"timings":{"blocked":355,"dns":39,"connect":151,"send":0,"wait":848,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:04.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon7772.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 224620\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T14:48:47.330717Z","times_seen":62274,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":73,"dns":4,"connect":8,"send":0,"wait":8,"receive":11,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/playngo-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon7772.casino/de-de/registration?qtag=a34309_t39258_c167_swl6o2pdrmdq0l7ogj0hefgj8","date":"2026-03-04T23:34:09.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/playngo-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon7772.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Mar 2026 23:34:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4058\r\ntraceparent: 00-09f8023f8b5dc08e17853e38e59b4d3d-648089e26d067448-01\r\nlast-modified: Wed, 05 Nov 2025 12:40:59 GMT\r\netag: \"fda-642d842b1b8f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 08:05:28 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: sto5-hw-edge-gc16\r\nage: 312244\r\ncache: HIT\r\nx-cached-since: 2026-03-01T08:50:04+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd546e671acbd8904107f0a12ac564b7","sha1":"594c51208445a8a0350a0685744afddb7e20d7f5","sha256":"1dece0fa8fbd1f198d0c430a18a735fd44114f6d7ca896870682f2287a712e0b","sha512":"57024c021efc18027ef79d5143379a6d622195a79ce5eaf7ebf2465538ac73b7dd63b92b849158573da21df26d49733ac6e32c601b2517d9560042a1bb825ec6","ssdeep":"","tlshash":"e48142deaf5896f4f149a3b9661ad07bbf4305e56f818968cf140f07b80489c5ca84eb","first_seen":"2025-12-03T23:02:23.146767Z","last_seen":"2026-03-31T00:45:46.1678Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}