{"report_id":"465ed9fa-96b6-4030-84e3-b198c72f2bf4","version":6,"status":"done","tags":[],"date":"2026-02-19T16:01:50Z","url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":0,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"final":{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"title":"Рабочее зеркало Мориарти казино: официальный сайт, вход","dom":{"size":91457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50016)","md5":"81e0f1c713ac1cb32e3e5ee9bc5d967a","sha1":"9728b8d3937c01f4ef3a358d2320b5b12c844412","sha256":"ec7878eee07089ada0a418d29bd4b6ce2928a9c36c7c686c07114ec6bd0fab1c","sha512":"14d064d1b91229676a218e63d4d32b722d8c17f241d56e383d404a0bfd5b10c1d456462564a4dc3934e1753c7ad98b714f62942dc71598e4b4d7d1801c3c6ec2","ssdeep":"1536:6Ryp5Ze64/hwSnFnczaaThBkec89Ovjog3/8MFjll7Bk4vIsw+zWXy8vej4N0YhN:6Mjjh2S/mP2lxf1v8GUpGMTAWE","tlshash":"d993d8354364219c500ae56aee98ab0c373940bdbf5b56b519f03c3ea3de5b8437632e","dom_hash":"domhashd536f59dd207021a5ecb4cc357019893","first_seen":"2026-02-19T16:01:54.286767Z","last_seen":"2026-02-19T17:12:13.953033Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":0,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T16:01:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":36457,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"moricasino2.run","ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-19T16:01:50.181389Z","last_seen":"2026-02-19T16:01:50.181389Z","alert_count":0,"request_count":5,"received_data":233187,"sent_data":2382,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":4,"received_data":126402,"sent_data":2204,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"266b8ab0b7bd72eb965ec00507cf99d6","sha1":"7032cc6ff7c7d0643fed66a8bef24e1eedd94b64","sha256":"883b3ac3e9de261ff89dc23ee8a000e210d5721df7569bcdd575c74738ed6b51","sha512":"742bcde316a834c1a89f17e42d92bd87eb719d82e1231b12b94f30d646a3239c836ccba0615be5b9f9b79f34b40797ac788f6701a25e4fd97696835ad3a824de","ssdeep":"","tlshash":"65e0d8b3aa874d3d14aa76239731665c367d88856f133803049d1dd404d8f5554f4e8c","size":368,"data":"","first_seen":"2024-08-20T01:51:17.397201Z","last_seen":"2026-06-09T12:05:51.943502Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"dd18befbdf463e23ce79659069713f23","sha1":"bdb0f30b3cf079757f4cd26ecdb0d7db03c441a5","sha256":"cabee3356069d48626d515c0c00171845b06e23579c8255df1a8e4a9b3ef71b7","sha512":"2727bdd8ab1afc86a1b6e05008d2e188662784468a5b6ba4c49a566aa54698669cedb0a44038f299f71725c2538131194fd03a06ba4b3c6d15db05caf5967848","ssdeep":"","tlshash":"a0d0a737b31421799c1f71b5f94da244f4a311594813ac05484469956464b2b258ae70","size":224,"data":"","first_seen":"2023-03-07T01:39:52Z","last_seen":"2026-08-09T14:19:30.132378Z","times_seen":2553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7d20ecfd52a58a26e6c1a4849280e5a","sha1":"88af904c47c15c8db23bead9f4b352a9e5ee17ef","sha256":"87759be0029d31f5ad6a49a927fa315232b30e00f4507dea9b48074e3988621d","sha512":"50adcf9335c3508ad68dd7aca3f789a3fb50502f5c1d67c9f0c79358966a608e5e657fed68e52d18f6f9acace64851535803789de3f300a4182703063f72391a","ssdeep":"","tlshash":"d7f0a389fb7e6db80782b229820f3316f636866f54460481dd33ebf088556cab50345b","size":454,"data":"","first_seen":"2023-03-07T12:03:49Z","last_seen":"2026-08-09T14:19:30.133976Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Exo+2:ital,wght@0,700;0,800;0,900;1,700;1,800;1,900\u0026family=Montserrat:wght@100;300;500;700;800;900\u0026family=Rubik:wght@300;500;600;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Exo+2:ital,wght@0,700;0,800;0,900;1,700;1,800;1,900\u0026family=Montserrat:wght@100;300;500;700;800;900\u0026family=Rubik:wght@300;500;600;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://moricasino2.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Feb 2026 16:01:19 GMT\r\ndate: Thu, 19 Feb 2026 16:01:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35771,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"fc3393b5863d26ce1a46e435e54fb6d2","sha1":"8c49f000bf4ef823c34f2038f4b922f71c7f45c4","sha256":"6feed36138652e9ff8f88adb5339b0e73694c018bc9859850310371de1224703","sha512":"91aad08907672f482f067a736d2a14adca539c138e0bc1d72d1778b3890d1ca9ab35212cb5a3d683cea35cea1f2d20eac1dc65279c08a4f6e14549bb9ccf8ad7","ssdeep":"384:1Ol7GH7ExliGuGTElFGplNQpRT6jnd1oWQZRWTadfMfP+lS1lgwltulTNlMz:8dCWQNYlEXe","tlshash":"5cf2b9e0441b9400bb471cc623ce7e3ade4e62657494c579affe1da8acebc22236475d","first_seen":"2025-09-21T01:00:44.187313Z","last_seen":"2026-06-09T12:05:51.938034Z","times_seen":11,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":87,"dns":1,"connect":22,"send":0,"wait":34,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/wp-content/themes/mori/assets/bg06164.jpg","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moricasino2.run","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:30:47 GMT","end":"Wed, 20 May 2026 08:30:46 GMT"},"fingerprint":{"sha1":"1B:9C:A3:D1:D6:DC:80:65:AF:72:3C:D7:0E:30:E1:DF:19:D6:B7:0E","sha256":"15:39:CF:EC:3E:DD:A2:12:FB:FF:DF:58:FD:75:BB:BC:10:2D:FE:9B:CA:E0:31:DE:37:6B:61:69:BB:D8:14:79"}}},"request":{"raw":"GET /wp-content/themes/mori/assets/bg06164.jpg HTTP/1.1\r\nHost: moricasino2.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moricasino2.run/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 16:01:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 90938\r\nlast-modified: Mon, 21 Jul 2025 15:55:53 GMT\r\netag: \"687e6309-1633a\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=(), aria-notify=(), captured-surface-control=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), on-device-speech-recognition=(), summarizer=(), wildcards=(), private-state-token-issuance=(), private-state-token-redemption=(), interest-cohort=()\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90938,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=916, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1896], baseline, precision 8, 1896x916, components 3","md5":"90110c3587e5e096d80523394fa9ee1e","sha1":"6b9bc1953eb2b970fccb162556cb36f29a1a359e","sha256":"21a02a0fe3c2a55a5bfea2d3ce3163c08e76784bb37c2c616cc8e3f3d91337d1","sha512":"472c0247e3753fc6900f92e32794110d3a49c8e162860864fc3d6e1f1c9e26088880d7af91cfd4d272d2dec8de62a2128da682b052eb6a5cff121483f97ce60a","ssdeep":"1536:xyZEaFcccFGuThl9ZY28JLhIbevA06tUWXKyiNq5eafUY8jf4:smhT3DYbLybeZwxAOeg8jw","tlshash":"54938e369f6c47d298c639270201ee7187315f90176336ebbebc370aa72dc5598642af","first_seen":"2025-09-21T01:00:44.197479Z","last_seen":"2026-06-09T12:05:51.941058Z","times_seen":4,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":181,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moricasino2.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 23:23:22 GMT\r\nexpires: Thu, 18 Feb 2027 23:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59878\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T11:20:48.001536Z","times_seen":548700,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":91,"dns":0,"connect":7,"send":0,"wait":11,"receive":6,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moricasino2.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 19:46:47 GMT\r\nexpires: Tue, 16 Feb 2027 19:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245673\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-12T11:10:05.241271Z","times_seen":9385,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":87,"dns":3,"connect":10,"send":0,"wait":11,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/wp-content/uploads/2025/07/cropped-favicon-1-192x192.png","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:20.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moricasino2.run","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:30:47 GMT","end":"Wed, 20 May 2026 08:30:46 GMT"},"fingerprint":{"sha1":"1B:9C:A3:D1:D6:DC:80:65:AF:72:3C:D7:0E:30:E1:DF:19:D6:B7:0E","sha256":"15:39:CF:EC:3E:DD:A2:12:FB:FF:DF:58:FD:75:BB:BC:10:2D:FE:9B:CA:E0:31:DE:37:6B:61:69:BB:D8:14:79"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-favicon-1-192x192.png HTTP/1.1\r\nHost: moricasino2.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moricasino2.run/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 16:01:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 37667\r\nlast-modified: Mon, 21 Jul 2025 15:58:58 GMT\r\netag: \"687e63c2-9323\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=(), aria-notify=(), captured-surface-control=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), on-device-speech-recognition=(), summarizer=(), wildcards=(), private-state-token-issuance=(), private-state-token-redemption=(), interest-cohort=()\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37667,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"524bc5f33c188ddf2f4735f0bc069f9b","sha1":"d207dffb5dd3507f53eb81ce0d615a4aaf7fc9a5","sha256":"a923ee4afdca837e1263362d0b97ee095cc34ec6ae09e3c55ead1d7d19f2b965","sha512":"6e03c28b802a3ddf077bf9fa3db7e77fa8335ab67daebdaad0876c2b939f54d33260487cadf2eb7d02e4a2dd2f1ba4a0b0e1ea31126020ab65b37a84410a1753","ssdeep":"768:K++2ecGBx7ZXQWhBmPR/KeL5qNHZqEf3I+4CZir0gGZR:t+2e3lvKp/WNHYPCZisR","tlshash":"0f03f10e61979823f2660ed488e868f9995cb547ed84b2c43a472d0e8c7b133d3a1b4f","first_seen":"2025-09-21T01:00:44.189968Z","last_seen":"2026-06-09T12:05:51.942534Z","times_seen":4,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/wp-content/themes/mori/assets/small6172.png","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moricasino2.run","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:30:47 GMT","end":"Wed, 20 May 2026 08:30:46 GMT"},"fingerprint":{"sha1":"1B:9C:A3:D1:D6:DC:80:65:AF:72:3C:D7:0E:30:E1:DF:19:D6:B7:0E","sha256":"15:39:CF:EC:3E:DD:A2:12:FB:FF:DF:58:FD:75:BB:BC:10:2D:FE:9B:CA:E0:31:DE:37:6B:61:69:BB:D8:14:79"}}},"request":{"raw":"GET /wp-content/themes/mori/assets/small6172.png HTTP/1.1\r\nHost: moricasino2.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moricasino2.run/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 16:01:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 3042\r\nlast-modified: Mon, 21 Jul 2025 15:55:53 GMT\r\netag: \"687e6309-be2\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=(), aria-notify=(), captured-surface-control=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), on-device-speech-recognition=(), summarizer=(), wildcards=(), private-state-token-issuance=(), private-state-token-redemption=(), interest-cohort=()\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"f24b2b1bf281edaae3183f82b4a7e1d9","sha1":"21b04b3fed476fc8182f6aa365409133a8b2624c","sha256":"2e09715e34b24f8bb2053c9bd01a74e2795fb2eff3ec4d275cdc992d82339e68","sha512":"97d434de6c54e9d23047329bcab0ea5eb7e08061586bf9d26d2ae6f572b54494e28060a8fece0da841c2b9b81eccd776400652dd9bc0d1fc045c3daa68d05da5","ssdeep":"","tlshash":"3b512bd4a62019811b94c2c514e2a82a1e0ac980d790ee37b4cfe81f7e7627b84d91d7","first_seen":"2024-08-20T01:51:17.391957Z","last_seen":"2026-06-09T12:05:51.938699Z","times_seen":12,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moricasino2.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 23:23:22 GMT\r\nexpires: Thu, 18 Feb 2027 23:23:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59878\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T11:20:48.001536Z","times_seen":548700,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":53,"dns":1,"connect":7,"send":0,"wait":10,"receive":8,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:19.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://moricasino2.run\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 19:46:47 GMT\r\nexpires: Tue, 16 Feb 2027 19:46:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 245673\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23776,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-12T11:10:05.241271Z","times_seen":9385,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":82,"dns":1,"connect":7,"send":0,"wait":11,"receive":2,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/wp-content/uploads/2025/07/cropped-favicon-1-32x32.png","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moricasino2.run/","date":"2026-02-19T16:01:20.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moricasino2.run","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:30:47 GMT","end":"Wed, 20 May 2026 08:30:46 GMT"},"fingerprint":{"sha1":"1B:9C:A3:D1:D6:DC:80:65:AF:72:3C:D7:0E:30:E1:DF:19:D6:B7:0E","sha256":"15:39:CF:EC:3E:DD:A2:12:FB:FF:DF:58:FD:75:BB:BC:10:2D:FE:9B:CA:E0:31:DE:37:6B:61:69:BB:D8:14:79"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-favicon-1-32x32.png HTTP/1.1\r\nHost: moricasino2.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://moricasino2.run/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 16:01:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 2169\r\nlast-modified: Mon, 21 Jul 2025 15:58:58 GMT\r\netag: \"687e63c2-879\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=(), aria-notify=(), captured-surface-control=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), on-device-speech-recognition=(), summarizer=(), wildcards=(), private-state-token-issuance=(), private-state-token-redemption=(), interest-cohort=()\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"71b6531d5788bdc9ad3d09f78c887d22","sha1":"2870c1030a779c1f03d46242c9be5666774d0a2f","sha256":"521bdfd08c777e1fc4c5809e801963cc63c397c302e4bd184f841013873f101b","sha512":"1ecaf0e3686fe3fefc73e5f592da18002bedc511484227c4f2bc41e37b83c8445c0b47808fce6523482801d17c89336edd07c66326bc07ebed1e97fff6fd11cb","ssdeep":"","tlshash":"00413a66ce89192c07c9b8a312ed910074f7c6def346eb5e81016ee038996c33603c0e","first_seen":"2025-09-21T01:00:44.192376Z","last_seen":"2026-06-09T12:05:51.935801Z","times_seen":4,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moricasino2.run/","fqdn":"moricasino2.run","domain":"moricasino2.run","tld":"run"},"ip":{"addr":"92.63.227.153","port":443,"asn":44942,"as":"Digitalreti srl","country":"Italy","country_code":"IT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T16:01:19.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moricasino2.run","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 08:30:47 GMT","end":"Wed, 20 May 2026 08:30:46 GMT"},"fingerprint":{"sha1":"1B:9C:A3:D1:D6:DC:80:65:AF:72:3C:D7:0E:30:E1:DF:19:D6:B7:0E","sha256":"15:39:CF:EC:3E:DD:A2:12:FB:FF:DF:58:FD:75:BB:BC:10:2D:FE:9B:CA:E0:31:DE:37:6B:61:69:BB:D8:14:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moricasino2.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 16:01:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 18210\r\nvary: X-Forwarded-Proto,Accept-Encoding\r\nlast-modified: Thu, 19 Feb 2026 15:50:00 GMT\r\netag: \"4722-64b2f41d4a1a0\"\r\naccept-ranges: bytes\r\nreferrer-policy: no-referrer-when-downgrade\r\npragma: public\r\ncache-control: max-age=3600, public\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npermissions-policy: accelerometer=(), ambient-light-sensor=(), attribution-reporting=(), autoplay=(), bluetooth=(), browsing-topics=(), camera=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), usb=(), web-share=(), window-management=(), xr-spatial-tracking=(), aria-notify=(), captured-surface-control=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), on-device-speech-recognition=(), summarizer=(), wildcards=(), private-state-token-issuance=(), private-state-token-redemption=(), interest-cohort=()\r\ncontent-security-policy: object-src 'none'; form-action 'self'; frame-ancestors 'self';\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":92330,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50010)","md5":"29f3824889a7f4655064f0a4ffa9dbdf","sha1":"1b968dce49588c3779b922210c11b879697bf942","sha256":"a9603e0a1b31440cf87765d22ddb296056763b268e623696ed554dbe6cd84ee6","sha512":"e6229c7d707c95939786b03dcc8a1f7788ee9c04bcb51a8eb3d1a76c67891b91c3aa848212fccb394f4de7cc2c9214e24f7c0dfb7af8e226ff6476cff33205a2","ssdeep":"1536:KDypdZe64/hwSnFnczaaThBkec89Ovjog3/8MFjll7Bk4vIsw+zWXy8vep4Na/ht:Ku/yhnSn+XLAxnHN8GUIG9rX6Y","tlshash":"7a93d7354364219c5006e56aee98ab0c373940bdbf5b56b519f03c3ea3de9b8437632e","first_seen":"2026-02-19T16:01:54.306495Z","last_seen":"2026-02-19T16:01:54.306495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":95,"dns":18,"connect":34,"send":0,"wait":300,"receive":34,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}