{"report_id":"2c4b0703-fa4b-4ff9-8ac8-6f4ae2fe50f8","version":6,"status":"done","tags":[],"date":"2026-04-05T04:43:35Z","url":{"schema":"http","addr":"crowncoins-casinoca.com","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"http","addr":"crowncoins-casinoca.com/","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"title":"CrownCoinsCasino - Play Top Online Casino Games \u0026 Bonuses","dom":{"size":41024,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"17d650c290e7eb9a228a98221363c2be","sha1":"b0a0118f6c0e92d0b92a62d9a637f9e0de419d4b","sha256":"bc127f395fc5257b8993aa0fd323adec7df214da3ca2deb177d4b25d0a4acf94","sha512":"5648305b48468b3d5f37be49802b94bc047e7984ebff98ed17e9c2f0336433ac13df0bcdff8514cb4074c95a541c7c0de180b91c34bd65ee76c4833b7e6b83a9","ssdeep":"192:1rYwMGFTTq9ZYlRPEX0LymOHdZtJNMeU0AKC2EYKGaUvKTCUpfykJy2xUjSVx29v:i6DKoT/4Fjt09+NaGXjxXJmO","tlshash":"6e03b61ae5f317555423a0aa2feb57093b64c007d50fce193b9d22c89f85aee88e374d","dom_hash":"domhash8fdd70690638800b5d3db022ec185fec","first_seen":"2026-04-05T04:43:41.583771Z","last_seen":"2026-04-05T04:43:41.583771Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crowncoins-casinoca.com","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T04:43:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":5,"received_data":176667,"sent_data":2802,"comment":"","tags":null,"fingerprints":null},{"fqdn":"crowncoins-casinoca.com","ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":13,"received_data":10246849,"sent_data":5181,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":22159,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-04-01T22:09:44.512402Z","alert_count":0,"request_count":1,"received_data":38226,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.4.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"crowncoins-casinoca.com/","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a7029a4fd3f8d1487781fd0e1535be6","sha1":"73da6447516098601cfb7176c53fdae51c34bbbb","sha256":"1c4d92eda77786b9092892ba4cb8e1dc0da041f51c556c85f68988583a5cebd0","sha512":"d13b976132031089218214bba9b7e38839a0954c3c90b54f83618848eb816bc52dc1ddd4b0f3947e2704ef7f67cfac06be3c2806b4d58b1adaa04643b670c0f7","ssdeep":"","tlshash":"5851af6a59b714718077725a6fcfab487672004b2449dd0a3f1c89860f90d3559f2bb5","size":2630,"data":"","first_seen":"2026-04-05T04:43:41.611414Z","last_seen":"2026-04-05T04:43:41.611414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:50 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96144\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-15T15:33:56.213557Z","times_seen":549687,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":191,"dns":1,"connect":27,"send":0,"wait":16,"receive":4,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:50 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96144\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-15T15:33:56.213557Z","times_seen":549687,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":181,"dns":1,"connect":22,"send":0,"wait":14,"receive":6,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/Book%20of%2099.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.207Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/Book%20of%2099.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 139008\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-21f00\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 365 x 250, 8-bit/color RGBA, non-interlaced","md5":"6eadc7f804020fee6a5eecda1712e642","sha1":"fe5c95615d5dd906574e4cf9a243c553ff7f2c01","sha256":"1cf2073996f70cf62cb772f70e559876af83343602f6161e4d9bf0e0874cefb9","sha512":"e2461b2d33835b71ed23337553cf43883867412f9063ecdfe255bd2a865d414b77087a8a0fa34ed6651caa2769f863b2640b507c219c28149345201d30e172b9","ssdeep":"3072:5CMYAx6lF5HirJSijfvCscBWJKK/LB2pdbRAETyvQwtue/ZD:wMYvlXKZjnb7MScyZD","tlshash":"91d3122f997ace09a71c38388bae69e6d4f0537f61020051d99bf8af25500f7cb97069","first_seen":"2026-03-29T12:18:45.982831Z","last_seen":"2026-07-17T09:15:58.261098Z","times_seen":18,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":133,"dns":0,"connect":57,"send":0,"wait":59,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/Money%20Train%204.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.210Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/Money%20Train%204.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 2090587\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-1fe65b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2090587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"f503872ce8ba467d355c0464bc995959","sha1":"c0873ff8012cec5518b01f61e742a198f3e6b91d","sha256":"fa1c2d4f982a1d51d5ce971f5bc51ef0784f158005abbc74d606023dad743be2","sha512":"a638a17ca8b14baf3c9f93a8ee865e0c7328138318454c865cb09ffe0f2991e1d8bc3dc74957a97abaff85826674b9fcd6145291e6a46d4f5d8e80ed034af4bb","ssdeep":"12288:sse7fqkh2vkLZrFleB1M6+QVuTt3mv5s318AlAEv5SfT1kn4Ioo//AeysVBJNI7z:sse7fqkpLhFleB1i++mKavBo/ArsIXnj","tlshash":"782533fdf3582054c9dca27573220bd9fb9c9e0168025435266caef02b5bbd0bd1ab6d","first_seen":"2026-03-29T12:18:45.967494Z","last_seen":"2026-07-17T09:15:58.266464Z","times_seen":18,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":59,"receive":460,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/favicon.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.365Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 4622\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-120e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"cafffa621f2fc2282eb0c987b63743d8","sha1":"d47fc9231c9f8fa5b5078fb5131a0966b8d19b19","sha256":"88fd615230aaf9f58cc84d39cb9676fca96057e76ac4980e3d90063981f2d58d","sha512":"8222428faf4dab78c0b022cf53eeacc34c717e03af5685e999fb0c3953ff3e08263729f360b5b3be6c2240bfbcf6aa7a092f4b7d396796687ea98d43005ac8ea","ssdeep":"96:n56MmZ84XX8vqISu/ZFypa8bdMutYaHnWtpRy+iibY5QHHhtRFpuFQASI:56Mm84X1SLyUNu2YWT1lPRFttI","tlshash":"fa919f4f07119452b088be0b0e4bb7a7944fab411a0f21145adb587b70f6f422df8999","first_seen":"2026-04-05T04:43:41.592345Z","last_seen":"2026-04-05T04:43:41.592345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/Gates%20of%20Olympus.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.203Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/Gates%20of%20Olympus.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1941955\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-1da1c3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1941955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"f30b2d112c2bdb59e8acf4a85424ff93","sha1":"da14e6631d853dadaff88da2adef5079ca81d530","sha256":"38f9975921b0ca2ef8ad7892200b1a3aa498f1b016ba7655f1f4b34bb9f84cd2","sha512":"ceafa74b7214c282ec12c7251737795eb94dabe34b09480319480bb96def9897ee2c02f144a464122c6a138ab371e63ff4d3e6a4ef660e3d65ce4ed28d1437fc","ssdeep":"24576:ydwFVDastuXBJp+sxNQjKPk++O2qJWJ77Gh+5BScPO+Hm:ydwFVD1WBJ7kjKPZ+zqsXNG+G","tlshash":"c52533085631d5ecec12afbbca55317dd0662e34dfa91af0f86c1580198ff292ca95ce","first_seen":"2026-03-29T12:18:45.983986Z","last_seen":"2026-07-17T09:15:58.282823Z","times_seen":18,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":137,"dns":0,"connect":63,"send":0,"wait":64,"receive":497,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/hero-background.gif","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.444Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/hero-background.gif HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/gif\r\nContent-Length: 422669\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-6730d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":422669,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1388 x 593","md5":"bf171553923a69f345ac1ab658cbaea9","sha1":"6571078b3528054e21a018b8d5d31ddc5d9ef848","sha256":"9256ff0169dd29096f5fefe020f37b082b4a4913d0a63ddd5a08b2b98499331e","sha512":"23af6775c9788f0b0684b8b68654bde9abcdd576d9c7d9039e65a507bff44fceed42ad4a34b3f12eb7d602f99978db65560c37aa7fc22ba0a2562155e807c349","ssdeep":"6144:2I8+TtgALxYJlfoTRD+MCF22UIY93/IcE+f8mpMI4RapPJz5haTzP86KmXXy:2IRCAtK5OUMCF2hlIcE+rpoRCJxZ2Xy","tlshash":"9994233044234b9cdd22d4dda5fc792dc98ab693791981b2127e7018378b9bb67ee6c0","first_seen":"2026-02-13T07:05:49.712746Z","last_seen":"2026-07-17T09:15:58.262858Z","times_seen":29,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":255,"dns":0,"connect":0,"send":0,"wait":62,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:50 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96144\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-15T15:33:56.213557Z","times_seen":549687,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":190,"dns":0,"connect":12,"send":0,"wait":18,"receive":2,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crowncoins-casinoca.com/","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T04:43:12.820Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T15:46:12.417024Z","times_seen":17904469,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":1,"connect":58,"send":0,"wait":0,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T04:43:12.985Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40996,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"88355056474c66ed8768462c61b6815c","sha1":"e5f4a5701fe7213106b11e4ddb5e2ea6abbd0955","sha256":"3b7b367207c83890c829d968c3ce58f593a2d7c21e6758341f8bd13671d4ce1f","sha512":"22dd7003a32fc8c37ed32c50173c3e6eee853f48412315a7df48a32b112082977ca434bcbf691b3e1b4cea55fb3499819705d6392b78b58196e649bf2e29912e","ssdeep":"192:hrlwMGFTTq9ZYlRPEX0LymOHdZtJNMeU0AKC2EYKGaUvKTCUpfykJy2xUjSVx29g:D6DKoT/T8Ntl9+NaGrjxXJmM","tlshash":"9903c71ae5f313555423a0aa2feb57093b64c007d50fce193b9d22c89f85aee88e374d","first_seen":"2026-04-05T04:43:41.597458Z","last_seen":"2026-04-05T04:43:41.597458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":58,"dns":1,"connect":57,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700;800;900\u0026family=Oswald:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600;700;800;900\u0026family=Oswald:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 05 Apr 2026 04:43:13 GMT\r\ndate: Sun, 05 Apr 2026 04:43:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21473,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ef716e5783c1f82c0fcc939034871c57","sha1":"e81b0b0ee203cbc11f72dc6ea5ea33c11ef8efe7","sha256":"e0c60aa92b1019792a1485aa8c0a33357f16b88cf210a81b0186650c94ce669e","sha512":"651584db5a1559ddd56656561b1f0aa0f71b456ee03f69609b42bc4880b8b008b9efb7b21b9fdd6535ecd1b3416ad34837c56f8454696120a955a7b385546c63","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7W+OjuTRU7XPOKuMR77wIO5us:zRPQPTzajdfMfP3CpJv0F7o","tlshash":"3da2f091041ba500eb471cc633cf7e3ade5e61667494c579affd1ca8aceac220319b6d","first_seen":"2025-12-05T08:42:30.623597Z","last_seen":"2026-07-17T09:15:58.273326Z","times_seen":32,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":107,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/The%20Dog%20House.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.208Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/The%20Dog%20House.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1948780\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-1dbc6c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1948780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"9178c478fe6474f5d32ed70d1c685144","sha1":"d6b8d798108d28bfa95e443c48382f1439308aab","sha256":"acbd9ee948ab88658b464243c8038d8eb0a8d6cc109d9300dbf93e04fd7b8df0","sha512":"5683d7ead02337783225df7f6fd30a1c80ba54d0192bda424a4a565633db4778296b06bf850037389e3ebd5b53774b3a143655cd39f56bac7c373a633f81737b","ssdeep":"24576:LaYAB0DNtVwa3Q2codyYc9avyB7a7Qejfyl6gpb:LTDbVwapcoTcEvyBW7Qejakg5","tlshash":"762533e960003f10d84669b46b4d981fadf121687c2fe22d993c53d533aa3875b6be37","first_seen":"2026-03-29T12:18:45.965811Z","last_seen":"2026-07-17T09:15:58.284974Z","times_seen":18,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":132,"dns":0,"connect":63,"send":0,"wait":64,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/fonts/Made-Dillan-Cyr.woff","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.709Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/Made-Dillan-Cyr.woff HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 153\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-08-15T11:17:03.153792Z","times_seen":6040,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/92561/MADE-Dillan%20PERSONAL%20USE.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 10:53:05 GMT","end":"Wed, 03 Jun 2026 11:47:54 GMT"},"fingerprint":{"sha1":"D9:30:54:27:38:62:7E:5D:C3:29:C3:8B:4C:23:16:C6:51:BD:94:E5","sha256":"9C:10:6F:BE:83:DC:82:96:4F:1B:37:70:57:2D:20:C9:EA:DB:71:9C:9B:4A:D1:E4:93:0E:B4:CD:30:3E:E2:47"}}},"request":{"raw":"GET /s/92561/MADE-Dillan%20PERSONAL%20USE.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 05 Apr 2026 04:43:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrMT0uBpztZNMIWZ1sh3hJ8%2B3VYdjk7lB%2FojUztYH0I1rrqhpxZA2bsvqNqtPf44Ua%2B3HdAFJWfVfxyTdqmwyr1YHNjlvevpIlW8dfisr%2Fl2D87yAo6WzsXVcrreIlfCZU57Hf4%3D\"}]}\r\ncf-ray: 9e75e4050ccd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.4.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37585,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6869), with CRLF, LF line terminators","md5":"b5203743461ae59e01c44840b5281cbc","sha1":"5f73122337af2dde46f7e0a4ed6e50bdac96e8be","sha256":"0786d175890fc96b42735e0f57545c9a89f2417f12c774cb5fc679bd93b498fd","sha512":"207cd0cc372df9de65af6f0b4bf403dad645ada0452905d4905928eb66eccbf56004a6bca6516f818f412bab11bb6ce6e696b7a0eae6c42a536695dd55baf9c5","ssdeep":"768:bpigoQFuIPH/sRdJzNN7bOL/UNoPMONPXPBPie:EIPHYfTbOL/UNokONfJ6e","tlshash":"50f2a9bf03208bea91d0a7882f54b78db7b89186b4b642c0b75f59475f469f77139c20","first_seen":"2026-04-05T04:43:41.603605Z","last_seen":"2026-04-05T04:43:41.603605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":53,"dns":2,"connect":3,"send":0,"wait":244,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/Sweet%20Bonanza.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.205Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/Sweet%20Bonanza.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1982077\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-1e3e7d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1982077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"8265f1de2fa71f6bd4c6d117aada0238","sha1":"762d2673eea630f2ec8d25f953e9834a24088410","sha256":"583f96e377ae61f6fda063d7241234e78f6462d78d04c025d0dd362c81d831cf","sha512":"2e09d73580cef5eb33735185a468abebe4734a976be51a719861dbc646c2d6992bc9e4343ba0e91d2e382f2eec0bd6ce0501dcd24d01ea65c2cdb896aca9dac8","ssdeep":"24576:ZmfVezW6yeT76bjhtJIq1lP/ibIo2ORNEW4QNfkm:ZmNe6WujqG3i6ORNEWLf9","tlshash":"cd2533bd3d599e28c8de7431b1fdff0bc358db6400ae661848d2559c92ce76a20e2c67","first_seen":"2026-03-29T12:18:45.964005Z","last_seen":"2026-07-17T09:15:58.276124Z","times_seen":18,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":135,"dns":0,"connect":63,"send":0,"wait":65,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/slot/Gonzo's%20Quest.png","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.209Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /slot/Gonzo's%20Quest.png HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 1668321\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-1974e1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1668321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"483afe94031bce7fe7f8878ff5dcf9cf","sha1":"d4f5caa9be416bbdf3e56aa088b610694f7b6934","sha256":"446dd8fe9e9c73b3e4251bf2fcde81e896c52842a73cde9d699e869a88dbc42a","sha512":"aac260c934242aa84577c04bf0c32154cb3c261edd208fd6b09048051759c8866f908acb8812551e365ccaff30a2522f39cd78a53c70418815615bdb661a8bce","ssdeep":"12288:hYpUq5HOKJe6xzVn76PtYv3Unj09vT/Ol+3PQuk2U5z9TOg12TBUutILkfG7Chai:m+aRU6xd761m3dKlsPd+mUutbVp1","tlshash":"f32533b4d8d68683dd0f02bbd1a53c7c94a5baf4e90514abefd8988147bef60321215f","first_seen":"2026-03-29T12:18:45.985268Z","last_seen":"2026-07-17T09:15:58.279131Z","times_seen":18,"resource_available":false,"data":null}},"time_used":710,"timings":{"blocked":131,"dns":0,"connect":57,"send":0,"wait":59,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/fonts/Made-Dillan-Cyr.woff2","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.456Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/Made-Dillan-Cyr.woff2 HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 153\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-08-15T11:17:03.153792Z","times_seen":6040,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"crowncoins-casinoca.com/logo.webp","fqdn":"crowncoins-casinoca.com","domain":"crowncoins-casinoca.com","tld":"com"},"ip":{"addr":"158.94.211.126","port":80,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:13.491Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.webp HTTP/1.1\r\nHost: crowncoins-casinoca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://crowncoins-casinoca.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Sun, 05 Apr 2026 04:43:13 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4832\r\nConnection: keep-alive\r\nLast-Modified: Mon, 23 Mar 2026 15:46:54 GMT\r\nETag: \"69c1606e-12e0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4832,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f44c00d1669e27bc8d3c4b663ef9b08","sha1":"3c9497146948d35722dfc68010cc83ea395dc911","sha256":"deab8d332a3ae6d55cc44a77295584ba204d25bbf7e72f7e7280846aae2e7e8c","sha512":"9f161ac9908790c70c23d385c5bca5d7a5d04af49e8c3d59d094555fa5ffbe8733cc7cd2ea57e9b4a6b31fbf72c5164bf9024aa0e52dc6bf1711a45ff537896d","ssdeep":"96:cK+/f3pp3l7L/KjEyzW/9w8INM6AbgyAp2SobNK2cIZMkCebnpeJfw1:cnX5pZLu2+NZ8gyB5cAMWnpH1","tlshash":"cea15d2b27f429c8c228cf581fae645e8176a15bbef557da8c21af0b340ca5c9ac1244","first_seen":"2026-04-05T04:43:41.608313Z","last_seen":"2026-04-05T04:43:41.608313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/oswald/v57/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:15:00 GMT\r\nexpires: Sat, 03 Apr 2027 21:15:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 113294\r\nlast-modified: Wed, 10 Sep 2025 16:45:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21472, version 1.0","md5":"5f49329007f1e2c86462fd68a5f3affe","sha1":"aabe123b52750eaf9e6fe604204c2687222b0c54","sha256":"571f3457dab507b6f2ce5394d593ca015251b69fea81ab7a546bd2368e9fc3ed","sha512":"59b693cf63d3bc706adc09d289f51f3be1ed2cec80a6e1ebfaf35a5b569ed006e5785cf1faa884e133ab83eb7a0fce9c4545c512c9e7fed63e94264fb13c4937","ssdeep":"384:89cq4KprqBvQGNLahU+kaK7dWYQmQp48QMg9syZ/0TxUAWKymEIetG0pLlZxeH:8iq4cmvfNLahDK7QVmQqhw1EjLLMH","tlshash":"4da2f1a25a83d949fb68403e3b80287d963a03c733967a63575225ebbae1c53305a4c9","first_seen":"2025-09-11T17:19:09.761048Z","last_seen":"2026-08-15T14:48:55.913097Z","times_seen":13310,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":109,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://crowncoins-casinoca.com/","date":"2026-04-05T04:43:14.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://crowncoins-casinoca.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:50 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96144\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-15T15:33:56.213557Z","times_seen":549687,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":191,"dns":6,"connect":12,"send":0,"wait":8,"receive":6,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}