{"report_id":"4b31d7ae-80ee-4ff1-96a2-30f726f91076","version":6,"status":"done","tags":[],"date":"2026-01-05T18:44:14Z","url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wjhq0qj5unsrficf3nsr59lg","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"title":"LEON Bet Casinò Online in Italia","dom":{"size":1483,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1192)","md5":"1cc3dba6499b18665570b479b1882013","sha1":"7827bc46098e0c733cf5a5d824f3db70ad651ba4","sha256":"2a374c903b576b031ee9e25cfb7ff044657765c7a1557efacf01fbdd3cb83a92","sha512":"4e8847178cc9bc86caacbafc323de2a39be26b79e5ac7477ee2f33982b44079dc1ac6899f349fedc1a6f47c03b431cde4c23a77debd7ad585e6ff4821432fdef","ssdeep":"","tlshash":"5031025661874c8a720387ac41b83a1f1d73c56e8ecd9818b6bf4d5ccfdba65a80c71c","dom_hash":"domhash6e454366647c889ee02fac8fe3db3726","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wjhq0qj5unsrficf3nsr59lg","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"104.21.59.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T18:44:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-05T18:43:55Z","timestamp":1767638635,"ip_dst":{"addr":"74.125.250.129","port":19302,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.27","port":50609,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)","source":"{\"timestamp\":\"2026-01-05T18:43:55.794042+0000\",\"flow_id\":1349418702544314,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":50609,\"dest_ip\":\"74.125.250.129\",\"dest_port\":19302,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033078,\"rev\":4,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_28\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2026-01-05T18:43:55.794042+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"leoncasino.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2022-07-05T10:57:06Z","last_seen":"2026-01-02T16:06:10.189847Z","alert_count":0,"request_count":66,"received_data":5282805,"sent_data":31113,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":11,"received_data":361037,"sent_data":5999,"comment":"","tags":null,"fingerprints":null},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2026-01-05T02:56:57.136832Z","alert_count":0,"request_count":11,"received_data":4571314,"sent_data":5171,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":2,"received_data":902812,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ps.l.liftdsp.com","ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":602474,"first_seen":"2024-10-13T05:47:12.053455Z","last_seen":"2026-01-03T06:10:36.752752Z","alert_count":0,"request_count":1,"received_data":703,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn0.match2one.net","ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-08","domain_rank":743950,"first_seen":"2018-10-09T19:50:01Z","last_seen":"2025-12-29T00:06:21.754147Z","alert_count":0,"request_count":1,"received_data":5875,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"d1cr9zxt7u0sgu.cloudfront.net","ip":{"addr":"54.192.209.84","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-05-17T11:07:13Z","last_seen":"2026-01-01T13:23:10.064524Z","alert_count":0,"request_count":1,"received_data":183162,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"downloads.intercomcdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-04-25","domain_rank":72330,"first_seen":"2017-08-21T12:06:05Z","last_seen":"2026-01-01T21:06:46.787113Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":522,"comment":"","tags":null,"fingerprints":null},{"fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","ip":{"addr":"172.66.40.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-08-01","domain_rank":0,"first_seen":"2025-02-23T03:47:42.85381Z","last_seen":"2026-01-02T00:51:04.089372Z","alert_count":0,"request_count":1,"received_data":1245,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-01-04T22:22:39.558692Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":795,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnimages2.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-01-02T00:51:04.238222Z","alert_count":0,"request_count":40,"received_data":530650,"sent_data":18583,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pixel-us.r2drtb.com","ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-07-08","domain_rank":5001008,"first_seen":"2024-07-30T23:22:43Z","last_seen":"2026-01-05T03:34:40.712787Z","alert_count":0,"request_count":4,"received_data":1951,"sent_data":1898,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"track.liftdsp.com","ip":{"addr":"3.167.2.124","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-16T05:39:57.442139Z","last_seen":"2026-01-01T18:38:01.938456Z","alert_count":0,"request_count":2,"received_data":10249,"sent_data":2566,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.13","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2026-01-05T09:02:45.924524Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":744,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2026-01-05T02:19:38.73752Z","alert_count":0,"request_count":1,"received_data":8344,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"pool.liftdsp.com","ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"domain_registered":"2024-02-13","domain_rank":0,"first_seen":"2025-09-12T16:56:20.115696Z","last_seen":"2026-01-03T06:10:36.641919Z","alert_count":0,"request_count":1,"received_data":265,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnimages3.gcdn.co","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2014-06-11","domain_rank":0,"first_seen":"2023-06-14T13:15:15Z","last_seen":"2026-01-02T00:51:05.035982Z","alert_count":0,"request_count":1,"received_data":4582,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":76051,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"34.199.152.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2026-01-05T12:19:19.47128Z","alert_count":0,"request_count":3,"received_data":16742,"sent_data":1603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i64cl3er5t.com","ip":{"addr":"172.67.167.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-23","domain_rank":4837675,"first_seen":"2025-10-18T07:34:49.497184Z","last_seen":"2026-01-04T09:31:47.234646Z","alert_count":0,"request_count":1,"received_data":42288,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"leon-italy.casino","ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-08","domain_rank":0,"first_seen":"2025-12-04T12:03:57.106339Z","last_seen":"2026-01-02T16:06:10.39916Z","alert_count":0,"request_count":20,"received_data":2344490,"sent_data":22577,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-01-04T22:24:10.24242Z","alert_count":0,"request_count":4,"received_data":3384,"sent_data":7038,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a01e6f7bce6dbf5d77e90a118c93b0e","sha1":"0dd49694ef9f526b54037573927940d4f49410ee","sha256":"633fe888d0ff0434ff5676b91027d7f70c3af306567d4f1b7d5f30fef585c184","sha512":"bcfd3614437320134d84c7aa5239c54f0ceb14caa75f2bc4199dd14487d248f32638037b41ea918fe8ed8f9d34f18a4dcea0a114499759bfd0d17b70ce2bd228","ssdeep":"","tlshash":"6de028da74110c7570ed05f533b1a11875431108780a5c23ddfdc9142c189c74c134cc","size":341,"data":"","first_seen":"2023-05-07T16:21:54Z","last_seen":"2026-03-29T15:19:13.493938Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","size":519402,"data":"","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-04T14:50:12.554895Z","times_seen":64251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","size":6067,"data":"","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b104f410e577555bf713d14b3e61cb5","sha1":"5648bba8e164d96ee568ece5fabc7ca82c7629e3","sha256":"1f83c86cadf595b7e55a7e9234b32b6afcb8c724c454a1a959190257e2f36581","sha512":"a692f8417a24c3ca7c87701f1845eafd88e600c7c317c422a3df01954a98bb1a0134cd4e3f0579e07717ed87b203fc7a246aff84e829afb4c911536a1b781309","ssdeep":"","tlshash":"fa1110b93230707dd5a30ac3a5eea746367694144407cce450e4ca4c7764dbd1af2e78","size":949,"data":"","first_seen":"2025-11-14T01:20:21.025653Z","last_seen":"2026-03-29T15:19:13.507196Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app.454a4740.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a61c00b13a2efd93b3ab5847dfc41c48","sha1":"30921f01158a35ce63259be1bfb2a8476e6a1589","sha256":"162c16e1a43dbcbd67c0077388ec68f98f87153ee95c0d5be68ed878dfdf3e55","sha512":"04bdc14a0de7ef39d7371efb80938920e3a367d5ae4e3ae2fc24c7c52c94ba634495ba02c3e551ec99d37203f0c0a170c94263a506872876e623f7486e565ed8","ssdeep":"6144:nxY9lstwDG7qD/v+W/BxbjKuOOc+1o/ibMZyWowdQgaH3nWSL8/w:nS2wDd/BxbuuOJ+1o/ibMZyfwd63WSmw","tlshash":"97c419c5b6e1f4b24b9750e2543b1007f33a4d5c206d90a4b368d5dbb8ec58e62b6b3e","size":566550,"data":"","first_seen":"2025-12-12T19:24:48.683738Z","last_seen":"2026-01-19T08:36:56.026365Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-04T14:50:12.554895Z","times_seen":64251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","size":1926,"data":"","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","size":334482,"data":"","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.BnSbgueT.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4975dcb8013611b8d7048fe5ff8a30","sha1":"00d9b1a0d5a6a516bff3cd5a68829e4ca528eb6f","sha256":"985505b4ea196ea21d30f201c8cd17f93f82ec70e8181e0d1a4d05248cf50c2e","sha512":"dd01f97119a04272b4f4373c821be4e4a281046ff860b1e2ab717aa4fae34328263949af811a5dfcfe0152a0355de8047d9125479212f7a50dbff3b32749e39a","ssdeep":"","tlshash":"d54142ada464bb76665381e8f2644043113b32f2a244085c7bae3ee5d3ef541f261b32","size":1896,"data":"","first_seen":"2026-01-05T18:44:37.316937Z","last_seen":"2026-01-05T18:44:37.80659Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.C3vkpZJs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dc88e07943da939db07e18a597a085f0","sha1":"648a69ac319c1f5ce026efffc17640f2c4a3cc3b","sha256":"e82b175b9409dd298cf5a6da63b5188f3a98398c3f0762bad09dcc4528650428","sha512":"e0ce5d0ea8463630645877fb814109f9569caa5b85af9fd52a2fff9ddd86108f26499927cbdb68b37736f80e23a271f1fc3e1bc9c15e95e7f8d0704b207e5796","ssdeep":"96:Y0c8+a+8Toy1lF0KkUZ0Fk62QJ9uy8SisBBGRN:Yj3yDvCKYk62QJ978c2RN","tlshash":"0db1120b7625f3f986ad2a28d9c422305a3d2fcd631404d1eafec0197249679c5b5bcf","size":5384,"data":"","first_seen":"2026-01-05T18:44:37.397083Z","last_seen":"2026-01-05T18:44:37.852022Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68e716f1e39d1d92fd8637a486c02f62","sha1":"03ca974d706103a76201544c4496d890fe8287b4","sha256":"0ee687ed9dad021c1bc1726a847123b9b1a6337a19bb959a3099f09382b9c0e2","sha512":"a486881ad276c12967157160948ea2a38a647eb4b757604849a5e58fc343d9a635169aef4ce52b75750e12f36d5f879f84b36310e264208a956767b2bedb24fb","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffp7xtS7JWwzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOJwMSdZ935pqUP","tlshash":"4cf184feb6c2793806a31566623f770c7f3b654428494490d065c8c8797adcbc12bfad","size":7591,"data":"","first_seen":"2026-01-05T17:17:22.222162Z","last_seen":"2026-01-06T08:30:14.590082Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/launcher-discovery.430cd563.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd58cfa4410c365ad13c25475ba2053","sha1":"c66704713e7cebac620c3eef41fe72219be36ae6","sha256":"e970246704566a26c40522c6e1320c0a3e4cb7399777e8e96f311fcb41d5895a","sha512":"29aafb3d7bb7819605f1fbedbf5a60b3c1f6bef48d941131642038709603ab6e5be1a94344c629c4dfbd028ae8ff0ea76772d0e81090d1b749741df5b7417568","ssdeep":"192:LdgSN958TwPo55OrCci3szx9Oca/uIVdWDtenWYxO7:xg9AoCCci3cx9Oca/uIVdWDtenWYxO7","tlshash":"1612b448f8aef42c92f363a482af500d637d96a8d01e55f8b865d8e54ffd04c5723b29","size":9453,"data":"","first_seen":"2025-12-12T19:24:48.697578Z","last_seen":"2026-02-06T08:10:22.719622Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","size":4284,"data":"","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be6808b734a8226f932ccbed46abd4c3","sha1":"e99369c89962018d66d6d9d6ab2e044957a72c83","sha256":"e906c2f60e55c9f55751ee306c0c8d68f1b4b5dafadbdfba9f866b116b01c299","sha512":"8eb79da7d960c77acedc69726b2d30bf7aa2db055bc89869c0309e8f07bf9df2d76d9f2a3c2314c7fb27dda571c8bab56ec2dfd518710e7159c5fd42b75f01fc","ssdeep":"","tlshash":"b3f0970e9cc503a043f800c483bbff1df29f210c881c8264c3c78882760aa9398323e8","size":487,"data":"","first_seen":"2023-11-07T14:36:47Z","last_seen":"2026-03-29T15:19:13.501559Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","size":130231,"data":"","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd43e72a.d.m.vfSsdjxl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"abe1ce4231382d5b2139f5c5980deee9","sha1":"236a426039842cb375e77fccccc05dcc255226ca","sha256":"608d4f64b5b27661a92ecb393e215a3928520a9b85ea746628d7e254b0ec4e75","sha512":"07e1746c5afbabf9946e6df0c242e617c335dcbbe34171ad0739f844eaa4522ae3ac0478cf59fdf746257ab66399e1e60d39eec9a77b26f7a7923b8196c31ed4","ssdeep":"","tlshash":"7bf059cd76c3b46806a71479c03fdc5ef63b7d947acec4d0e50aa0752a3446a8133a69","size":512,"data":"","first_seen":"2025-12-20T03:09:17.600449Z","last_seen":"2026-01-05T18:44:37.832773Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/baa7435a.d.m.BbiSxHJn.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"17f0344e1d0f109f0c2c75da7d646bc3","sha1":"a7ac565a7af3d5e8ea4242862618fdb57b561197","sha256":"299bca3929dafddc8329ae7cf329519b6f0a153f87eb02fd50a1794838b5b6ab","sha512":"969df9f5471c7ba8aa0d0fed9d831e1bdc30ffcca9b8815c4be0d895e5b0c260ab8297915d1ba3f5dbc314dc8f20c0112206119c92c88f25d97b1f73ac4702d6","ssdeep":"384:+QdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2i8:+QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRi","tlshash":"19b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d9d92bbf6d","size":23639,"data":"","first_seen":"2025-12-20T03:09:17.625008Z","last_seen":"2026-01-05T18:44:37.841251Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.Cyin74XP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"db26d8b82403b5ef8e120a173700d10b","sha1":"22253a1b271dfd050a03de052cc1d052eb84a103","sha256":"49cee5b0957ff440f1780213a39ed00911ec7a6b9b3407702afc15b38e0dca07","sha512":"0b3badcb457c7c0737ec7ba69ebf27980351a8070071c907d03c11f728aba459855a751ce129fa19283fe0e43e80af75da5023c2787344609a4a4810b99de710","ssdeep":"384:PMcnY5tu5oHRRYF7XLA+McCw4hDfGPNPjN3uwt:PMcnYPuGHROrMcvcGPNPR+wt","tlshash":"ccb2980b32bd9ff911a655a9c4813020892c8eca92715dc1d9ffcf65264ce61d2b6bcf","size":23572,"data":"","first_seen":"2026-01-05T18:44:37.4406Z","last_seen":"2026-01-05T18:44:37.754648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0784b7d35d7ea7a28fe6a74d88ce11f1","sha1":"65b3a11099e49ff0cfb59dbfeaf02ed439b51e73","sha256":"1bde820a6f5bd1e61382af73600be66d75d98532d32cc6f441213781bb19d356","sha512":"e6716ce81afdb391e2028ba5df5f6abc81dda54f8c2219091696e999db4964cf20073af4cfb2bea62010683d93a5243647ad5f6153eb964b6c914d1146756d4f","ssdeep":"","tlshash":"a6a0222300c00b2002e0208002822b03aa0a08a83c8008830800008eac000a33022afa","size":63,"data":"","first_seen":"2024-11-07T13:31:23.012381Z","last_seen":"2026-03-14T07:22:16.834699Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","size":76702,"data":"","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.D31KhSC7.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b7549cf486868e6d60c9e6772e66e13a","sha1":"b3b5f7a6530d7edad4c37f220cef387729579c7e","sha256":"90fbe7f635ccc40da4febf9df27181ee3b9eef5bea028a0d4de58f5862cc4dc6","sha512":"8e561714de795ce4e9a04fe9dc65064f1fd9caf3c750bd6cf050c399b7572a1ea85a6560aa07308ead877e46c6673b4d9b79d7a032a42bef3f34dc15e838f74b","ssdeep":"384:kFKK4+fn3zgUeIXi8RNK91Cke6cIVOpX1M1wfNkEyQ1ql6qgwdckHVzOCpG+tbuP:9K/z9eIS8RNKJVOplMSEQC6idckHVzOV","tlshash":"7ea22cb7236293b246ab018a50770543d31407e5f148c4f179fe9dae35b58a2e326f3e","size":22656,"data":"","first_seen":"2026-01-05T18:44:37.501774Z","last_seen":"2026-01-05T18:44:37.812391Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"909112496624b1f288d74ecbcc3e7084","sha1":"3b62f5f2a9935f8c2b7838d37553661975ae242a","sha256":"d62f9b82c9c8e8e037853d10982ca2e48454d660ef7f52c5ec7f5bc85044deae","sha512":"f7a1c6830ef75b2d14b58c862b36f54b466271511bf7af323d65c9ed2a79e225558f7578b6c191a027743b18ad5cf861b262c73c5012d24d2481f35d85a0cfc8","ssdeep":"","tlshash":"71e0c046a0e001bfe66582d4f104bf673f158a31d08955b7644e2c49a08e38252c0d1d","size":355,"data":"","first_seen":"2026-01-05T18:44:37.89075Z","last_seen":"2026-01-05T18:44:37.89075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.B0C4LT9b.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2911338ba0f72bcc74bfb6ed78a8f30","sha1":"65c9ef8d331c7987b52a4b74d608e0c2a39f4b6a","sha256":"7e97f0c0282f7ed5b77b9da3f8daa4e178d0856330be095130d4a20232548522","sha512":"01119816a60068ea11caaeaf03b4a444d050b9792860457f0c9abf82d2a8c1481538d832c7f85f0924b913e1d2d26016227b96bd24cc6a1109642f5a34f268e3","ssdeep":"","tlshash":"9431760a6682557947a614fec21b3b21b3219fd1356dc6e1e1bc3c3a3d72817c526fe2","size":1756,"data":"","first_seen":"2026-01-05T18:44:37.387774Z","last_seen":"2026-01-05T18:44:37.771385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","size":243879,"data":"","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","size":64383,"data":"","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fde762892a133b7e9b5fe78c10a8829f","sha1":"0ea5fe2dd52a0ac4dc7fd7c1380f229f8ffe36c7","sha256":"923db43808690ee9aa0446a0a52d6356ffa4a868e1b9dd5d68cd3dbf729b7c50","sha512":"5de8ab00f03e62b53407c48046cc29d5c78134be361fcd9215c235fc5b73b1048c9f03fa6aff0d15f6c93116b06f22113496ec25b6edd229fcae7d49f5767b21","ssdeep":"6144:0BdNtcFikOGxQ7KGZeh3Lep2ZS3wtURfCrrbAIhFk6oN1Omd4hk2GUjeum5eD:CDcFxlwAqfOrbAINQF5k","tlshash":"a7d44b5a7251783647b241e9806f0646b3391a2e9448c85cb6a8e9ef38fdc4531bff7c","size":649978,"data":"","first_seen":"2025-12-20T03:09:17.528049Z","last_seen":"2026-01-05T18:44:37.718747Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.DIds2wA9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4e0c6b15ae290036f1cf03006445e44b","sha1":"c69cd5af94b3ab6c95032fa3848ef9ef6034af8d","sha256":"a551f183804069cecdba0fd96341788fa4717c94751eb08d65f1edad704f3db4","sha512":"9811991384c9d369c1e4c47ef0cce2f7104437a2da0fff6e1dc849c9d1a71eb38527565ac07ce75b046d471477474df357033e91728a16d5963893c9d0c4fa37","ssdeep":"","tlshash":"a161a69b6206e370c1267094d02f3c10e95846cdb3b47590adfd54aedaa213ae17bb6f","size":3358,"data":"","first_seen":"2026-01-05T18:44:37.28143Z","last_seen":"2026-01-05T18:44:37.882451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.ChOzrh1E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bbc8b3a512b218851b400d8c7c88bfa","sha1":"28557da292732b0ce9f90184dfe993140c3e7b3d","sha256":"5089a5710f0609eb3ac0c461776edccb23dfa5552956a03ecae108e7a7b56a92","sha512":"0521cc627f5f639f5a9d4f3bfdab39f5ba138abbf3f6104cf1af707d8842f48ee4ccddfd668e3bf66daa04af6d34e9e54a577d4e96a4598d574f23ffa0aedfe4","ssdeep":"1536:uWOoPHMorDC8EYfWo//0VFiZBHS+/tIyUEJajYN2Uwn:ujorOvYJ/OqIyUEJa02UA","tlshash":"a863620ded0c55faa3e650b9f0f54e0a5518ae47f2784580bab5cc1f9488fa8a36f34d","size":68977,"data":"","first_seen":"2026-01-05T18:44:37.396008Z","last_seen":"2026-01-05T18:44:37.726148Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81b8bfbc13920cc2f8c6c1341b83c3e","sha1":"55d1ac014dfa2a8235ac677b41a4c858a8a9078e","sha256":"6d52e968db5fbb4e73f7847bc926ebc4c5a9133f24c7f3e88fa17fe3fa70ed64","sha512":"ae7f515ab3e59b350ba615c344a17a7f8916442900574e5f58a04ec122d5f29c1046e56b15c536c3d62a39cfbf29e2fe78fe9fb1668ceaba6960810b58d14c08","ssdeep":"","tlshash":"2c70000200208888a0ac2238eba808c002a020a3288080008030ac000c00a080800308","size":25,"data":"","first_seen":"2025-11-15T07:52:07.141082Z","last_seen":"2026-04-04T14:23:33.475079Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DWz__ghu.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ff21ba4342f2561e3d468a707531d8ff","sha1":"ca73a53c49bff172498454e89f89996391dab185","sha256":"9b843e145e8e086ce9db3569bd614d00f9d69654df0d1ef5b17f27caa7b005dc","sha512":"aa365b55aa85fd4239cecbdadccbd1054c5d22ec6ee82dfc104952d4ef950d77a6af965e8e94b24e8042d4c97ebcb85800779b62aadea43ecc58dc1420004395","ssdeep":"96:cnRI8IIO9UXcSU02DrJJQh9eC97Ae0E0hbDO92pli569p0gY72T4n5jda50w48ny:cRI8YbSFArJJQh9eC97Ar3O92pli5690","tlshash":"86b1c82ece0946f882c758fae0e64e4a501cea47f13c0604b9e5dc6f8614fe5931bb4d","size":5422,"data":"","first_seen":"2026-01-05T18:44:37.320083Z","last_seen":"2026-01-05T18:44:37.780833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","size":375,"data":"","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.fde65c84.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3602d236f82d529fc6b5a8c88fe2257a","sha1":"d293a7dfacf745ca9ab495ee304d2c2e95e66122","sha256":"41a2271a8ad9707fcb703704458870b751128af9bdeb8f74a0e210b0f56e9029","sha512":"766f5c4a1c8f616b8897f3fefa10c47c619c4f820c93463ed7a0de544b0b822b405823d0bd94fe58d1ae09799f4c090a4b6a91f4c2651b38429d33a80f36e039","ssdeep":"12288:0P2xzT5Nc0qc1RsD5NhbpQI2lBuJmEiGLoqu1lR:7KnlD5NZ2l91lR","tlshash":"0635b5ccb2d2f06a43976575813f200bf33ea999b54d8050e629e8d1bcb958d9237f6c","size":1110378,"data":"","first_seen":"2026-01-05T17:17:22.319236Z","last_seen":"2026-01-06T08:30:14.646516Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app~tooltips.d2d8d53c.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53fb2f691a6fd2b203c421e944c4d38","sha1":"5dd766925628b7556bbdfe04b74cb4e8e85fc544","sha256":"fb57f9889f7344f5992957085b8771689cfcbf80f4d44dea5a91bdf33981b781","sha512":"65c144bd57fd0e65fe3ecd320f3ca13be6c11908d5a55167da24dc8773f83772c02868dfeae87fe66b047f4ec0f73da92f4f76c4c55e5c4dbc470603d5e74a17","ssdeep":"6144:Tp02n1qyKHtLp0rn1qyKHtXWgFDAIXOfErq1POdoIgPXsBTa6My1R3wwoxzWWeFP:S9j9ISdoIgPXsBTa6M51a","tlshash":"b715922495a878ed63cf7186908f986e2d6c00338285ee647dd847e727661b63433f7e","size":894061,"data":"","first_seen":"2026-01-05T14:30:06.301943Z","last_seen":"2026-01-30T15:56:34.641563Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.C8BG55BJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a20f3ecd4b28a4c6669a8ca848e4eaf9","sha1":"4b90319c517312cda7e2438bd8eef4fcfbfd9baf","sha256":"300fb5e652caddb53c82a25d38ae96acf3ac65bbd2d41a0ce4dc5cc651736565","sha512":"b39557f62559c7d5dcf138d18427b017357d858bc52cedb07cef2b65321b1431d0d3b027d3c355973a3304257e77e5616cb0e0c0a2116f9d0ac944a6d2d2a265","ssdeep":"","tlshash":"025121c035f17661966b2af3c67f012bf57a1994fa0e64c2b816ed9c7834032935fe89","size":2572,"data":"","first_seen":"2026-01-05T18:44:37.413534Z","last_seen":"2026-01-05T18:44:37.809534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3e43d9504ac603bb7097a53e107dd041","sha1":"10796b92762ad60b379a7843ff6120020eede8ac","sha256":"6cfe2e34d405cc831942f6503311fc60021ffc509ae3889c7be2267352743813","sha512":"56222e187aa9a6381e5bf94d4fe07bb830c02e3913643aa697bde5267b16d4bbfb85a60b25efb5beeb1e6c39c2ecb921f39c5d44864ed3f97bb39be63f2b3723","ssdeep":"6144:4yOVJHIkZm5RGfq/nXUBL5uz2opB2qcrLd:4yOVJJk5RF0xfd","tlshash":"7a74c715ea516ef366f4392db92a29e370324b123b50c27701da5f293e3f80db1664f6","size":349145,"data":"","first_seen":"2026-01-05T18:44:37.530326Z","last_seen":"2026-01-05T18:44:37.72505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","size":5052,"data":"","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.124","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","size":9327,"data":"","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fc11e63efbf720c8e4f561a646ee659","sha1":"a3976410a238bfcba0baa3e859a8cf1ab9c6ae8a","sha256":"757a926518d72f6148d69f9347bba3d501101d8f7cdfaf871997fb0d7e14e583","sha512":"3559c85d435bc7c07120d45d5cd885c6cd45f0beb686df7f82934be0cbb58696bc72c66f53582069b2a90871364918eda0a78ba2ff5d9ed525c97a9052bb09f0","ssdeep":"","tlshash":"9f416d2f35f1102241a3b17d07dbd25173338303584eee683e5c13557f969aa89a6f9c","size":2065,"data":"","first_seen":"2026-01-05T18:44:37.520785Z","last_seen":"2026-01-05T18:44:37.893899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","size":3456,"data":"","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"72a48ba0177be363ea49f79af6c6d9ce","sha1":"40323d5e5b5c01d36772cdcabcb8a16a3fda68dd","sha256":"b91449f5af2756ea0433f88221bcf13f71d40835137e38d3efb4bab4f363900b","sha512":"dd6da13013c142494e98d85700994dde0dd114971b39e7e6e5256af531759b8541ac7845b047f5b7224f1d732d9726bd67476223bba2cbf0d9839f0b1806919e","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fkcNq:/zjplrNZ06rCnLfwF21","tlshash":"0164e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb4","size":331561,"data":"","first_seen":"2026-01-05T18:44:37.305451Z","last_seen":"2026-01-05T18:44:37.805739Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","size":370,"data":"","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app.f906e285.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb5295246ad55a79bcaf809ea6aa31e2","sha1":"8c0e1b57bbe3cdf7d16fa4f9eeb688e207c3d19b","sha256":"bd264dbc2175e8389cc56966c932012a839a4ea31aba3e3f5d8cf2e2f28f4312","sha512":"529d273f04be2caf17727b0c23e96cf2c02932e1966f7436729815f5c26f39e4eaf2cf46d8c40b0bcae38a1b84063efb39d51a84a06ae97f54530fa620807c4f","ssdeep":"6144:kziHkM0nE6gbviZ5FAFDZE41hNkMtYmy4leECyTZ807NHF2NXCeXSL8yj44N2gug:IiHkMWgbrRXTeECy3ANXC8SLGhI","tlshash":"ff150bc8f5c6f4299767a1b0402f100ef23f6949f55e4054f629e8d5acbd08ea223fad","size":957629,"data":"","first_seen":"2026-01-05T17:17:22.187241Z","last_seen":"2026-01-06T08:05:48.410627Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.FZtRXSGE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"07d17928317370d7b2c48fef997f2bb6","sha1":"b664549db260bf66861f0e0bf48de12e190cdc58","sha256":"f14a776d5ddfce1775a316998164372c81fa0cca80b83baee9a68f46d4b163e3","sha512":"4b188c81ad1e4140f4bf58468e0d55a2665cd5e2b7f56ba3fb1527303aa3cd94752d5908396a0fc290ed94abad051dc981ff26113d9f35fa8a8e1411234e37b5","ssdeep":"768:Q61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Z:vzmp7QA/BPWUZ","tlshash":"8a03fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","size":41130,"data":"","first_seen":"2025-12-20T03:09:17.536096Z","last_seen":"2026-01-05T18:44:37.799318Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.84","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","size":182704,"data":"","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-02T09:36:05.663821Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~sentry~app.6ffaf6b6.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"043179025e75b3f210655e32ee0f1a9f","sha1":"368ad62b6af595cede271e7ac4140106ef780284","sha256":"9b03ca1d1601cfaad1efabd6cc84f753eed5273a8746779df06f479bc2190075","sha512":"bab8a9ca8bfbd122f5febe5f793238d0ef40ccfdc2f223de2cab77c157421f7ce45f1c682abdca68466a45bea4705d1be8d21be78a64b46b409ce7123265227d","ssdeep":"1536:cAy1BQKh4+lC4el5txG+u0JnbrpxyR7+hlPp:cAy1Jhm1l0Lan5xy0","tlshash":"0d73a2c9b1d2b02053eb19a5903b410ae77a5994300b8490f67cddde7eba15ee273f2d","size":79172,"data":"","first_seen":"2025-12-12T19:24:48.741414Z","last_seen":"2026-04-04T14:28:08.445978Z","times_seen":3796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app~tooltips.93c93ca5.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d67b9087044e5585c4acb538e272a6","sha1":"d47e429decee4b099cacd5dba2d12c4f5a3852a7","sha256":"89d9722a2143a5cd6801584760ab93793a183f033995bf27bd781fa69ffd6da5","sha512":"77d23f4c40e747e9fe172ca19342d11319c732394c830e392d4004ae7ba03e2cd913fa2255b05c58e3faa71302d4532d1b818553bc93a7b766dacca8dc5af51e","ssdeep":"6144:3Qcoky2VEwazOqUoPl2C2ncpWuiFUKVbofQe8PuMiGkgILSm:JqUoPl2C2n+iFUKVbofQe8PuPGZI2m","tlshash":"b7643cd8b1c5b428e3676124406f140e733e7595f80d45a4f66ee8e4e8ae1ce9223fde","size":320129,"data":"","first_seen":"2026-01-05T17:17:22.307518Z","last_seen":"2026-01-06T09:18:17.6927Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.s8nA2SdR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ecf66efd08003e84bb008de979ef3d91","sha1":"a0b5963a32f1a58cdf1c46ea8f47ca0a1df21efc","sha256":"9ea0c6185ba5556d8d44e3ff5130c74f18ef94ebd1d6cb986d6868f0072626b7","sha512":"5fddd650c79c491dde5e407b1080e66e51f4c6f1ef5f5a48f9af3138c5ad19070d9170f5d417fbe2775b92e78153c2ae24c63529738ed119a8bc42d4fa1743a2","ssdeep":"12288:m552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5+:m5dLfKGJvEvGdrSaV67dmcgUxHtDcAUW","tlshash":"aaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","size":458941,"data":"","first_seen":"2026-01-05T18:44:37.416347Z","last_seen":"2026-01-05T18:44:37.860447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.DmPtqnuK.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b606f6808835850efd51c1547ad7b8d2","sha1":"a928d9d20f2df9728241f1225dac40622fbdbeb3","sha256":"684e04fe8220904a4a994d5cdc1cb4318b3ac3d7c00f86a26a339b5fd47418ce","sha512":"648e4d5abba74d00ed9ef0539e84e01638314368f00d358628cf429c200cd6ab5b84116f9b6b4e5ac436376687668fecde10a930e2c99d088a1dd408c9e10941","ssdeep":"768:Q6ZvLQXAH+dxsPZYq5iFNokZrOEbHJULQMB3ZeaYwy9aOgWCK:r5LQXeiFNo/EbHJU8MNZpYwZfK","tlshash":"2ce22a2832a57e3181abe5bdd0a1383055294a5a92134ec0b7b8b77552fe9b94337f0f","size":32513,"data":"","first_seen":"2026-01-05T18:44:37.406297Z","last_seen":"2026-01-05T18:44:37.739597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"631036c478b6a0b0aaa7d71707779f0f","sha1":"94053f2e94b305e3dda29c04d3ce22346a8336cf","sha256":"0c390ae44fb3e39f9e23de7e61857f53e78be006a2c17cfcd0e583d073fa3762","sha512":"a62202769c20f2ed1686a8fa7c619fc9ae2cf0c3cf33ba268f901422dcce0f910f1ced698eba91c9348863f385c16e9bfa4392c3e220c1fa7d589750fd35a8f4","ssdeep":"","tlshash":"c3f00255790b513d47a3607047ffc20b2827a0a711c1c849d916c8b81fe5ac8c59fbef","size":625,"data":"","first_seen":"2024-03-29T05:33:40Z","last_seen":"2026-03-29T15:19:13.502083Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3adfa8495ba4ce1069ed0edd879074e4","sha1":"cdd4266b28518f1e3b6a5ea897f4e11a11fc00c6","sha256":"83f13796b2dd1a1758be5b80b069e720eaaf22ac1488bb3e68d7f2809ddb6296","sha512":"5d3afa4adc15bf2328ae36a4e7f859409924e555ba6d7cb2eaca25c2be4f62d64f2dca8fcbba162edb1ce383ac36648cd52b181180cfc8165569ddcd2a230437","ssdeep":"","tlshash":"36b0120865e2b82e06edb06513bb6f15b516d5531c1d5652b44806afbfa1013d83c7f7","size":104,"data":"","first_seen":"2025-04-24T07:07:12.841775Z","last_seen":"2026-03-31T00:45:46.296227Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.jNJuUjyM.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e16bc97e2e519aaa79db2ab430984674","sha1":"56fcfa546e547f20ba8c28797bbd74a4e7e4cc11","sha256":"90065fe79041dee1fdd1dd4aecaaa1dbd536e310d4c577ed72981a34970a3bb4","sha512":"6b9100accb8d7e8dd2b9edea65361df1f662cd36ccc709486888084f35eecde6034810e93258d331b64e04d5b264d4965c80ea763e745a64185995831999d7ca","ssdeep":"768:cxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDs:yYVEx+KqM+7rg8Ds","tlshash":"aab2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","size":24689,"data":"","first_seen":"2026-01-05T18:44:37.266076Z","last_seen":"2026-01-05T18:44:37.817022Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.AxOEJzb9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"eedbe56ec5f87538d02bf66916759300","sha1":"7f6abe19844c6cc6eab778065c2279a2b02d8b90","sha256":"3c909f45684d0a9d66311deac3d809f8cb1e0233a0efc11793f0dcc2b34a27b5","sha512":"6c0b24c6b85dd4c4095a625f59ea58909e2a23d9628ff62e8cfa327e4189299f9d9e6da2bd4311ce7b1dc1d6f008ac2bff4c484865d56655e422fa4bb7810e72","ssdeep":"384:jORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6x:jORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFl","tlshash":"196208f170ed657043e616e0a0b70106e5a9552830c9c4e0f59fcafe45eb980a9a7f7e","size":14743,"data":"","first_seen":"2025-12-20T03:09:17.555247Z","last_seen":"2026-01-05T18:44:37.72314Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.D058WQf0.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7200971673a914a4511faf7b99951c7f","sha1":"d6467b30556539a9bb19c6f0f87046d188b95f93","sha256":"8f31f12bf27c9f5f558b8ebf68b006ae4aa8eafba3031b6f42b00d197863a318","sha512":"ba314fc06e226680262c60682367e019218afbed8fc9204f7dd2db5ea0146995d7b71cbb68579bfea2749b90dbce083f8820ebad7f8f1e48ee75ca5c3c4b54b4","ssdeep":"","tlshash":"a351940b993a2433518120fae86710320619d25d3698a0a8f7feb54716bbc95233bf9a","size":2966,"data":"","first_seen":"2026-01-05T18:44:37.482945Z","last_seen":"2026-01-05T18:44:37.814321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","size":78915,"data":"","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5414fc46e24ca75f39260325cdfbf5eb","sha1":"bc1725ddf5d955cc50ec4f2fd21b5e2a96593602","sha256":"d4a866554ed6700ef58695301151ba4ec6ce48f8664cac8979bfdc680528b4f2","sha512":"826d3d720ec11b56f83ea97a72f584853a76161eb447a37a9cd8b713e94afc68bcbaf87e2f4c533c509b98c381d09e3362d94f61766d1bcd0e7fe4d6a7ec1305","ssdeep":"3072:uD14onUvCOrakzXbzYJ5SsB8FHnKDCPnw9BeH0WBt3:41hUaOrakzLzYJ5SPHa9BeH0WBt3","tlshash":"69040a066a483cff4f710d6e5b2a7aa462330d98fa21c032d2b69f3e2f5b411f197595","size":186466,"data":"","first_seen":"2026-01-05T18:44:37.388869Z","last_seen":"2026-01-05T18:44:37.790681Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.U6qnQQg1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8b1d66203e21cc887a0d532626698955","sha1":"61e920a6d237a5d80243b99d6d285435ce21824f","sha256":"92fdd154d24cc269d6f47b4c27fc4ccfcfe1eeb76f4327daac3e1b8bf68d4367","sha512":"599e518245c706aac96a89f977d12d1311b044474d1686e471ec4cce03d0c2ded96d374c5f3a6318b225b0f5209aa26da80bb278fc5f7783ea20135458c67d28","ssdeep":"24576:0iHKN2yyH6LAD+d7sU/dkRSUT8A7Dued5mx+hpi2WuTOj6nvbzba0LoqhjoCThdz:0iHKN2yyH6LAD+d7sU/dk4UT8A7DuedT","tlshash":"15554b8a7645347683f75599a0aa0401a23c0b45f5a48cd0f5fc8e7e2aaed309377f5f","size":1294171,"data":"","first_seen":"2026-01-05T18:44:37.531952Z","last_seen":"2026-01-05T18:44:37.912184Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47542f5453b926ee31b84dcec583f01","sha1":"a98be511b95f998eb3f3524eb98351da0283f769","sha256":"215c51760bb486283b7da84887bc192f3dd0697ca55556af3c570222488767fb","sha512":"c57b1e4a0e522dd714f5eddf1c2c2e851d03d3055b0590f37d3de8e9168962660adf38639779650ee2246ed322d79609e64dc253ae5eab3baaf94a670abd6a6f","ssdeep":"","tlshash":"a0f0c01360937471cf3368b8271f4365d99b406f89d25869f7bf8412af35e4460abc1c","size":571,"data":"","first_seen":"2025-11-15T07:52:07.145608Z","last_seen":"2026-03-29T15:19:13.505302Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","size":3484,"data":"","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc9d7cd7d6626a410e73d099737951f3","sha1":"6f3b23cb137a9f0fadfd9abcf76c0356cffbf545","sha256":"23eed609fecb1fa5ddc8646ac9b0cf0c49a76a5e7ebee2dc79f8b630d4b5abe3","sha512":"cadd23dd355914f7cf21d371130643a7f42901934ce4e3eb94c3dc3167134105a23ab450730a2c06920fc1eeff3f23e4d20379ecb57ed3d6ea0b4e82d5d628c3","ssdeep":"","tlshash":"3b01f42a7ca470b0547370ba5bbba144223632030804d6a43eaca7161f3a9ae9dd3b48","size":664,"data":"","first_seen":"2025-11-29T08:32:41.821293Z","last_seen":"2026-03-31T00:45:46.297194Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.DPPgzxBo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"abedac9f068f1ffdd79b1b3beddcbcce","sha1":"14cbb4933bb63f9b5dc51857f5c6ae76479a281d","sha256":"d6c465eacbdc86f61a3b0e2ea903ea3505f2eb7fe81566ecc2ce870db5e7464a","sha512":"527fc8ccf0f28a351d1379923a8c2ea76acda946546df64e17e0697ff0010fb699b372082de42680e8cf98049050d096f69ce3bdecbe534a81ba1bbf6d42758b","ssdeep":"96:ftJ7qGfAaycByHKC5mTsOURWSwmSiQ5ZpJLZejQg4sc9GDhDKTAoExk0uIOVPIM5:TGUKAAZqmoztVxW2lgLJwsmKWa9C","tlshash":"61c1da9d7fbea13115d949e160ae7046d37950d8f019c051b06caab83913aca89f3f4e","size":5967,"data":"","first_seen":"2026-01-05T18:44:37.486938Z","last_seen":"2026-01-05T18:44:37.735249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6635ec19e8e43a5b4b5ee54a191eba5b","sha1":"e4de42c33c433ebf500683998b6607e180e966aa","sha256":"884de5bde90ad7861e73694071880d494839d728cc6ef90ce6edef702ec4544d","sha512":"5b31bc6ccfa65f15634b2ba52d30e7bde48a2701e1607ca885696f3e70aec95226fe48419c825d6b9800b764991cd7eb56d8c85651283c8f319b20483c8bf20e","ssdeep":"6144:lJgteEaaVnRJObujKYp98fDHHYOyQFz0nssrWYxRZV:2WbuNH4ansoWYxd","tlshash":"16b4fa8e77d4a87ec3a65520643f060a657d20e2b24c9490f0daccd42e799797263bff","size":502175,"data":"","first_seen":"2026-01-05T18:44:37.404152Z","last_seen":"2026-01-05T18:44:37.877089Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"de67a6c6aaaf800dd47099cb738c73da","sha1":"dbfad2730311def8f2720b5a8e0a669d09d41d0d","sha256":"acf908b14f29165de87dbc1c3ec37b7f04935cb917921ec280b8c4e3ab7af31b","sha512":"0c50673ce74683ef2377c054805c7438a18d6da1c60a37f0e157c2eb635800ff904104b5b4de7c96474c3cdada07b8f63c3e31b1e9a8293d76440c65872360f7","ssdeep":"","tlshash":"07f0270e9cc507a457f810c453bbff1df29f210c985d8665c3c68892761af9798363e8","size":484,"data":"","first_seen":"2023-12-10T15:49:15Z","last_seen":"2026-03-29T15:19:13.506535Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5cb0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2243a9649b478c8c27bad99c6881911","sha1":"a733bf1815878514210e32e3637485cbb9e1485f","sha256":"ea9556644bf46fb689af1bafef3a8ccbc637c73c3feacfa4499d940e232c0bc1","sha512":"38478dfb5147cfe24435b383a2fe056731e03eaf608fd1fd8c19eda44c09ce157c698a9a7763351fb79c5f1944e5e60998eb3d728f9f915e6b8d928beb1f4873","ssdeep":"6144:tl7nTmlObujKYz1U95efDHHYOyQFzvns38vW55jaJddpC1JF:PTpbuNz1cEVnsUWuNp8","tlshash":"d384188e73c670269396e078503f118ba57b29e2f45cc895f189cce42e746aa4277f7c","size":399403,"data":"","first_seen":"2026-01-05T18:44:37.378011Z","last_seen":"2026-01-05T18:44:37.750305Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-it-json.87d963fe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b81b6985a6b44dc7a395aedf890025ed","sha1":"de9716672e529341cd27360666a0ba3819bc05a0","sha256":"93868e30712f1b1cab8f1d7d0fa9ad01fddd2cebd09717c40a2d7781dfd8de8c","sha512":"0c1d59cd17a6efa1674b06682810e3819c8684448e81d0ffd668ee96fd798c6fb60be9eea2fc100dd45614b249a4e860027a52e047a9d041f346de76b4aa7c82","ssdeep":"1536:yxccNWAKZ13KafYSrnwwMmO9H8SgpxrnB5/7u:yxNKqT0wwMmY6nB5zu","tlshash":"6973b42c4c64ac3106af03e7999a7c5aebf886debbc85514fd95861c11cdbc0e1af706","size":78866,"data":"","first_seen":"2025-12-25T07:42:43.803795Z","last_seen":"2026-01-05T18:44:37.831028Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.DCGUNG1w.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a3170ba3adbe5f87c1b52922731e2d4e","sha1":"e91ee5d42326cd175a25d4e37ec666b9b104ab8b","sha256":"904f4137561ae34a2bbb4a4f8bf6020a27cb77ee7dc894c33ea03378f1f4e5ee","sha512":"8764d24f1710bae01942e2bd53f9aa3e33ac404185401d33c642b330f759676383e9a248a5c4610b9b7939f5ef327fec9d3cc7dc9c858b5de544a03c2c9ee08c","ssdeep":"192:VOA7iZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrC5:YevFuABGBVMsZ//eED","tlshash":"6732449def68a0b204939855816c70c3c1e994a0a2362fd1940d1ebafe9f561633fc7e","size":11484,"data":"","first_seen":"2026-01-05T18:44:37.401342Z","last_seen":"2026-01-05T18:44:37.804113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","size":28371,"data":"","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CDjhluz0.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c11ef2b6eb6d7be33401fd8a3e8f092e","sha1":"2c596d5376a552ed166a78706566ddd33ad20671","sha256":"04c8fe3bfb2b5d2bcab0b9f0f5488196e5f30f0ff7008866429901a6f1c52954","sha512":"f1c667061f75e55f98d046603719f6efa79aeee1719828799b2ede04ec3856977bcb02fff3da5ffdc5e4be746dff1e0b014f8752e8484cfb082ad1a32508e1f1","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscfp:CFen6Vj3FVmbKeylkHLrAobDezfgSf","tlshash":"7d937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","size":96750,"data":"","first_seen":"2026-01-05T18:44:37.32545Z","last_seen":"2026-01-18T23:41:56.310501Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.BTpAVfCh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b571190a6b27ea42e99ad99333d10e14","sha1":"92b8b84ee5a726adfbe89234ca010c4b5f9285bf","sha256":"18a4d3eb047f3c82a79d0efea6ae57d0e253b5d9a6669054c2ec4ab2101623e3","sha512":"12960f0abeed2cc00777c4e35c10187b006db3346993ae33ac2de41de0ef082bf002e306fc645371dc13bd4263dddc6db461c5c886578c91b50d9a85babaa161","ssdeep":"","tlshash":"7f31044add45ecb5e69bc8ddc0200803400fbd55f3e5c6ace6ada6f8c7b41a89525735","size":1636,"data":"","first_seen":"2026-01-05T18:44:37.287518Z","last_seen":"2026-01-05T18:44:37.747928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-04T14:50:17.505894Z","times_seen":62958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"34.199.152.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 690\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":690,"data":"app_id=cnjqphyx\u0026v=3\u0026g=501f3d4e163f7ed455044a1e8345e7b9d2661a70\u0026s=c70ae9ca-beba-4b82-b0c1-bd0684d92c2c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=fe086c59ecd7c657\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=-1\u0026user_data=%7B%22anonymous_id%22%3A%225025b99c-05f0-431b-b9b5-bab496de60bb%22%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026device_identifier=39875cb6-b749-4c6e-902b-c2de1603c3eb"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 98a2f35f66b42eddd9c7a0e6425d3e5bda30fdb5\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0024ijd5ousav1qgnqm0\r\netag: W/\"0aee076d2ce9aaace8c082b538ddd2d0\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.170853\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6436,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b8d256ab717f9257ca5bc8f62196910","sha1":"9bcab0944f68285c36d7fbe3526f0915be39f117","sha256":"0aee076d2ce9aaace8c082b538ddd2d03b53688a0322ded754765e7e98ef1e88","sha512":"73ac59f97741ba880dd5e31bb981df082f40729be60cb946798dd6ade7525cd784a325267e335a8cdf882c8c7301b85e48d867498fe7b8e72a4b179a1335c29d","ssdeep":"96:4Q9c7R2aRvUjNV2JhHAQzlGjzK14zMwaLjGMlbjfZ9B1kAOU5zVfwHwhPD1O6tLw:4Uc7RhRvUjcgyTxDBDlw+1O4GtX","tlshash":"f7d1988c89481c7e73cb82d9c7597e0a0b799197f1943d88f9acce2c21d7399526b307","first_seen":"2026-01-05T18:44:37.708311Z","last_seen":"2026-01-05T18:44:37.708311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/01f20af8.d.m.CSMfGuoz.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38548\r\ntraceparent: 00-bddd7d66efc41b568b17df526b91039b-c8bce51535c4ea19-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-9694\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 572215\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30849)","md5":"afaba370fd585ce57f5aa504fcc65d5f","sha1":"1aea356e5fd76935c7e10c1a295789ad71ad49ef","sha256":"4dff2526e48e5bdceabb83faadd709460affa4c8803c4f3f913778b8d5ef1667","sha512":"79256de618deff22050022cb01eb8ba3ce9d8fe45d12c0e0e32ae5e9955262f5949e8226cab8510b143a0162f1f620aff8ff0fab280c8a2c5ba6a3cf8817fd70","ssdeep":"3072:5LwZR9YYnU+3hyAIRGyBcl8oJBTEV3V5fRE:5LwZR9YYUIyAIRGacg2","tlshash":"add3e5c872e2f06283e22470002f440af27e6d69949cd494f6a9d4f53df995e8637f6e","first_seen":"2025-12-20T03:09:17.502059Z","last_seen":"2026-01-05T18:44:37.7109Z","times_seen":7,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 11:02:04 GMT\r\nexpires: Sun, 03 Jan 2027 11:02:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 200505\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-04T15:12:59.537019Z","times_seen":5118,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":113,"dns":1,"connect":10,"send":0,"wait":8,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/DeadOrAliveIIbonusBuy2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:52.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/DeadOrAliveIIbonusBuy2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 66164\r\ntraceparent: 00-8fb6e2d2bc52510b55dd86bdf37c65a3-f8ae947e531aed78-01\r\nlast-modified: Wed, 21 Oct 2020 13:23:36 GMT\r\netag: \"10274-5b22e41440b57\"\r\naccess-control-allow-origin: *\r\nexpires: Mon, 05 Jan 2026 17:09:29 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 4944\r\ncache: HIT\r\nx-cached-since: 2026-01-05T17:21:28+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"444fbf32d121c36d9dee1456ae9a6cae","sha1":"82e77872d201c12af0dc97341bb7914427bdf1ed","sha256":"f53ede064c57acfb94b322422c3e094c2fcd8249887e335039cc0a707ac43354","sha512":"a81503a2128e83e41f435abcfef211405979a79c27637b5a16f5ea4c0e0f0e9d860ee6abedf1c6a29eb2bcdbf672dc84dd9d770c7c559ce95d0fcfcbcd4f2de4","ssdeep":"1536:Y3ZuQmqCnCwiUXl1dOaqyIHNEtEv1ZqRMXJJB0T3+p+:YAQdCnCw5l1erGt61Zqi5JBK+4","tlshash":"50530205b9521b73963ab841f22584ada9a70407c378ade45bfbbf43de2c16590f0ee0","first_seen":"2025-02-07T04:57:00.933035Z","last_seen":"2026-01-05T18:44:37.714174Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i64cl3er5t.com/?serial=39258\u0026creative_id=2574\u0026anid=wjhq0qj5unsrficf3nsr59lg","fqdn":"i64cl3er5t.com","domain":"i64cl3er5t.com","tld":"com"},"ip":{"addr":"172.67.167.148","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T18:43:47.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"i64cl3er5t.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 20:48:21 GMT","end":"Sun, 22 Mar 2026 21:46:50 GMT"},"fingerprint":{"sha1":"BC:33:3D:E2:A7:D7:9F:D2:52:EE:B1:25:32:E1:79:21:68:E0:ED:BD","sha256":"06:6F:CE:56:A2:BB:79:97:F3:83:48:6F:45:B4:52:23:75:8B:4E:6C:B0:80:E8:D6:34:44:72:88:02:7F:56:F4"}}},"request":{"raw":"GET /?serial=39258\u0026creative_id=2574\u0026anid=wjhq0qj5unsrficf3nsr59lg HTTP/1.1\r\nHost: i64cl3er5t.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nserver: cloudflare\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-cache\r\nx-request-id: ec54d9d68c22a5750cf0d7a29cfc4d64\r\nx-runtime: 0.063342\r\nstrict-transport-security: max-age=0; includeSubDomains\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJoI%2F9JRtDE34bbjlGkgmBX19lNQrJfBgR%2Fb77dzR%2FzR%2FyD4vVsdrRUxh765KkjRCZyLpHALzD5c9S4dW1H5%2B8ewrmM8OU9nOYU%2Fog%3D%3D\"}]}\r\ncf-ray: 9b951f8b3af8b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":204,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/8a28bc4d.Zz91Zmdd.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/8a28bc4d.Zz91Zmdd.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 3892\r\ntraceparent: 00-e0b464eb79718ed65b4e4708349bb092-7b32a0af9307807c-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-f34\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22986)","md5":"72bda927578b5aa7dcb8a5f16e2485db","sha1":"123538bf37d8ac1034de00633da3c254090d25ab","sha256":"14b7a03c801bac68f96425f2063f7518368964f93c48cf93242dc5920bf3609c","sha512":"67468312135ae0cbc84132b9e0238bc5beeae3f32b95086e0278c11e54938f985dce5c2a900c41a8985258021e3044a35d6f8db63b6429f981723d3b532c36d9","ssdeep":"192:+BMmdvKyAFB6C5S6elpt5DV9829gSm2hd2HaBEQpPL+2P2gtxvfTQlBltomDFyK4:No5GB6Cc6yuEvfrKEXWWl","tlshash":"11a253ace290a13aad27e53bd398c6cc6314e980fd52db65f312712984cfee1077d949","first_seen":"2025-02-07T04:57:00.60814Z","last_seen":"2026-03-31T00:45:46.166838Z","times_seen":129,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8a28bc4d.d.m.Co4wPcz3.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8a28bc4d.d.m.Co4wPcz3.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-c17356fdea852d3c02f1ded97a30fa22-104d8b0b8221e2ea-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-9eafa\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":649978,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22587)","md5":"fde762892a133b7e9b5fe78c10a8829f","sha1":"0ea5fe2dd52a0ac4dc7fd7c1380f229f8ffe36c7","sha256":"923db43808690ee9aa0446a0a52d6356ffa4a868e1b9dd5d68cd3dbf729b7c50","sha512":"5de8ab00f03e62b53407c48046cc29d5c78134be361fcd9215c235fc5b73b1048c9f03fa6aff0d15f6c93116b06f22113496ec25b6edd229fcae7d49f5767b21","ssdeep":"6144:0BdNtcFikOGxQ7KGZeh3Lep2ZS3wtURfCrrbAIhFk6oN1Omd4hk2GUjeum5eD:CDcFxlwAqfOrbAINQF5k","tlshash":"a7d44b5a7251783647b241e9806f0646b3391a2e9448c85cb6a8e9ef38fdc4531bff7c","first_seen":"2025-12-20T03:09:17.528049Z","last_seen":"2026-01-05T18:44:37.718747Z","times_seen":7,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 483\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":483,"data":"[{\"id\":\"62f65c6a-8cdf-4ebc-92f5-8d2647993b71\",\"qKey\":\"feb2448d-302\",\"operationName\":\"getSearchGroups\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"b1390f74-f683-44f9-9f1e-528fd9861436\",\"qKey\":\"f48f5ccb-276\",\"operationName\":\"getEgsCategories\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"ts\":0}}},{\"id\":\"c1755a38-eabc-4382-b1f1-24f54457bbbf\",\"qKey\":\"ab83c8e6-3794\",\"operationName\":\"getLobby\",\"variables\":{\"options\":{\"type\":\"SLOTS\",\"sportlineFlags\":\"reg,urlv2,mm2,rrc\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":901603,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"edb5cd33c514631b644f9d7e118b2c79","sha1":"dbddaf7bc7209f4611013fa7157af935784da194","sha256":"e68f76853c4ca75653f7e1e99960d965f159624e452c59b9a5153382a8c94f50","sha512":"b20c8ee3428842ef212a9591c83811e5b715579071c51e4eaf1cd19a63ff37ea1780ef4758ef16bed08b278a412d8ef1709a179b62e246f70858642697588ba3","ssdeep":"12288:bTVTnT5TZSAH8T8Le9YdynTjLe9YdycTxTJ:bTVTnT5TYTlTpTxTJ","tlshash":"0915ed7b6688782fc38953943caf38c8a21e34177a40e756b31e59654bb4dfa30b719c","first_seen":"2026-01-05T18:44:37.720397Z","last_seen":"2026-01-05T18:44:37.720397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2df41dfd.d.m.AxOEJzb9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2df41dfd.d.m.AxOEJzb9.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5335\r\ntraceparent: 00-4b2841457a859cbdb47781cb11c40700-cd4df8762a716fd2-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-14d7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14692)","md5":"eedbe56ec5f87538d02bf66916759300","sha1":"7f6abe19844c6cc6eab778065c2279a2b02d8b90","sha256":"3c909f45684d0a9d66311deac3d809f8cb1e0233a0efc11793f0dcc2b34a27b5","sha512":"6c0b24c6b85dd4c4095a625f59ea58909e2a23d9628ff62e8cfa327e4189299f9d9e6da2bd4311ce7b1dc1d6f008ac2bff4c484865d56655e422fa4bb7810e72","ssdeep":"384:jORbRbFbBQmjArdP/LDbcnxAofajzncvt825LCRJdh/3WFgBBYxTha6x:jORFbF1dAR/LPcnxJ4zncvZ5uPD/3WFl","tlshash":"196208f170ed657043e616e0a0b70106e5a9552830c9c4e0f59fcafe45eb980a9a7f7e","first_seen":"2025-12-20T03:09:17.555247Z","last_seen":"2026-01-05T18:44:37.72314Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/yggdrasil-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/yggdrasil-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5680\r\ntraceparent: 00-14bfaed4689f07de1779c95e61045c8f-83e88041f484062e-01\r\nlast-modified: Mon, 07 Feb 2022 09:00:29 GMT\r\netag: \"1630-5d769d50b23e2\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 718742\r\ncache: HIT\r\nx-cached-since: 2025-12-28T11:04:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5680,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd8a7f223b63f0192c18663ed39840f6","sha1":"b722dea4a85f9119ab396f3310395e046457a423","sha256":"ebbd0c8ab07eaf201ba4f638e4b86a999d8423e0000fde6724076ab3abc8d774","sha512":"93cec700e5f964f0c68a21307f0632d9357b2eaf237eb698ec0677eddfa951c7fdfa924f3114b3c85c71fda52ecaead442304aa0b86fa811464ea9a2c8d9a61d","ssdeep":"96:pmMaelJ0mnwIfAYVX+6UJ5Z/lFHRQBcT2Jn+baSl+RMo56:pcejTIYh4BtFHyJ+bx+mH","tlshash":"9fc1c69d23a5a3fcf048f3b9d251d879bd9a5dd13212c16ecbe61c56c87106e95a0cc3","first_seen":"2025-12-25T07:42:43.784332Z","last_seen":"2026-01-05T18:44:37.724181Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638633662\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026tfd=12634","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=3\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customerRegistrationStart\u0026_c=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638633662\u0026ep.event_action=Registration%20start\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026tfd=12634 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":104,"dns":0,"connect":21,"send":0,"wait":58,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a48612de.d.m.wAYkMhfk.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 59369\r\ntraceparent: 00-1ccce4a5107040db0f7c9d16eb0dd855-8e3e2c838aad6c2a-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-e7e9\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":349145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37484)","md5":"3e43d9504ac603bb7097a53e107dd041","sha1":"10796b92762ad60b379a7843ff6120020eede8ac","sha256":"6cfe2e34d405cc831942f6503311fc60021ffc509ae3889c7be2267352743813","sha512":"56222e187aa9a6381e5bf94d4fe07bb830c02e3913643aa697bde5267b16d4bbfb85a60b25efb5beeb1e6c39c2ecb921f39c5d44864ed3f97bb39be63f2b3723","ssdeep":"6144:4yOVJHIkZm5RGfq/nXUBL5uz2opB2qcrLd:4yOVJJk5RF0xfd","tlshash":"7a74c715ea516ef366f4392db92a29e370324b123b50c27701da5f293e3f80db1664f6","first_seen":"2026-01-05T18:44:37.530326Z","last_seen":"2026-01-05T18:44:37.72505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/054854ad.d.m.ChOzrh1E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/054854ad.d.m.ChOzrh1E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14927\r\ntraceparent: 00-8ab0954871c371d58cda8e4ed42ab329-a7f37d3c4e73abb9-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-3a4f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68977,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6bbc8b3a512b218851b400d8c7c88bfa","sha1":"28557da292732b0ce9f90184dfe993140c3e7b3d","sha256":"5089a5710f0609eb3ac0c461776edccb23dfa5552956a03ecae108e7a7b56a92","sha512":"0521cc627f5f639f5a9d4f3bfdab39f5ba138abbf3f6104cf1af707d8842f48ee4ccddfd668e3bf66daa04af6d34e9e54a577d4e96a4598d574f23ffa0aedfe4","ssdeep":"1536:uWOoPHMorDC8EYfWo//0VFiZBHS+/tIyUEJajYN2Uwn:ujorOvYJ/OqIyUEJa02UA","tlshash":"a863620ded0c55faa3e650b9f0f54e0a5518ae47f2784580bab5cc1f9488fa8a36f34d","first_seen":"2026-01-05T18:44:37.396008Z","last_seen":"2026-01-05T18:44:37.726148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/images/typing-indicator-dots-dark.b4911cf33eaefdefd295.webp","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:07.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /images/typing-indicator-dots-dark.b4911cf33eaefdefd295.webp HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 13110\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sat, 20 Dec 2025 14:31:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K2dBGMaYYnubSCBCE302w8SnkixfriEg\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 16:56:57 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"4a2b68bad9e72ae6e95cbd8b5c8d89be\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 6431\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: 9uOm_yUcRIFM4Q74Ee8aKkh8gJFmHv7OfZK3-6ORdQlqk11C135Teg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":13110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a2b68bad9e72ae6e95cbd8b5c8d89be","sha1":"a03675fb458c08042e996913ee2b0f1304015f19","sha256":"a33b1882b4052fa0f099caea48a19c4d49b088bf370c013b042bdbd723304956","sha512":"766424656fc3636cfdfac75854466b8408e633fce962473fc1d8c966fa72308f6e3f0162d4b2021e399e9695d3d0ee93f8d6c9689a793f6e0bdc5f86262badfd","ssdeep":"384:3C9X27RBsApvv8/10SEc0qPZbRY8GuQiD2ifu7:3C9iRSOvo0dc0OYZjif4","tlshash":"71429fdb1782b919e1232df94ed196e509032de61a0b5fbc50cbe0b70091d99ff16eac","first_seen":"2025-07-01T17:19:57.239392Z","last_seen":"2026-04-04T14:28:08.407683Z","times_seen":6570,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7a71a6d3.d.m.B5bZndq4.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7a71a6d3.d.m.B5bZndq4.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7333\r\ntraceparent: 00-17dd630df715b03928af03fc4898fb5e-4966416eea26d23c-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-1ca5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28320)","md5":"55266eebfd3df9e2b00ac7bf97c7390d","sha1":"a5ba38d8b28217ce5be2798c464d22ba5aaa582e","sha256":"85a1e1b62ed637a3ad2af5466421365fe525652c05bf6d1df5f519d3d119f955","sha512":"5b1a69ed27f1d046aa4497b1f5b4698de05d11a52224b95f785aac0912c4318ba3c19fb71ca23f64755931b1d45415e7b9c3e438436620248054c581338f6adb","ssdeep":"384:QgcWFD0Law+fOCxSgM5ScHws2YdA3V8eHmPgacWjcSplyrMd+XjXmQpIaEF3n:Qs0eXfOCol5SPYdA3upg5SpYrmn","tlshash":"c4d292c431d9f5e14293a624403fa20bf27a3d72041ce598f732eae67c7465a9177e3a","first_seen":"2025-10-09T22:05:52.465672Z","last_seen":"2026-01-25T14:09:20.215637Z","times_seen":53,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fb4472f4.B8JPjuzh.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fb4472f4.B8JPjuzh.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 179\r\ntraceparent: 00-c37c907fd3f407a695202ab6ab9cbc0f-4cbb09ec890ed1c4-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-b3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (502)","md5":"410b14377b050450a589c7412599323c","sha1":"861729bcfdaffd5e3e3a9513319a1ea8df0c9da8","sha256":"1105e16f27b75f5d90f31b036bedc1e82d1b0a480da3b85f1aa81fa30a988ac2","sha512":"0027fb899fa855187b7bfe9d683ec7275a497a5b7cf45cbbd1e5cfa6af96dead9b77bbed87ca5e4d97471050018c42ddf1820716a3d0c741d07afd431a6026fe","ssdeep":"","tlshash":"a7f0b4d50d406b3bfb37688ec0e3359163499d11e18245899a50187d0ea434241b1a3c","first_seen":"2025-12-08T11:02:52.76845Z","last_seen":"2026-01-25T14:09:20.094523Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/video_poker.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/video_poker.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\ntraceparent: 00-7dbb9e728ef4f1b5f21e24470fe8042d-15b57c619c601db9-01\r\nlast-modified: Fri, 28 Jun 2024 13:45:12 GMT\r\netag: \"859-61bf374e1215d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f54a335dc512bfbb32a481dbe99fec65","sha1":"93be1232f742dfa382f3349b7ec5e0db9a8a2230","sha256":"13b710020acb4a4914b3773ceee2b981f8c96e443e66616feb8c449825aa0992","sha512":"4ea64bc628e9c2dc6c60b8bd360ac0ec75543190ea2cae33c41976733afa8a638595a6e009b6c1c5d58c8bd647cbfbd3ddc49f0d09d345180eabe080d50b1146","ssdeep":"","tlshash":"c94144e657d453d07d0feb61c9234d32f96b34b7e5bdd70d9120e99061232b68849cc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16732Z","times_seen":58,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~sentry~app.6ffaf6b6.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~sentry~app.6ffaf6b6.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 26228\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Fri, 02 Jan 2026 16:48:04 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: ya.Ke1iexkNSQU4PQYft23oJB9mVi..1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 17:22:36 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"f02797b80995cdd4a956d9912aabd15e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 4891\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: SykWUsoAdJY4EQl4SwX8y182ht0IDfubY3lgwrCpv0MWNHuXAP5kZw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79172,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"043179025e75b3f210655e32ee0f1a9f","sha1":"368ad62b6af595cede271e7ac4140106ef780284","sha256":"9b03ca1d1601cfaad1efabd6cc84f753eed5273a8746779df06f479bc2190075","sha512":"bab8a9ca8bfbd122f5febe5f793238d0ef40ccfdc2f223de2cab77c157421f7ce45f1c682abdca68466a45bea4705d1be8d21be78a64b46b409ce7123265227d","ssdeep":"1536:cAy1BQKh4+lC4el5txG+u0JnbrpxyR7+hlPp:cAy1Jhm1l0Lan5xy0","tlshash":"0d73a2c9b1d2b02053eb19a5903b410ae77a5994300b8490f67cddde7eba15ee273f2d","first_seen":"2025-12-12T19:24:48.741414Z","last_seen":"2026-04-04T14:28:08.445978Z","times_seen":3796,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/drops_wins.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/drops_wins.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 12382\r\ntraceparent: 00-d24fe30b47e41f570503b3a2ed211e0d-9e1f73ba4f38a931-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:50 GMT\r\netag: \"305e-61bf36c739963\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 24 Jan 2026 21:56:17 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 938854\r\ncache: HIT\r\nx-cached-since: 2025-12-25T21:56:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c33bfc0a66981351db0da8fb6c69da55","sha1":"55b49d3376218cce5808e9f5a434b6f6d99d62a8","sha256":"62b722eca58786138391eee4ef1d2d49b184341f1a4ba35c5513b40af52b5c18","sha512":"6659c986c63d1114a99119c8cb1414dafeea1db8e51327649da42936514ea4a0f7176fe1e0abbee2cf0705aca3c5fccb7f61aa94324920a61bc50fc58efa3e0a","ssdeep":"384:MslV4bttY5l8mzagkwtzzVS4klR+VHWZWFvsC:vWt2l/Kyz+IF","tlshash":"824285f7a2e8b1e4e047e7b0d83295b1f65f38ff3faa97854294dad46714198848cc50","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.205158Z","times_seen":63,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/instant_win-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/instant_win-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 413\r\ntraceparent: 00-22e3bd5959d23897f18b07a7b9025a42-ccd840b1a20fd482-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:59 GMT\r\netag: \"19d-61bf36cf7dfa0\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 03 Jan 2026 19:03:24 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 171612\r\ncache: HIT\r\nx-cached-since: 2026-01-03T19:03:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53d8467444ec8a15407dd22a104df3c8","sha1":"c57ff6a14e02b2d2b88bda518f2ca548254d9fbc","sha256":"9e8fadb0932ffc1f1a4937d9ab37505a34a35b6d0c05fdcb7f00f8290934c9d6","sha512":"3a2e6ee1c391dcb602d2767169dac90216669c2d8279d0f6d4877c03f86c91b1e1df688ab5b75a0ad6088801337f3fa1bf1b59496ffa3e5784ab03a16d6cc84e","ssdeep":"","tlshash":"77e0abb9c448b7d4ea08c7f1a32c6b6da2bd70c2b37009d592c1760961060bfac8a888","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.16463Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/playngo-dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/playngo-dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4058\r\ntraceparent: 00-a858dad1e3eebc23dd7efb68e7bec737-41c06e9614c9be54-01\r\nlast-modified: Wed, 05 Nov 2025 12:40:59 GMT\r\netag: \"fda-642d842b1b8f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 07:55:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 470673\r\ncache: HIT\r\nx-cached-since: 2025-12-31T07:59:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd546e671acbd8904107f0a12ac564b7","sha1":"594c51208445a8a0350a0685744afddb7e20d7f5","sha256":"1dece0fa8fbd1f198d0c430a18a735fd44114f6d7ca896870682f2287a712e0b","sha512":"57024c021efc18027ef79d5143379a6d622195a79ce5eaf7ebf2465538ac73b7dd63b92b849158573da21df26d49733ac6e32c601b2517d9560042a1bb825ec6","ssdeep":"","tlshash":"e48142deaf5896f4f149a3b9661ad07bbf4305e56f818968cf140f07b80489c5ca84eb","first_seen":"2025-12-03T23:02:23.146767Z","last_seen":"2026-03-31T00:45:46.1678Z","times_seen":23,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:56.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 183\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; shield_FPC=SCtfW2H3f2uTBokrpQCLOJ4g3SJxmMjfzM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"[{\"id\":\"a8467478-28fe-43f8-bf3f-310cb10f0819\",\"qKey\":\"1a9cc015-159\",\"operationName\":\"getCmsContentTranslations\",\"variables\":{\"options\":{\"key\":\"WEB2_REGISTRATION_CAUTION_V2\",\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":579,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e3694052b4ea589ee41b97d06375a8dd","sha1":"2c1cfc5e4b731ce8e4d1f416450cee82416bc97b","sha256":"906ef040510768b21972c38754e29c5202f8620ab6d2096b50c90ceb7cbf9e86","sha512":"b02a98a76faf4d4d036770f1ba5981bcf879f3f3bba2ca87f212578eaed3c0d2e67589652139d97adf3d36dcd0cde1ce8e0ac341b7a6697fcd094063f8fc841d","ssdeep":"","tlshash":"bef0e129a8a64c620dc302ca3b92c50ee735f400a4517227575c43143b5ff2c662bad3","first_seen":"2026-01-05T18:44:37.733209Z","last_seen":"2026-01-05T18:44:37.733209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d1f76d1e.d.m.DPPgzxBo.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d1f76d1e.d.m.DPPgzxBo.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2474\r\ntraceparent: 00-6329928837de30e579c7ac48feb66806-216512d96f29fbe8-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-9aa\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5967,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5916)","md5":"abedac9f068f1ffdd79b1b3beddcbcce","sha1":"14cbb4933bb63f9b5dc51857f5c6ae76479a281d","sha256":"d6c465eacbdc86f61a3b0e2ea903ea3505f2eb7fe81566ecc2ce870db5e7464a","sha512":"527fc8ccf0f28a351d1379923a8c2ea76acda946546df64e17e0697ff0010fb699b372082de42680e8cf98049050d096f69ce3bdecbe534a81ba1bbf6d42758b","ssdeep":"96:ftJ7qGfAaycByHKC5mTsOURWSwmSiQ5ZpJLZejQg4sc9GDhDKTAoExk0uIOVPIM5:TGUKAAZqmoztVxW2lgLJwsmKWa9C","tlshash":"61c1da9d7fbea13115d949e160ae7046d37950d8f019c051b06caab83913aca89f3f4e","first_seen":"2026-01-05T18:44:37.486938Z","last_seen":"2026-01-05T18:44:37.735249Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/i18n/it-it/1767610542317.ff9ce.js","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /api-2/i18n/it-it/1767610542317.ff9ce.js HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncache-control: max-age=315360000, public\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":174929,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"9046c283a5bc34746e4c16c6de9ef8f9","sha1":"2e47f9b38220070522487d444f5973e504128037","sha256":"5ecc1e606f5fa0db26a7793614f783046a29c518841dabcb33d7a0d635ddf373","sha512":"625d4e636c1544d6141ec109525c83dfe7d5e2aebac77fd298aef6b5770287a459fe6d3b81cbd61fcb0d5832a4852d82d1e78aa8670625234a557fa0e5f4f56a","ssdeep":"3072:awBaktaQYmrbAc2Zl+tqymR1ZV8aMsfGxc6qa7eJWtloXGZd1nUSylB0bf0ojXEJ:a0aktahmHAc2DEqymXZV8aMsfGxc6qaO","tlshash":"a604fa38ebd2dbd3be96370831222981b1b1c75fbb8c529a41da052c31df65c31b95e9","first_seen":"2025-12-25T07:42:43.844661Z","last_seen":"2026-01-05T18:44:37.736197Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516078\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/images/typing-indicator-dots-light.5721bd84269f3292a306.webp","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:07.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /images/typing-indicator-dots-light.5721bd84269f3292a306.webp HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 13034\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Sat, 20 Dec 2025 14:31:53 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: OQYSbsaTaGgUUyZM23EY5zzmgzmLhnWv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 16:56:57 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"b700720d35e89d819d57de437af03efd\"\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nage: 6432\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: wW7Ej8kWGTR8PEqgSgkQx9Dz2GcATAxn0MvWVl3wWdP9l0AwGWTvsg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":13034,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b700720d35e89d819d57de437af03efd","sha1":"7494ac76d2d990f18f996f62b6178f5157c166d1","sha256":"8282648c2bb0939b8d60499cc5720a7784697c07e9c9df3fedc7c17095826507","sha512":"70672f1200ffce46aae932af1c019d72d38b35f65d0f16f79c7b67907c2cb4a1664424656220479ba604146de3a56aef116828f7577f132703344446580d4bf8","ssdeep":"384:OC9X27RBsApMK2WfWNMs9PNSx2eUBbGGuQiD2ifu7:OC9iRSOMKnds9F1/jif4","tlshash":"5e42aed6f753b499e16318f64e92d0d02622169d24039f68a047f6f3998098dff0ef9c","first_seen":"2025-07-01T17:19:57.394659Z","last_seen":"2026-04-04T14:28:08.453284Z","times_seen":6571,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:41:40 GMT\r\nexpires: Sun, 03 Jan 2027 10:41:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201729\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-04-04T14:47:10.838637Z","times_seen":18132,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":111,"dns":1,"connect":8,"send":0,"wait":9,"receive":4,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/d39bd125.d.m.DmPtqnuK.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/d39bd125.d.m.DmPtqnuK.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a2112a4fed2e7fdfb49d654a191f4a4c-9ca754b32e5210e5-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-7f01\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32513,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (32462)","md5":"b606f6808835850efd51c1547ad7b8d2","sha1":"a928d9d20f2df9728241f1225dac40622fbdbeb3","sha256":"684e04fe8220904a4a994d5cdc1cb4318b3ac3d7c00f86a26a339b5fd47418ce","sha512":"648e4d5abba74d00ed9ef0539e84e01638314368f00d358628cf429c200cd6ab5b84116f9b6b4e5ac436376687668fecde10a930e2c99d088a1dd408c9e10941","ssdeep":"768:Q6ZvLQXAH+dxsPZYq5iFNokZrOEbHJULQMB3ZeaYwy9aOgWCK:r5LQXeiFNo/EbHJU8MNZpYwZfK","tlshash":"2ce22a2832a57e3181abe5bdd0a1383055294a5a92134ec0b7b8b77552fe9b94337f0f","first_seen":"2026-01-05T18:44:37.406297Z","last_seen":"2026-01-05T18:44:37.739597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/f06cd424.Dd74Yc_c.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/f06cd424.Dd74Yc_c.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 462\r\ntraceparent: 00-9e83be16469f8fd2d5317837a7447b34-d292333a9be42743-01\r\nlast-modified: Sun, 14 Dec 2025 13:23:19 GMT\r\netag: \"693eba47-1ce\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1792202\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-16T00:53:46+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1431)","md5":"6cbf540dd2a6c89fc9e82a987e8c628f","sha1":"4370f7b310a28065a6f37b039edbb6ab60f7c577","sha256":"f3cd42fd3531448a70732cfd5b1b308395116a6b0e199d0bfd4e4b44aff806c7","sha512":"0c2f430ab4002f2839fe83266b95e826c9f27bcea6a1742f58bb3001740b32e6b523bdd43c18d3a3484a5b8e2f7af52ad5a44e9bbf39d2b4daffa8f8194ffc35","ssdeep":"","tlshash":"05219ef3054de1394807b68b6470ca4ec52ad165ba6b16b812ff712f41cfef05e116ac","first_seen":"2025-09-19T02:19:58.389648Z","last_seen":"2026-01-05T18:44:37.74079Z","times_seen":96,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/713ac740.d.m.Cm8iaGeB.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/713ac740.d.m.Cm8iaGeB.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 64711\r\ntraceparent: 00-9adf575701c3b6fcdf9da648170f249c-05ace9236afdca0b-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-fcc7\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24850)","md5":"610126c326e9c8ba4e00f361bd2ca855","sha1":"1b1cb5ee289addec595ce8f20247f98016be309a","sha256":"79144a96af7a1f9f5a7eafad892af29c72516a6d2d2416a1a89f6c6975d5ec10","sha512":"5421490f18b53f4e8ea3aea9a1efd6b3946daa0985e12d9820647b4a8abb313c5d8e0b704604af181c72a594afd201ea60ce92c8825a444fd3ed3d24b2db04ac","ssdeep":"3072:fQgE9xSYagFAaugR6iVHNCPCHbuYrIuyJ0wfFrCyZWnV4+NNrqhk5CAw2:fJ8IYagFRDVtCaHNsC","tlshash":"55344c94b79ab43503c451a0ac3d072af16e8969505cc06cf6acdff59af840d53bafb8","first_seen":"2025-12-20T03:09:17.501209Z","last_seen":"2026-01-05T18:44:37.74196Z","times_seen":7,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/scratchcards.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/scratchcards.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2305\r\ntraceparent: 00-0527a367b75c6c930ae682a8df981de2-e056c4f87650aaa9-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:25 GMT\r\netag: \"901-61bf36af57c9c\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 20 Jan 2026 20:06:49 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1291022\r\ncache: HIT\r\nx-cached-since: 2025-12-21T20:06:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2305,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"938141af1359f4354cc7d73a69af21a2","sha1":"3953b0622646db4fac74401cd03e3fffbeaee8e9","sha256":"9bb2c583bfe0cfe4ce25dcad5944668b5da72f52f04163654804a03238897b42","sha512":"0663be7226353fdf94b17a69c2b33aedb3fcfac06628092ecd2064f96859e0790a450d155bfbd3c58a264c4f26c673d70cbf32ecf133f7328b9369647ecdbd4c","ssdeep":"","tlshash":"e4410ff2ebe852f49547e76590275d7a369b2cba7f85cbcd82406bf099b40a0958dc00","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.233067Z","times_seen":57,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/mascot.C4J6IXOg.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:52.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/mascot.C4J6IXOg.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:52 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-a3835cea1893c4edc663bea33252b850-384b9afa61638770-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: W/\"68e7b338-2a3a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6602374\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T08:44:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4cfed5dc8f597a9ce3ace9cc0d54468","sha1":"d02e363b2a9a00da32b6a9d73a03b904ce5650fc","sha256":"86ac12bafdcfdceeca1301bec6db2de3b5d02cf3982a6f11da62e2c383f61662","sha512":"36716691243cea3866beeefab568cc29f891e356ae23a8d02ba59549a74db3119b02b40f017f4841610f27bdbdc17c4f8aa1b34064d10a6c0e413f36b7d1ee19","ssdeep":"192:Mw9sYYA4QVZsvsQHnI3woqdZgC1KlAArjzLCscXRo/f7CVxsjs0q:M6YAXsI14g7V6scBUCVz","tlshash":"812276e437f9a3e4f106f3ec8756e4247e5328fa7a61c569c3aa2c58ea4145c0d98cd3","first_seen":"2025-06-01T01:07:13.940104Z","last_seen":"2026-03-29T15:19:13.408178Z","times_seen":92,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/94ae4756.d.m.DeLV3XWm.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/94ae4756.d.m.DeLV3XWm.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-a84b44ecbcf4a7e67e2505728559ca67-0bfdb284d29adacb-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-12b9e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 572215\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76702,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29866), with NEL line terminators","md5":"edb2061bcffe97f862415d2baa1553ee","sha1":"bbb5697921b28a80d86eab101ffc910e0da2c165","sha256":"5386202dfe0a3745765d879bf0c428ff6e00b5a5196d28ac5a3f74555ee80810","sha512":"df81758c694cf4c3b204212f024d620f06092f9f42fdc66b982bce52f0ac033a6a2ddfff73753ce3e5f78d3ad6fc743139bc786ae67c92d44d1c6cd6f8a6fae0","ssdeep":"1536:MXm/AUZGfkHm2Qp5gZ/W/RH2GtGUQ7ZKJDbPJ:M2YMGB2C62PmQJDbPJ","tlshash":"0c7363ca71c2f0a683e76034002f9405f37a1d75a0bc91a4deaac4f9bdfa5195637f29","first_seen":"2025-12-20T03:09:17.590557Z","last_seen":"2026-01-05T18:44:37.746139Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fb4472f4.d.m.BTpAVfCh.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fb4472f4.d.m.BTpAVfCh.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 740\r\ntraceparent: 00-8481256c4f1fb75fe2e3949986f1dce2-4f5b0a9ae7d150ae-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-2e4\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1585)","md5":"b571190a6b27ea42e99ad99333d10e14","sha1":"92b8b84ee5a726adfbe89234ca010c4b5f9285bf","sha256":"18a4d3eb047f3c82a79d0efea6ae57d0e253b5d9a6669054c2ec4ab2101623e3","sha512":"12960f0abeed2cc00777c4e35c10187b006db3346993ae33ac2de41de0ef082bf002e306fc645371dc13bd4263dddc6db461c5c886578c91b50d9a85babaa161","ssdeep":"","tlshash":"7f31044add45ecb5e69bc8ddc0200803400fbd55f3e5c6ace6ada6f8c7b41a89525735","first_seen":"2026-01-05T18:44:37.287518Z","last_seen":"2026-01-05T18:44:37.747928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5cb0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-JZZNGY93CC\u0026cx=c\u0026gtm=4e5cb0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\nexpires: Mon, 05 Jan 2026 18:43:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134955\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399403,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a2243a9649b478c8c27bad99c6881911","sha1":"a733bf1815878514210e32e3637485cbb9e1485f","sha256":"ea9556644bf46fb689af1bafef3a8ccbc637c73c3feacfa4499d940e232c0bc1","sha512":"38478dfb5147cfe24435b383a2fe056731e03eaf608fd1fd8c19eda44c09ce157c698a9a7763351fb79c5f1944e5e60998eb3d728f9f915e6b8d928beb1f4873","ssdeep":"6144:tl7nTmlObujKYz1U95efDHHYOyQFzvns38vW55jaJddpC1JF:PTpbuNz1cEVnsUWuNp8","tlshash":"d384188e73c670269396e078503f118ba57b29e2f45cc895f189cce42e746aa4277f7c","first_seen":"2026-01-05T18:44:37.378011Z","last_seen":"2026-01-05T18:44:37.750305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ps.l.liftdsp.com/ac786b28-283a-4d76-a40b-23e03f94ae14.json","fqdn":"ps.l.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"52.84.50.119","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ps.l.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sun, 05 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:FF:93:7A:39:16:1E:F6:27:5B:22:3F:5F:C7:A6:C3:6A:22:BF:62","sha256":"0E:06:CF:4F:55:41:8D:9F:FF:83:14:09:B2:03:4C:67:98:C5:19:10:75:CB:52:BB:6F:5A:2C:81:E1:FF:B2:29"}}},"request":{"raw":"GET /ac786b28-283a-4d76-a40b-23e03f94ae14.json HTTP/1.1\r\nHost: ps.l.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 50\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 07 Aug 2024 15:08:37 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\ncache-control: public,max-age=900\r\netag: \"e96cd5af6f065e5048b3ddd2913dac50\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 8tVebGDDMrE5IhTI8YFk3zuGcX550ogJmsKM_0fyKQP12jeqbILBkA==\r\nage: 193\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e96cd5af6f065e5048b3ddd2913dac50","sha1":"98f5fff6913c150009fb01c2cf5bbe83c250f80c","sha256":"88c38dd5fd1531be2d044c85bfd00517c41ce29b03c514d620d80a80241a1f11","sha512":"9478fcbed66ba6836ed9bccc5f3f3c1681d7527489c521c85566a2368089191fe173735d89f1277a5f86da659be50879b9e0ac7f62c1d7a1d4a905af8c49f990","ssdeep":"","tlshash":"6790041740037457c457c75041443d55d75d0d370c170f7404551d4503f53777540117","first_seen":"2024-08-31T07:43:55Z","last_seen":"2026-03-29T15:19:13.337153Z","times_seen":103,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/relaxgaming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/relaxgaming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8614\r\ntraceparent: 00-207feb1bb0fbeca1f88b0dced462d435-8de18efd6f7ff3fc-01\r\nlast-modified: Mon, 07 Feb 2022 08:56:54 GMT\r\netag: \"21a6-5d769c83e0ba8\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 24 Jan 2026 21:21:33 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 940940\r\ncache: HIT\r\nx-cached-since: 2025-12-25T21:21:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8614,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e86876e277d57242e3f3373702a465a","sha1":"5ce1072f579aa8d8253823d9ba9055af6ccb9019","sha256":"ccb89eeb30313827e5a41e1a154817c14e05c1abeafdacee077d76cb789bd4a3","sha512":"44147e2200c4bfde425aec490e37cf5058b083242b1522f194fcf796f7920729cc4eb90a64d712079fc64a42b699fdd2092fe022882e2f1e2b70aa80f07e99d6","ssdeep":"192:4w/gfQqBQycfTV1yhroh/gzWS+K2vBnpQRmofIgpZAQzH:AfQqBHcfTV1BY4StH","tlshash":"bf0271cb335e42e9f10663fd401741747e6aecd2ba81da61c3486d1bbad286c6c90cdb","first_seen":"2025-09-23T04:33:55.389849Z","last_seen":"2026-01-05T18:44:37.753945Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cc513c94.d.m.Cyin74XP.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cc513c94.d.m.Cyin74XP.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5722\r\ntraceparent: 00-340b1574f4010dcb8722306284578cff-ef32c7a6abe97357-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-165a\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23572,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23521)","md5":"db26d8b82403b5ef8e120a173700d10b","sha1":"22253a1b271dfd050a03de052cc1d052eb84a103","sha256":"49cee5b0957ff440f1780213a39ed00911ec7a6b9b3407702afc15b38e0dca07","sha512":"0b3badcb457c7c0737ec7ba69ebf27980351a8070071c907d03c11f728aba459855a751ce129fa19283fe0e43e80af75da5023c2787344609a4a4810b99de710","ssdeep":"384:PMcnY5tu5oHRRYF7XLA+McCw4hDfGPNPjN3uwt:PMcnYPuGHROrMcvcGPNPR+wt","tlshash":"ccb2980b32bd9ff911a655a9c4813020892c8eca92715dc1d9ffcf65264ce61d2b6bcf","first_seen":"2026-01-05T18:44:37.4406Z","last_seen":"2026-01-05T18:44:37.754648Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/d39bd125.D_oiZ6VG.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/d39bd125.D_oiZ6VG.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-38f856577a75cfb5bdcf8f8c2f254f4e-dc8f2cbf70d4f0bb-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-354f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13647,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13646)","md5":"11277d5a2f9e44f0c65566e41538810d","sha1":"a087c62d80dc87e9025aa37faaeb5d6b2b8434e5","sha256":"f6387d1daf770ea16213c1b17b4b60e1d5e866c6a36f439d9ee0a8c7eac84693","sha512":"86417192c30893b95180415d136975b7c35f273e830e470ac839f66506e75ed5ff37b6a28506ff7925fcbac02e8f0a66b23d9ac19191758f4bad31f44dc1ef05","ssdeep":"384:2/xWwoqy+iuPA5d1uY7IjddHR5g5HYni6aIplwBJWy:zrr","tlshash":"cb528ebf1c61be7792a6312cc0d5b924b3998c0f5e8652c130a4d67d82f4396973ef1a","first_seen":"2025-02-23T03:47:48.723351Z","last_seen":"2026-01-23T03:09:51.759132Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/top-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/top-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 697\r\ntraceparent: 00-f609ce7c66373dcf0048e456773e244d-22ff5c8a1d6adf56-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:31 GMT\r\netag: \"2b9-61bf36429d66e\"\r\naccess-control-allow-origin: *\r\nexpires: Sun, 01 Feb 2026 23:13:48 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 243003\r\ncache: HIT\r\nx-cached-since: 2026-01-02T23:13:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0848796581e9266f80f9c559e3de8a8","sha1":"cf5f98440ce0f2c0edfcd5985dcaaa90da3d419f","sha256":"7e3f1836401d8d45ae3f406467c7bc7b78193dc00028d63d7659a7809bc4c083","sha512":"9f131505c274a867ed7ec98f409ebebd5a59edc16f5c7428b0e237b72d54ff24eac3e164c60047c6b7610c9fb054c60eb74b0064eb08c86ffb47d5b8d307a422","ssdeep":"","tlshash":"730170e797a451a1d7098ba12794b66e2edf3df136d14b868044b9b8d6042d5cd8c8cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.172779Z","times_seen":62,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 186\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":186,"data":"[{\"id\":\"3dabf26f-f6c7-4840-8957-72999eadedf9\",\"qKey\":\"da53e521-177\",\"operationName\":\"setCoookie\",\"variables\":{\"options\":{\"cookie\":{\"name\":\"firstTheme\",\"value\":\"DARK\",\"httpOnly\":true}}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: firstTheme=DARK; Max-Age=315360000; Expires=Thu, 03 Jan 2036 18:43:50 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d4ee5120d6f277c13abb44657d349849","sha1":"372db6dc4730e5f62240c462a5d1126dd0ee69ee","sha256":"3070145db8c3634c16d9b15142b4079f7c671e158c1074f3a348f6875757cbfd","sha512":"59b6ec7e11abc1b1b48cefae8e6fec62afb109d7628f2129ca59fe216a3798cb9ead244c1a279289a450540d37e2896e1a7beec5c81cd020d631b7e04903cccb","ssdeep":"","tlshash":"e2210a4c11500c7fc54717a1e551fe85a39c59e370d8fe7ea8c0df98a9f68a5a362cc2","first_seen":"2026-01-05T18:44:37.757436Z","last_seen":"2026-01-05T18:44:37.757436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/assets/sprite.DrTllidW.svg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /assets/sprite.DrTllidW.svg HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-e5f6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":941930,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b0ea40a7f7ef98347083ab77a513aec","sha1":"6fd9f4b3592912648de03ce50c8c091dcfb1a3b1","sha256":"107d9035331c79d90ad39b5e146978cdd2ad1ed7aeb7816ffcf071755b6dcd98","sha512":"b04f82936b1497104472645db83524167ce0090a45359d656531bea5a6d9ed35ecdc9eadbe8ea8682398045f6ef6f5974939a7a1a30bac702de2f13d03206831","ssdeep":"6144:lZWDijAXtLUHMqeEXTPYUrIVfV+LcPLiD6aL9oJ2OYHNAMoJj7a+:lZfeipIacD+y2fc","tlshash":"c115dcc51128538ca04bba6ddb7ffec0172f30a7795545821bafc79c915f680fb8a868","first_seen":"2025-12-08T11:02:52.856127Z","last_seen":"2026-01-25T14:09:20.139525Z","times_seen":17,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-originals.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-originals.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1955\r\ntraceparent: 00-d8beeaa1725305345037e9a9698d5bdb-3cdc3b7cce940c85-01\r\nlast-modified: Tue, 01 Jul 2025 11:02:44 GMT\r\netag: \"7a3-638dc157b9648\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 07 Jan 2026 19:26:12 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2416659\r\ncache: HIT\r\nx-cached-since: 2025-12-08T19:26:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"702b03a00b38c08b38d63d5ab58702ba","sha1":"bd5aebde1dc0e3ae5f0b6a6820123e1167e8b50e","sha256":"faac8568e1e3f31fd222cf39b2fd2bd2c3a23c3d00c008551edf1e83df355e78","sha512":"a616af84acb3a46ed9e01b77877e73da6688a36be4116bf2b15b01453d68fd9fbc0bcaaa0870e9e458e558e37020c59d970b7d919ccaa215aa6cdb1a34ef9449","ssdeep":"","tlshash":"ac4152f9d7ec81e49407e792c9f3992978af34b2eb45cdc6c0306a81f16b884ca05c50","first_seen":"2025-07-09T00:32:09.400099Z","last_seen":"2026-03-14T07:22:16.733341Z","times_seen":43,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/winners.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/winners.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5772\r\ntraceparent: 00-2140080e0a2b386dc8f909c8ba53b173-d88dc905badfcaee-01\r\nlast-modified: Fri, 28 Jun 2024 13:43:26 GMT\r\netag: \"168c-61bf36e9740bf\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5772,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9a04d5d641da307a6d416f7bdca8de6","sha1":"6872c0cd650572e3207bca785ebd290d156df639","sha256":"25d002e623903b320eb203f271ef153ee2df8a51e2aed4878c7598d9f6a6ca6d","sha512":"88d73b7b558d91b6146bf4e368508db289a6f861f92cded175408788a361b706d923428a9876e6b7e72fb40d48e4e0f508d6bc99f755f6ae9eab00717ea75059","ssdeep":"96:Sp3FcBAtU1yTkrUH9/kq52Z9SoF/0HcU8mnsAC9gl05nuRJLEkVNxkzD+NWI2bL1:Sp3Fk/pQn52Z9SmHqs79u05yVfgqNWnt","tlshash":"f8c144f5e2d8a3e099469ba1e9358423f6af3cbd9fd9cf848190dbe4e5110d84acdc44","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.157824Z","times_seen":52,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/BookOfGods2@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/BookOfGods2@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86242\r\ntraceparent: 00-6048e7b12dc2319d8e18ae42cb395691-9df6603b1431057a-01\r\nlast-modified: Tue, 19 Jan 2021 15:32:28 GMT\r\netag: \"150e2-5b9428bda24c0\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:52:23 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 725137\r\ncache: HIT\r\nx-cached-since: 2025-12-28T09:18:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86242,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"ef4f201355dfda0b185294d8c4db3597","sha1":"11fb3ce01f48c7e8788af7154be69a315a656459","sha256":"a246edad75f2c6156f38f95bda0e17df6eef2147595663aefe04d8cc7baa376d","sha512":"86166868955aae3d61477208a65ec03b369b9b4b583c9457205546d1440fc84f0ee89c9a7546281bd081bf4b7942aea1ed4f0bb98216c4e7608df825d1e98780","ssdeep":"1536:MDmkJP6AT3wHUGPzQv9Ak6jPQQAktbJlaB0RhC/dzq8A5VDMOr2OSUnX7hOV6o8:XkJXH9Ak6jPJAybJlaB6C4vJSUnXe6r","tlshash":"9a831244a3b986d2672498453e47e53c1d9207eb3e638930c2bee9375781db603a3e87","first_seen":"2024-12-31T04:55:51.657149Z","last_seen":"2026-03-14T07:22:16.755131Z","times_seen":37,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/kvwallet-1-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/kvwallet-1-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9231\r\ntraceparent: 00-11bcd5de2acf71ce0317b9601982e9f2-e2bec4434488fc04-01\r\nlast-modified: Mon, 21 Jul 2025 12:26:10 GMT\r\netag: \"240f-63a6f94b147ba\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c6521d56c98481fc34c7cf527f0917","sha1":"04f15a895bbc206e2d9ea53736e8370ed7bf7259","sha256":"9f3cca8ec80bf39a6ee39e9c42b3224261c565cbbf00603430b684b234e6800f","sha512":"ea15832ccdfb1d41489b1789b82d6359b147c613d7fa3bcd3c53c99d2ccdf28077a5a7ac7f3cbd8fe51d8230c2950247a81dfcf9684193bd78dc935aea6c51f5","ssdeep":"192:EehVkfBR7M9e6Emh32J7I5TtOetReqMLLxMQ+Asf:R3kfnF6pdC+TtFMLjZsf","tlshash":"381255dc3f7993e8fc95e2faeb331465b90714e96d92aa89c3614e0878864041dcdce7","first_seen":"2025-12-25T07:42:43.819314Z","last_seen":"2026-01-05T18:44:37.767692Z","times_seen":5,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":81,"dns":10,"connect":2,"send":0,"wait":5,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/moonSw.DTmx5t_S.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/moonSw.DTmx5t_S.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 209\r\ntraceparent: 00-79f9feacc1a031b871c6ff3265ce19f7-59df448981756e3e-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:03 GMT\r\netag: \"68e7b33b-d1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6595791\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":326,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f673be269667167e50ad29b3c8d4ca22","sha1":"1884d32e417962d76ad00b4b342243ee5c5ee813","sha256":"1248692f89afc35d90d402e22d5db4ddccd51391372bb1db5ecc317385255fe9","sha512":"0d12c27d1bcd3109bccb82f486e6b817aa7f9c14290c8979d68d4ddb5b8443f7c73a83d478cceffbd14e6aa8c83437863b4befabcbaf2a7a492c946e7fb4acca","ssdeep":"","tlshash":"00e07df24689880c342bcd72575146a523cf00fc346808e6d5ceca7af0c7a94e61bd44","first_seen":"2025-02-07T04:57:00.93733Z","last_seen":"2026-03-31T00:45:46.273576Z","times_seen":105,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"34.199.152.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 659\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":659,"data":"app_id=cnjqphyx\u0026v=3\u0026g=501f3d4e163f7ed455044a1e8345e7b9d2661a70\u0026s=c70ae9ca-beba-4b82-b0c1-bd0684d92c2c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=5004e385ae5b8562\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=undefined\u0026user_data=%7B%22company_id%22%3A%22LI-LEONCASINO%22%2C%22language_override%22%3A%22it_IT%22%7D\u0026source=apiUpdate\u0026sampling=false\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nvary: Accept,Accept-Encoding\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\naccess-control-expose-headers: x-request-id, x-runtime\r\nx-intercom-version: 98a2f35f66b42eddd9c7a0e6425d3e5bda30fdb5\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nx-request-queueing: 0\r\nx-request-id: 0003vsp5kvfqe4aa5sig\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\netag: W/\"dcde11f35c4c6a7e8cf977d91640f4d7\"\r\nx-runtime: 0.216872\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6367,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"19be5db72b4ccdcada043899f1d6425e","sha1":"4928cccd5b37f599e64fa6f977333954659b66dc","sha256":"dcde11f35c4c6a7e8cf977d91640f4d7f68c630c820b8f8d7878f188e7e4feeb","sha512":"7b123e3700799c5837a07a46bd10041a95c0f0ef1b35e87c53715e21a9589c05b124aac2cc5715e13399f79f1a24a9942362a04c9f97f0c78cc0fcac5b0d9263","ssdeep":"96:4Q9c7R2aRvUjN62JhHATzlGjzK14zMwaLjGMlbjfZ9B1kAOU5zVfwHwhPD1O6tVw:4Uc7RhRvUj1gHTxDBDlw+1OCGtX","tlshash":"4ad1868c89481c7e73cb82d9c7997e0a0b7991a7f1903d88f9acce2d21d7399516b307","first_seen":"2026-01-05T18:44:37.769305Z","last_seen":"2026-01-05T18:44:37.769305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":184,"dns":1,"connect":93,"send":0,"wait":313,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.B0C4LT9b.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:47.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.B0C4LT9b.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 823\r\ntraceparent: 00-224f437427ff4e936ee6578310379042-973590e4d7e0d4e9-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-337\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\naccess-control-allow-origin: *\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"c2911338ba0f72bcc74bfb6ed78a8f30","sha1":"65c9ef8d331c7987b52a4b74d608e0c2a39f4b6a","sha256":"7e97f0c0282f7ed5b77b9da3f8daa4e178d0856330be095130d4a20232548522","sha512":"01119816a60068ea11caaeaf03b4a444d050b9792860457f0c9abf82d2a8c1481538d832c7f85f0924b913e1d2d26016227b96bd24cc6a1109642f5a34f268e3","ssdeep":"","tlshash":"9431760a6682557947a614fec21b3b21b3219fd1356dc6e1e1bc3c3a3d72817c526fe2","first_seen":"2026-01-05T18:44:37.387774Z","last_seen":"2026-01-05T18:44:37.771385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":57,"dns":2,"connect":1,"send":0,"wait":112,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/fd2fd3f8.TadvuQR6.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/fd2fd3f8.TadvuQR6.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-cd3111376d53db9f87e66b219d8eb6d9-e5079e0c45595e5a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-bad\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2989,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2988)","md5":"033bf2fa4706b216fda9578d8c6b2078","sha1":"3a89ff4e4f31fe24af064232028922a020cb24b7","sha256":"9655e30d07b8a936979f4a5e82b8926f744fa3082131939cf7210dbd6df5f83c","sha512":"26f73c89b717b126d8e751a478783e21ecebf07b0833979f5610459a9e6d57b9458c191b868e87c8ef329e4c3f5185b68a16dac4fbc54a65dbb56e0281fdec7d","ssdeep":"","tlshash":"615126adce1853a9a4d754fab1e64e4e5004ac43f8391a51b991fd2ec182fd1630ab4c","first_seen":"2025-04-24T07:07:12.695805Z","last_seen":"2026-01-25T14:09:20.120042Z","times_seen":90,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=d796s9\u0026event=regstarted\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=d796s9\u0026event=regstarted\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 05 Jan 2026 18:43:59 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 375\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":375,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8de04cc8e0c10c911837cc2dbb253591","sha1":"e008d563bcdb9db465c16165424a5388480fddd7","sha256":"f3c278c84e2bd0b2edafaeca36cd19ae98bb11f3b415b7554b901b62c14b76a7","sha512":"306e7a38b8aff7ee10645510a18af7193f33ad5ad9465054e0df6471d56313bf84fb2ff250ed604ae27d4c5c88c1fe0ecf8244d15252bdc2a51887deeb332810","ssdeep":"","tlshash":"27e0616d572db503927620936f716259243541fd390098951c8cad14289ae9bb926c50","first_seen":"2025-10-07T07:33:30.093084Z","last_seen":"2026-01-23T03:09:51.68484Z","times_seen":25,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":225,"dns":1,"connect":98,"send":0,"wait":98,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com/shield-fp/v1/api/web","fqdn":"5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com","domain":"csftr.com","tld":"com"},"ip":{"addr":"172.66.40.195","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"csftr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 22:33:13 GMT","end":"Sat, 28 Feb 2026 23:32:55 GMT"},"fingerprint":{"sha1":"98:20:2D:63:AD:53:07:94:C8:88:95:A6:88:61:6D:0D:54:8A:FF:17","sha256":"95:65:BA:45:B8:4A:84:21:E3:BA:11:06:09:12:EC:01:DD:78:90:90:1B:C3:85:B8:0A:EA:11:5A:EA:35:F5:A3"}}},"request":{"raw":"POST /shield-fp/v1/api/web HTTP/1.1\r\nHost: 5a0ef96fd84066141eb932d11ca5b39bb17a78cb.csftr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24300\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":24300,"data":"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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: https://leon-italy.casino\r\nset-cookie: shd_persistent=03a62bb3-7719-43cb-afdc-861fa2181e27; Path=/; Max-Age=63072000; HttpOnly; Secure; SameSite=None\n__cf_bm=5Pt0x9CET7Yz7DN25FvqUhN.rHcWioP2fp2dgMH.R3s-1767638640-1.0.1.1-jJCMNbIPY0h2qkKf.Z83M0E0l6pAUrcqQZrDX71S4SZcZRoQwHHHUtNgQTOla6VPEcH3.vbxo4mxMVuTSCFxvEPOIIUxNxtmo.BUgzjcj68; path=/; expires=Mon, 05-Jan-26 19:14:00 GMT; domain=.csftr.com; HttpOnly; Secure; SameSite=None\r\nx-request-id: 8902462f-4549-4202-a65d-196468790a0b\r\nx-envoy-upstream-service-time: 28\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b951fdc3fa656a2-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eec0fcc23c3ec9d9971ce70da9ae22b1","sha1":"a4a7801254c4609b947a368fa0c278833c026b04","sha256":"cb33d69100c3bef31caf261be21e7b0b533e33b94c8a1f8d3d2b8641c76193c3","sha512":"9e8ba2c0a93dd5a24421118654bae46bf30f616e30770679e419f4263c9153e820ede1e7972f534aa1dd3d9adeb9637fc4cb51894aba04159e506268567c1b97","ssdeep":"","tlshash":"c7e068450bd928bac2bbc245e9097e597f3905726884300cd8bd8d1c0de3483632d22b","first_seen":"2026-01-05T18:44:37.773811Z","last_seen":"2026-01-05T18:44:37.773811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":34,"dns":1,"connect":1,"send":0,"wait":123,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/exclusive.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/exclusive.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5618\r\ntraceparent: 00-bc55c52a90d4b3a41fc4079978584d0e-3f672709b5fbd8fd-01\r\nlast-modified: Fri, 05 Apr 2024 10:28:02 GMT\r\netag: \"15f2-61556e915c6e7\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 10 Jan 2026 22:20:18 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2147013\r\ncache: HIT\r\nx-cached-since: 2025-12-11T22:20:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f310f82bd99f64d82ebd1f091658ca17","sha1":"de9c07b5b5f3f4635a9e825a14af16e2c184ebcb","sha256":"7fed836409217f5ac8eddc5f8193b5c0c5e4e02bc3af1d18b4bc00287b8cfa33","sha512":"4bca13f43a59c62f670079fef9ff73ad9feb04c01784604b3d5af29d0984401e5c788e1fae0f68baea530c0b21b1a5b85cb5d9318e8d3d99b074209f56a85bcd","ssdeep":"96:wN7lHxPap1jRULBVUkiaBn/G0kOvw6rXtrbFY2W8RikDwrkCK3P:wN79ZapNRUlV2a+Ov1JnFY2BRfC2P","tlshash":"46c150f6a3e872e48147db90d8275876ba5a38fb3f9183c94240ee90b561095cdcecc8","first_seen":"2024-12-31T04:55:51.41943Z","last_seen":"2026-03-14T07:22:16.75251Z","times_seen":45,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/redtiger.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/redtiger.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 18002\r\ntraceparent: 00-fda1c40891ca4d387c8b3c1001385397-354d671940a6044d-01\r\nlast-modified: Mon, 07 Feb 2022 08:56:39 GMT\r\netag: \"4652-5d769c75205df\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 721224\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b06c7f96c431e2fffee0ef9bb247f3e4","sha1":"402f658a55b47b9c7dba8659f731eac68164d43c","sha256":"163b80055bbb0b162d2b1a3f9ade2441ec3abe6a7e0c04505631f773e8982133","sha512":"1d0116aff4b9a4b722fe8bf0252d6ea1eaa5f5949f034f3e3f2613d01022ea5a9e854896bee4be5999b599e5a7bd207f18224a6e2484d94cd53ece972bb52e18","ssdeep":"384:6cBAgARcqrqj+5K4axmFXWjcy1MgvH/7pfq9U+Ld+Lhbf6MvhQvC/INqKG82d:hK8Ck4azjcGDfdWULhbf6OQKSy","tlshash":"7982a7c9a7f5e3fcf005f3f8826798b476935ce23922ca5583e95c51e6a202c45a9cd3","first_seen":"2024-12-31T04:55:51.598659Z","last_seen":"2026-03-31T00:45:46.202611Z","times_seen":22,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/collect?data=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","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.124","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /collect?data=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 HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\ncontent-length: 0\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\netag: W/\"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk\"\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: NTk3aLZUm8WulLrkbFxImye10aylQR6q8_EJjQvakax1u-SE582mzg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 175\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"[{\"id\":\"3f2de841-9783-46df-ae4b-66a8d2bc92f5\",\"qKey\":\"5b49cd5e-162\",\"operationName\":\"getSpintaxMetaData\",\"variables\":{\"options\":{\"routeName\":\"home\",\"routeParams\":[],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":403,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9287f67cc4920173d92553cded31cd95","sha1":"2b79442492592b4b92530b3dadfb6e2043279856","sha256":"162349e29f42ed39398d9ce452d3b9b0ac971cc5f3def2e87ce9941b53d2729d","sha512":"aca217469d8864e19573597614268ef064b49cd54bac486cf2b85706d0a005ff90684fe6325ce34cb7baf478c4b3c7810b7f18cef16f1f6c6420ce378efb9709","ssdeep":"","tlshash":"d6e0f1133c012c311f46cd047eb6dc47cb613637240205544ec98b4052cabfc23aacb7","first_seen":"2026-01-05T18:44:37.778863Z","last_seen":"2026-01-05T18:44:37.778863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/fd2fd3f8.d.m.DWz__ghu.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/fd2fd3f8.d.m.DWz__ghu.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1790\r\ntraceparent: 00-4bf706e4c4fdc30ddecab34901eaef72-e72621f7c9183e6e-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-6fe\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5422,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5371)","md5":"ff21ba4342f2561e3d468a707531d8ff","sha1":"ca73a53c49bff172498454e89f89996391dab185","sha256":"9b843e145e8e086ce9db3569bd614d00f9d69654df0d1ef5b17f27caa7b005dc","sha512":"aa365b55aa85fd4239cecbdadccbd1054c5d22ec6ee82dfc104952d4ef950d77a6af965e8e94b24e8042d4c97ebcb85800779b62aadea43ecc58dc1420004395","ssdeep":"96:cnRI8IIO9UXcSU02DrJJQh9eC97Ae0E0hbDO92pli569p0gY72T4n5jda50w48ny:cRI8YbSFArJJQh9eC97Ar3O92pli5690","tlshash":"86b1c82ece0946f882c758fae0e64e4a501cea47f13c0604b9e5dc6f8614fe5931bb4d","first_seen":"2026-01-05T18:44:37.320083Z","last_seen":"2026-01-05T18:44:37.780833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nContent-Type: application/json\r\nX-App-Version: 6.128.3\r\nContent-Length: 46\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"metricType\":\"VUE_APP_LOADED\",\"value\":\"3265\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/sevens-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/sevens-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3508\r\ntraceparent: 00-00e7bb064ed20c382e6c02959813ee36-056b92f364d27f93-01\r\nlast-modified: Thu, 11 Jul 2024 12:31:11 GMT\r\netag: \"db4-61cf7f01e8600\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ac855577c78f4bd9edad9b490788b53","sha1":"d2deae54c7d3bc48016c1195e1a40592b15340d7","sha256":"046036e7f874f492979b65f952a66e194b8f1739f24a64d40b2052f944114bc5","sha512":"28401e4f1338a0bccb32462e90b4fb7c8c5054ab3bda45a0799cd63c84358f5e606d149129418a9995f3403b8715389f337cc4a966982cf48fa828b96ddecb3c","ssdeep":"","tlshash":"847113e5b3d8b3c0d909a7f1147b5974baff34b77b04cf865345b9a4a71a294892cc20","first_seen":"2024-12-31T04:55:51.417914Z","last_seen":"2026-03-31T00:45:46.252606Z","times_seen":55,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app~tooltips.d2d8d53c.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~app~tooltips.d2d8d53c.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 194174\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 05 Jan 2026 12:53:08 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: PZftwK3Vy8vkMnitApOIpVoXybZJWTW2\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 16:55:51 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"25ae468b2bf86aa63a9246c613c4daee\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 6497\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: Eda0z-Eimu7Ku9HF5l67BnIVUWYJnYVHwbhQb3SDg5EQRz8SF_hD0w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":894061,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"data","md5":"e53fb2f691a6fd2b203c421e944c4d38","sha1":"5dd766925628b7556bbdfe04b74cb4e8e85fc544","sha256":"fb57f9889f7344f5992957085b8771689cfcbf80f4d44dea5a91bdf33981b781","sha512":"65c144bd57fd0e65fe3ecd320f3ca13be6c11908d5a55167da24dc8773f83772c02868dfeae87fe66b047f4ec0f73da92f4f76c4c55e5c4dbc470603d5e74a17","ssdeep":"6144:Tp02n1qyKHtLp0rn1qyKHtXWgFDAIXOfErq1POdoIgPXsBTa6My1R3wwoxzWWeFP:S9j9ISdoIgPXsBTa6M51a","tlshash":"b715922495a878ed63cf7186908f986e2d6c00338285ee647dd847e727661b63433f7e","first_seen":"2026-01-05T14:30:06.301943Z","last_seen":"2026-01-30T15:56:34.641563Z","times_seen":548,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nContent-Type: application/json\r\nX-App-Version: 6.128.3\r\nContent-Length: 48\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"metricType\":\"BUNDLE_LOAD_TIME\",\"value\":\"1055\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/pix-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/pix-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 14736\r\ntraceparent: 00-4da5425a5a5f18fffb36259f64492301-98b34c7eb2741de7-01\r\nlast-modified: Mon, 22 Sep 2025 15:19:05 GMT\r\netag: \"3990-63f6557146a56\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9937173389be3b233a5a810bc2ff566","sha1":"30b81ef5b6552e35566408c65ce50a70c2dc5cc3","sha256":"eaa2d965aed97f6c133f9137ba5fe1ec3b6292c1d491af27c5ef1888a7c73829","sha512":"b633273e20d759d5bccc1d33fd2ad35fae43cbe39aa621bc934d9490f553d88699e95c9b71bd8c3153ec3560db19e9dcfa513c40b28c2b8cf7c7de6d37525896","ssdeep":"384:t799gnH0hx/Jj4ckMolc2UfThm3z5dmpmI3LjdFmwRkJ:tx97h7g3BELjTNkJ","tlshash":"1362839133e8f1fa7608f7ed8369f4366a6b35e12b22805ccbf62da5c60456f0d489c1","first_seen":"2025-12-25T07:42:43.80191Z","last_seen":"2026-02-28T15:40:00.758927Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":100,"dns":13,"connect":4,"send":0,"wait":3,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/71c69379.Df-RY1xq.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/71c69379.Df-RY1xq.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 105\r\ntraceparent: 00-722533d7a8bfdcb251582c2e13f02bce-8c616d7e47a85c47-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-69\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1281856\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-21T22:39:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3423d7cc3aa7ac44d033e2e4be0b00d4","sha1":"a4d591bc0446811187b44bbc1b41c07a7f48f232","sha256":"152add0de253a858678d73d9988ee6214da2dc169ad58e26e2f95e472b50fed6","sha512":"65c19ef7f61a6266e6f34255b873f9d0d88f42971a124787b263063acf53f4c0759f3b40a563d4aaeeee269edf833b3921dea4e9b2fa89f82423aacd6cd8f2e9","ssdeep":"","tlshash":"87d0a7568df1d6336cd0590bb3444a8c30c29c0b85175b04c49a140cf4b359b3202384","first_seen":"2025-04-24T07:07:12.797229Z","last_seen":"2026-03-31T00:45:46.183155Z","times_seen":113,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/c7fd5867.d.m.BZM33g_E.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/c7fd5867.d.m.BZM33g_E.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 748\r\ntraceparent: 00-111d18f9829e8409bc6e36f87d316cbb-50bae367d601ab9f-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2ec\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1926,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1875)","md5":"fbccd4883aaadb579975f37d8344a8e9","sha1":"cb909282f5f4cdb161d69162c0f22bbc86eadad6","sha256":"49ff8b52698dfed987c97f12ff7850ab192b022c712b16f8211ab53d6ccf1a71","sha512":"8b823b38915095c6ed6e8b318cf8e928f8b48357909508d62e27227b5a4d4bd3749db67799b485b61aebf0af484126c848861be3b84318719b9bbbc54dbd549f","ssdeep":"","tlshash":"d441ddcb738898329b57d9acae1f6f72287ff246451ec2a84258f1f015820ddc41af2d","first_seen":"2025-08-05T20:12:01.639425Z","last_seen":"2026-01-25T14:09:20.12781Z","times_seen":75,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/054854ad.Ex9bFnwt.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/054854ad.Ex9bFnwt.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 4339\r\ntraceparent: 00-091eda97acbb3bf7f80bd93e64c4ba1b-f78503ce3815e68d-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-10f3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29030,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29029)","md5":"9ef912c6ec728a533890823bedb1e1af","sha1":"c5d089da28a137d084180e0b6faaccfb70a6b03a","sha256":"88485b3782bc80bff39059bb9d03b975c29f23bf1a4ca9bc5ec244fe553a6e5a","sha512":"0015b833f2ab3478c2ebcf220abed9c28d02799d09fb0a4df9b0724dbba824ba2e99c73ce85e6c0d8fac2e726726a1d7cffcf419b580613c088679658b607f82","ssdeep":"768:vTkc5vK1Y/sI9DyNyg3T1S3bpmEFOwmUQ7:Lkm/8qFF6","tlshash":"e5d2102ede1862a9b4a6907af5e45f4f6404e847e5364659fd51be2ec0c3fa2332730c","first_seen":"2025-11-22T11:34:49.830209Z","last_seen":"2026-01-25T14:09:20.087519Z","times_seen":32,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=524640301.1767638640\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026z=1132862674","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:28 GMT","end":"Wed, 25 Feb 2026 15:59:27 GMT"},"fingerprint":{"sha1":"26:28:32:29:0D:EC:7C:A6:70:C6:B4:55:22:40:CC:C6:C2:BE:44:6D","sha256":"BA:6B:58:64:89:F9:73:7D:3A:37:E9:08:D4:E1:6A:49:39:B9:EF:6C:43:F6:DC:F5:92:3D:2C:1E:95:7E:10:94"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-JZZNGY93CC\u0026cid=524640301.1767638640\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026z=1132862674 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T14:48:41.416319Z","times_seen":763370,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":104,"dns":3,"connect":15,"send":0,"wait":59,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app.f906e285.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /app.f906e285.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 217615\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 05 Jan 2026 16:07:31 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: uTPqa8WTxcGnWLd6OLVS7d22FlJFr93T\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:10:22 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"a0b26d41676c2d64fc9f46e14f3c2ab9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 2024\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: gQdOYxnPzlEIUCu6Gj9AbxjoB05ewbIiL4HqmAd3VNaaP2SZOOo0dw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":957629,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65462)","md5":"bb5295246ad55a79bcaf809ea6aa31e2","sha1":"8c0e1b57bbe3cdf7d16fa4f9eeb688e207c3d19b","sha256":"bd264dbc2175e8389cc56966c932012a839a4ea31aba3e3f5d8cf2e2f28f4312","sha512":"529d273f04be2caf17727b0c23e96cf2c02932e1966f7436729815f5c26f39e4eaf2cf46d8c40b0bcae38a1b84063efb39d51a84a06ae97f54530fa620807c4f","ssdeep":"6144:kziHkM0nE6gbviZ5FAFDZE41hNkMtYmy4leECyTZ807NHF2NXCeXSL8yj44N2gug:IiHkMWgbrRXTeECy3ANXC8SLGhI","tlshash":"ff150bc8f5c6f4299767a1b0402f100ef23f6949f55e4054f629e8d5acbd08ea223fad","first_seen":"2026-01-05T17:17:22.187241Z","last_seen":"2026-01-06T08:05:48.410627Z","times_seen":17,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/64da48c6.d.m.CjEC4eAa.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38460\r\ntraceparent: 00-9d1610d16f9896c2269549917e8def44-382916298d0d2575-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-963c\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":186466,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (52553)","md5":"5414fc46e24ca75f39260325cdfbf5eb","sha1":"bc1725ddf5d955cc50ec4f2fd21b5e2a96593602","sha256":"d4a866554ed6700ef58695301151ba4ec6ce48f8664cac8979bfdc680528b4f2","sha512":"826d3d720ec11b56f83ea97a72f584853a76161eb447a37a9cd8b713e94afc68bcbaf87e2f4c533c509b98c381d09e3362d94f61766d1bcd0e7fe4d6a7ec1305","ssdeep":"3072:uD14onUvCOrakzXbzYJ5SsB8FHnKDCPnw9BeH0WBt3:41hUaOrakzLzYJ5SPHa9BeH0WBt3","tlshash":"69040a066a483cff4f710d6e5b2a7aa462330d98fa21c032d2b69f3e2f5b411f197595","first_seen":"2026-01-05T18:44:37.388869Z","last_seen":"2026-01-05T18:44:37.790681Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/leon-jackpot-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/leon-jackpot-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7254\r\ntraceparent: 00-0a7dfd90c5f1e07e7c7bd51145547cad-0ad71996fa8b74f3-01\r\nlast-modified: Fri, 03 May 2024 13:47:51 GMT\r\netag: \"1c56-6178cf7491cfe\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4570ae06b8ad61194283284076493ee1","sha1":"49664b96846ccfc818cf2dbb254d1e88a9f80080","sha256":"fe94ea56b20d7c1b1f1822d1f8c4033e576bc98c886881a51a52e6b5601b2cc1","sha512":"f639b70d1d94856da07411783f7e6bcb653d0ba03111bd072a6235e923d4622ae84e1b496666bf0a503b24f05c474d7e8651aa1447986760f4d8e4a68995ec0d","ssdeep":"96:wPxQNjGPj5YZFIua0lo616bJ5XWq65F7UIcGcYafN+FyXl8fUFi+n91Mj/HbuhC:wPvj5YZh5NyNWq65F7UhfBiiM/HbuhC","tlshash":"f2e173eb66e475e48a40eb90d9272c65f19f247e7f338390c340d7a1a6a44f84f4e8d8","first_seen":"2024-12-31T04:55:51.407987Z","last_seen":"2026-03-14T07:22:16.736618Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/books-5.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/books-5.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1804\r\ntraceparent: 00-8e24999cc79864c99e3071197ca07305-12caae1c1d747e06-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:41 GMT\r\netag: \"70c-61bf36bec16f3\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"21f4a5481d615224b3062e2bda5a69d7","sha1":"2587846cdae3aadc39f9168b4a62c4ca50cc2bb9","sha256":"049e51bec3a57f5d4f4ff4d0a592ce5a25e418fa08841f345cc7b7ba2e6b1581","sha512":"7e52fd485a521bc2683434cd1159d6d2e624c4a87916df5584f8b3224a98f683de62f7e467b9aef7cc15f4be4c15a096d049542f648653aebbc60ed70169a497","ssdeep":"","tlshash":"0b3165e94fd870dca615a7c1ad2f892bb89f28f97303cf4653c09a54b8120c4cd8ec10","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.237177Z","times_seen":60,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 1197\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; shield_FPC=SCtfW2H3f2uTBokrpQCLOJ4g3SJxmMjfzM; _ga_JZZNGY93CC=GS2.1.s1767638639$o1$g1$t1767638639$j60$l0$h0; _ga=GA1.1.524640301.1767638640; pixelsink_uid=99908cbc-6e56-4fa3-b360-43fb139ba1de; intercom-id-cnjqphyx=5025b99c-05f0-431b-b9b5-bab496de60bb; intercom-session-cnjqphyx=; intercom-device-id-cnjqphyx=39875cb6-b749-4c6e-902b-c2de1603c3eb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1197,"data":"[{\"id\":\"a77671ce-24f2-4d69-a0be-9eee898029f8\",\"qKey\":\"10186d6f-1473\",\"operationName\":\"getEgsGames\",\"variables\":{\"options\":{\"gameIds\":[\"egs_ms_octoplay_octoplay_break_the_piggy_bank\",\"egs_ms_octoplay_octoplay_spirit_blast\",\"egs_ms_octoplay_octoplay_mr_piggles\",\"egs_ms_octoplay_octoplay_aztec_ancients\",\"egs_ms_octoplay_octoplay_salmon_king\",\"egs_ms_octoplay_octoplay_twice_as_nice\",\"egs_ms_octoplay_octoplay_blazing_touch\",\"egs_ms_octoplay_octoplay_heavy_anchor\",\"egs_ms_octoplay_octoplay_disco_dive\",\"egs_ms_octoplay_octoplay_pearly_shores\",\"egs_ms_octoplay_octoplay_hot_harvest\",\"egs_ms_octoplay_octoplay_blarneys_gold\",\"egs_ms_octoplay_octoplay_mutant_potatoes\",\"egs_ms_softswiss_popiplay_moneyfest\",\"yggdrasil_7317\",\"egs_ms_pragmatic_pragmatic_shining_hot_100_jackpot_play\",\"egs_ms_softswiss_triplecherry_luxury_jackpots\",\"Yggdrasil_FrostQueenJackpots\",\"egs_ms_octoplay_octoplay_777_hot_reels\",\"egs_ms_pragmatic_pragmatic_egg_rush_jackpot_play\",\"egs_ms_octoplay_octoplay_buffalo_smash\",\"egs_ms_pragmatic_pragmatic_tropical_pop_jackpot_play\",\"egs_ms_pragmatic_pragmatic_hot_to_burn_jackpot_play\",\"egs_ms_pragmatic_pragmatic_tiki_hut_megaways_jackpot_play\",\"Yggdrasil_JackpotExpress\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:44:06 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":42499,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5102b4d6cd0d901eaf91a8c859517e9a","sha1":"c72ef2ddc96e91244565fdab480fc935dba423dc","sha256":"8f89d58cf6ebf1cab49308d9740b0eb99cee80434e6e1aab1f3b9f7ae27767d5","sha512":"0c3d17f0feaed1b355f968f4c0e12e995b4bee002e38aa7e2e4c24bbf8a3c6d4f6fb0fe402a8e5b2ed43c53f720a5a560adf2d5e163ac6b1c466783c9d5f88f2","ssdeep":"768:zaqGCtCkCjCKCjCwC8CICrCMCJCOChCyCzCmCdCACJC2CbCwCzC0CxCWCpC/qkrZ:Vgn+d+DPrWfshUVOJQTsZGDO3k5Mb0zw","tlshash":"a713767b6688382fd39953943caf34d8b25e30176a40f356b25e58694bb4cfa30b719c","first_seen":"2026-01-05T18:44:37.795386Z","last_seen":"2026-01-05T18:44:37.795386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/other.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/other.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1220\r\ntraceparent: 00-c90cfa499bc39d56d9ff7ad848fb8361-c4ce0ad25b605acb-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:21 GMT\r\netag: \"4c4-61bf367262f3c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:58 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04de3fb1fb28c7e3a6d905cfaec4e513","sha1":"7823b05f9bc9f0a16145f9468fc8e5df9d573ce6","sha256":"3c584108e1d8685d12332171f34879003c01a21d55ae5bf753b8e034bc020e2c","sha512":"f1c62e53cd1d6d4e3a72345e59903656acdee191038db1c1f7bb85d0763d785dc98f414531b61161aa045aa575b6dc52a95117c893a158d43f2ed8c7871b00fc","ssdeep":"","tlshash":"f121e0f196606350a0099b6fba2ab56271eb3cfe3e624dce93e0fe1210050d98c4d986","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.257946Z","times_seen":58,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:58.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 21:55:05 GMT\r\nexpires: Wed, 30 Dec 2026 21:55:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 506933\r\nlast-modified: Tue, 18 Nov 2025 19:00:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40688, version 1.0","md5":"c2110c4e3bb5388e5dde190a6f732b70","sha1":"980adaf6f9b3fe70a95494ebc40dd13151533366","sha256":"0ac2bd2955bce37b4b57866fb20d9b2a9d40efe46eafc7276a9995b36dc4b34a","sha512":"3502853dde0e4032b350c80e015823042985b82097eacba12b9ce3852ca37b1c76b24aea4bfae4fb351935e01dae55790159bd5ab6ea5925b29aee30dbcd4424","ssdeep":"768:5HzWnpfBrQBT/nZyGY8OyYgBlyz9LVm3I7Rv+A1n49NfG37v7R+G:5sfBaF5rOhkly5LyGN+Mh37DR+G","tlshash":"9b0301eef3f58673fd1d9224f25284ef602e9744004d64b5ac2243734eda6b1f1e46a5","first_seen":"2025-11-19T00:33:03.039122Z","last_seen":"2026-04-04T04:25:54.096503Z","times_seen":16917,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn0.match2one.net/tracking/m2oe.js","fqdn":"cdn0.match2one.net","domain":"match2one.net","tld":"net"},"ip":{"addr":"104.26.12.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"match2one.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 18:28:20 GMT","end":"Wed, 11 Feb 2026 18:28:19 GMT"},"fingerprint":{"sha1":"CC:37:F8:78:A1:C4:22:09:DF:4B:0F:4D:60:ED:61:8D:D1:C8:E4:6D","sha256":"DF:82:69:8A:77:10:A4:F5:5D:9C:BF:0D:7F:AC:26:67:3C:1F:F8:64:41:E7:97:A7:69:19:5A:9B:F7:9C:BF:A8"}}},"request":{"raw":"GET /tracking/m2oe.js HTTP/1.1\r\nHost: cdn0.match2one.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\ncontent-type: text/javascript\r\nx-amz-id-2: b9vbybQ/rgRzK/X1ew0BoHyP8NhmQVOTKpCZtgNFWr2hatQSdfX9nKYqjsprMwjv3D8JN0fANwE=\r\nx-amz-request-id: JJ66B1CQNMM1RQC0\r\nlast-modified: Thu, 18 Sep 2025 07:53:55 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 51279\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EOeE%2BTrMsHwwNEDzC1XyDhvK0ixTZec3MW3kBIMvOSjgvIRbeXHHp%2BZC2RnrgRKNgUvAWS7NjA3mNbHV3A5zFA%2FMeIS86yhwRR8zz9T%2FYMqX9LVW1Xvd8EwoS4182m6OyefG33eL4M5mlEkPH5vyWvyl\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"76401bdbcf3ea72cd04aa2d225f6bccf\"\r\ncontent-encoding: br\r\ncf-ray: 9b951fd70b9db500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"76401bdbcf3ea72cd04aa2d225f6bccf","sha1":"dbc688e11aa8d9f93346a4821feaf3dbec553154","sha256":"a9420087b1c4f37a5887f4c27a8a83a758932a1a62fb5a37c082db5ce00afb09","sha512":"96523727c305ffcb97058d6156fe3c97158979bffd0c9cb980085a39ae326a102c1ed8fc7cdb4ab101d082bc391216ff4bca98fcef59c8d98a8e2607ce90fa84","ssdeep":"96:uSwHeEvVaoXsMiCMw7I3iCa6ejkhdfB+mRRKyRpVGtSu:Wt8CMw72iCGjkhbHRR5VGtSu","tlshash":"1ea12f1936fb62b304eb64694b8f2031713c579b305a89007d5cbf101fabc659a9bfa8","first_seen":"2025-11-12T23:10:11.563014Z","last_seen":"2026-04-04T14:23:33.261591Z","times_seen":367,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a538a99f.d.m.FZtRXSGE.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a538a99f.d.m.FZtRXSGE.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11557\r\ntraceparent: 00-3f9f9a54e276bbe090618bfa30b9141d-b25601d999b54435-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2d25\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41079)","md5":"07d17928317370d7b2c48fef997f2bb6","sha1":"b664549db260bf66861f0e0bf48de12e190cdc58","sha256":"f14a776d5ddfce1775a316998164372c81fa0cca80b83baee9a68f46d4b163e3","sha512":"4b188c81ad1e4140f4bf58468e0d55a2665cd5e2b7f56ba3fb1527303aa3cd94752d5908396a0fc290ed94abad051dc981ff26113d9f35fa8a8e1411234e37b5","ssdeep":"768:Q61/QVoeEHTg+ZgrhbGeLJ880mec4R40wNNBLJrlB83prxApCp/UwBDneQDvpy/Z:vzmp7QA/BPWUZ","tlshash":"8a03fa8877f3b52757d744ea50371003f6298a08784e8068f26cd9df7e9680696bbf39","first_seen":"2025-12-20T03:09:17.536096Z","last_seen":"2026-01-05T18:44:37.799318Z","times_seen":7,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/holdandwin.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/holdandwin.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1193\r\ntraceparent: 00-a5ab9fddc3d0c377c863c6142af83730-b04ee862be972490-01\r\nlast-modified: Mon, 25 Nov 2024 15:44:32 GMT\r\netag: \"4a9-627be9be373f6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e6b24f8e1304a6d30fcf66915302f8e","sha1":"fd521e2f3e992e8f4421212496441e288ed82588","sha256":"d1d27a4fa7dfa49d65591ad727ea33e2739418dd6975b6cbbe0844e03101d179","sha512":"5e97f4c5fb96dd6b29e3a7affcb7bd03c2bd4d5def50338d59a8d5e83605978bf6b8d10daf1c33c4d973ce723d9d6f5fd656af52ad7d79052e83abdf134e983a","ssdeep":"","tlshash":"8f21cbf7e3584bc1c1038342f53aa8b1803f587cb3e58ed580797de28114987ca88481","first_seen":"2024-12-31T04:55:51.414787Z","last_seen":"2026-03-31T00:45:46.283415Z","times_seen":58,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 140\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; shield_FPC=SCtfW2H3f2uTBokrpQCLOJ4g3SJxmMjfzM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"[{\"id\":\"1a843a60-fcbf-4053-98a4-56e8b0af3a5a\",\"qKey\":\"1a804ae7-152\",\"operationName\":\"getIntercomUserHash\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":195,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"18d66897dec915672c9f0507afe7ddb6","sha1":"fa11079b336d911aaf639bb1be6993b01fd7a604","sha256":"6c631416d9908151345583dc12536c84108a33505611e1df2eda27933b7fd19f","sha512":"f818471c469504ae6c86c8bfa3e127251fa491837aac6720a4001885bcdd327e1fdea506fbc0c120a09ed3b96c431fe1a428f8197ac6ca821c20d36e876f523a","ssdeep":"","tlshash":"14d02282604b2c464e0450849424f81b492a203224792820c9c4b709bccfcbcfa48b2c","first_seen":"2026-01-05T18:44:37.801038Z","last_seen":"2026-01-05T18:44:37.801038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.fde65c84.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.fde65c84.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 237326\r\nlast-modified: Mon, 05 Jan 2026 16:07:31 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: x6.dKUBxFT6UrSPbVDKkV0VCmnLX0MWd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:10:22 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"45c439d46619271d31166f919dbb3c9e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: i0blki0D5u-GLiJFUWo5c-NsSWW3kxjeJar1Jk8pglGo4Kx4VQnmkw==\r\nage: 2018\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1110378,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"d274437d857405a6f1595ad749696abd","sha1":"b6215ab0ddb5b49b69dccc67394587554e23142c","sha256":"1b1a59bba4f69955d872137ec18f4dee881635d403830ebb299df947e2d23a8f","sha512":"20855996f1769845fab8e7979ea27745c36d9053274e70fdb01580e106527cd89a0079aebc801be37d420a0e067278eb3dd69641f00aabf81b16f9e56f892f55","ssdeep":"12288:0P2xzT5Nc0qc1RsD5NhbpQI2lBuJmEiGLx:7KnlD5NZ2lM","tlshash":"4325c5ccb2d2f06a43976575812f200bf33ea999b54d8050e629d8d1bcb958da237f7c","first_seen":"2026-01-05T17:17:22.225219Z","last_seen":"2026-01-06T08:30:14.568937Z","times_seen":39,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":3,"receive":9,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:47.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-0ca52a8d0044abbdac31bd217919d30c-883ebb411e37f60e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 572215\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":60,"dns":4,"connect":1,"send":0,"wait":6,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-2/wa/collect","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-2/wa/collect HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nContent-Type: application/json\r\nX-App-Version: 6.128.3\r\nContent-Length: 34\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":34,"data":"{\"metricType\":\"TTFB\",\"value\":\"75\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/1bb7e2cc.d.m.DCGUNG1w.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/1bb7e2cc.d.m.DCGUNG1w.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-63a453bcc48d84ea1e13871b0afd7cf1-dc8d9778205ab3c4-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-2cdc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11433)","md5":"a3170ba3adbe5f87c1b52922731e2d4e","sha1":"e91ee5d42326cd175a25d4e37ec666b9b104ab8b","sha256":"904f4137561ae34a2bbb4a4f8bf6020a27cb77ee7dc894c33ea03378f1f4e5ee","sha512":"8764d24f1710bae01942e2bd53f9aa3e33ac404185401d33c642b330f759676383e9a248a5c4610b9b7939f5ef327fec9d3cc7dc9c858b5de544a03c2c9ee08c","ssdeep":"192:VOA7iZpOIWZt7I4ZpOItZt7IJ1w9pivNABGBVMsUM//AfLCpCsCnCVfVCKCKCrC5:YevFuABGBVMsZ//eED","tlshash":"6732449def68a0b204939855816c70c3c1e994a0a2362fd1940d1ebafe9f561633fc7e","first_seen":"2026-01-05T18:44:37.401342Z","last_seen":"2026-01-05T18:44:37.804113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638633542\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.event_label=Country%20not%20allowed\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026tfd=12634","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=customer_registration_note\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638633542\u0026ep.event_action=Registration%20note\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.event_label=Country%20not%20allowed\u0026ep.message=Opening%20an%20account%20at%20Leon%20is%20not%20allowed%20in%20your%20country\u0026tfd=12634 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":100,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/jackpots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/jackpots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1666\r\ntraceparent: 00-13a96f0f754ec0d8abf4694373bc0965-b75d6197cb182506-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:33 GMT\r\netag: \"682-61bf367d55ec8\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 27 Jan 2026 19:37:22 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 687989\r\ncache: HIT\r\nx-cached-since: 2025-12-28T19:37:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39d078c57099cadb8866bdf0cf7e6fb1","sha1":"9db3f9769966f73119b118489aef70be6c435b10","sha256":"fd1792c86362ee56c8ca9479b4bf023862faec59991939d1a4e8d568877df028","sha512":"c4e39f897618c3635f2710359262a143db4edbba3b2ad27598e562c88648bcb463cd30c372516659a876d17827cfc5317baaa23aa23144c6cd992d3b94a8e854","ssdeep":"","tlshash":"c83106fc42e8b2c496465b20fa27f8d262962dfceff39ec951e25b314416191490e9cc","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.195707Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/8e2531cb.d.m.Dfp_l2nw.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-b36fc40828578e15026b18d029b1b410-911d3ebbc3c102c5-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-50f29\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":331561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46765)","md5":"72a48ba0177be363ea49f79af6c6d9ce","sha1":"40323d5e5b5c01d36772cdcabcb8a16a3fda68dd","sha256":"b91449f5af2756ea0433f88221bcf13f71d40835137e38d3efb4bab4f363900b","sha512":"dd6da13013c142494e98d85700994dde0dd114971b39e7e6e5256af531759b8541ac7845b047f5b7224f1d732d9726bd67476223bba2cbf0d9839f0b1806919e","ssdeep":"3072:kw2qEcLVJ7lQAIToVpH7RrfIeDZiNBnbG0C7SJJnMkfwF5fkcNq:/zjplrNZ06rCnLfwF21","tlshash":"0164e64d72f82bb5458370f1b53e1932b270e013340c8d993d9d2299af66618eee6fb4","first_seen":"2026-01-05T18:44:37.305451Z","last_seen":"2026-01-05T18:44:37.805739Z","times_seen":2,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-UJsC-D2Rpdk2XuWfFwxJbfBW81S0uBaiwWMI-3BDVO7wxJE8j0e7hlR55TH8RPfmNfEIIb7JaaitclDZW6I5dCXsiFWUbUdktowc?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.13","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-UJsC-D2Rpdk2XuWfFwxJbfBW81S0uBaiwWMI-3BDVO7wxJE8j0e7hlR55TH8RPfmNfEIIb7JaaitclDZW6I5dCXsiFWUbUdktowc?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon-italy.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3jHr0pqmUeUpz8saI3UoqA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 05 Jan 2026 18:44:01 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: WrOGTCwL/oDkTKlVjx8X/xvzHrk=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":2,"connect":94,"send":0,"wait":94,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/app.B0C4LT9b.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:47.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/app.B0C4LT9b.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 823\r\ntraceparent: 00-cff6c2be7727b9294a2999ec7f2337bf-23d16ae7272c66c6-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-337\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1318)","md5":"c2911338ba0f72bcc74bfb6ed78a8f30","sha1":"65c9ef8d331c7987b52a4b74d608e0c2a39f4b6a","sha256":"7e97f0c0282f7ed5b77b9da3f8daa4e178d0856330be095130d4a20232548522","sha512":"01119816a60068ea11caaeaf03b4a444d050b9792860457f0c9abf82d2a8c1481538d832c7f85f0924b913e1d2d26016227b96bd24cc6a1109642f5a34f268e3","ssdeep":"","tlshash":"9431760a6682557947a614fec21b3b21b3219fd1356dc6e1e1bc3c3a3d72817c526fe2","first_seen":"2026-01-05T18:44:37.387774Z","last_seen":"2026-01-05T18:44:37.771385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":506,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/rollup.d.m.DiW8JAql.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-d303fbcb87f6d641baadad40bc5dcaae-8f4497f8f0840510-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-d80\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 572216\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3407)","md5":"729c48d8490150392538492adb6a0aac","sha1":"5e9420cf8abcbd7d1bd583bbe43c6854981066c0","sha256":"95303c90db5e107a7dd5079170d2dc7b74c6c1f0fb9b65e9b97429408e3e2e79","sha512":"47dfa25b8049647e15d9f7450a3993c2affa178ee5203d21f65f7072d435c7e6cfa985de0388692b5729c86fc701f2144f2924657b3278f92847a4bff7fe1345","ssdeep":"","tlshash":"0461d7d531e0e57212aa1ce9f077b202f27435a234dde4c0e21c8cb56a5accdb155e6e","first_seen":"2025-10-09T22:05:52.437865Z","last_seen":"2026-03-31T00:45:46.189008Z","times_seen":78,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/2491c3d3.d.m.BnSbgueT.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/2491c3d3.d.m.BnSbgueT.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 733\r\ntraceparent: 00-cbe43d784b6d6c1f55a32e0b67daf12a-ba098d7f7399ed3e-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-2dd\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1845)","md5":"1d4975dcb8013611b8d7048fe5ff8a30","sha1":"00d9b1a0d5a6a516bff3cd5a68829e4ca528eb6f","sha256":"985505b4ea196ea21d30f201c8cd17f93f82ec70e8181e0d1a4d05248cf50c2e","sha512":"dd01f97119a04272b4f4373c821be4e4a281046ff860b1e2ab717aa4fae34328263949af811a5dfcfe0152a0355de8047d9125479212f7a50dbff3b32749e39a","ssdeep":"","tlshash":"d54142ada464bb76665381e8f2644043113b32f2a244085c7bae3ee5d3ef541f261b32","first_seen":"2026-01-05T18:44:37.316937Z","last_seen":"2026-01-05T18:44:37.80659Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/cnjqphyx","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/cnjqphyx HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3155\r\nlast-modified: Mon, 05 Jan 2026 16:10:19 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: 3Bi061iONw4hBu6R9eEE6KShyV4r2Ymv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:43:03 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"2d6bd933527e6a3730e30e1f3056d955\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 50557aa30b42f85b01a1a22ebf5ee7a0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ai-UYOsBUJj8zq2ab8cmCicgihCgDlBxLCRL4iro0_dUCGj9J3Jr-Q==\r\nage: 56\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"68e716f1e39d1d92fd8637a486c02f62","sha1":"03ca974d706103a76201544c4496d890fe8287b4","sha256":"0ee687ed9dad021c1bc1726a847123b9b1a6337a19bb959a3099f09382b9c0e2","sha512":"a486881ad276c12967157160948ea2a38a647eb4b757604849a5e58fc343d9a635169aef4ce52b75750e12f36d5f879f84b36310e264208a956767b2bedb24fb","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffp7xtS7JWwzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOJwMSdZ935pqUP","tlshash":"4cf184feb6c2793806a31566623f770c7f3b654428494490d065c8c8797adcbc12bfad","first_seen":"2026-01-05T17:17:22.222162Z","last_seen":"2026-01-06T08:30:14.590082Z","times_seen":40,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/pacifico/v23/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32280\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:43:11 GMT\r\nexpires: Sun, 03 Jan 2027 10:43:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201638\r\nlast-modified: Tue, 16 Sep 2025 03:41:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32280,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32280, version 1.0","md5":"d150e652cabc5a1d12723ea4140fdfcb","sha1":"8304ce1e39dc93c28ca8dc5752273525a462e8e5","sha256":"99ec044ad9040a708e38f90ebd5984ca03fc46afeee26d5c77c4769c66ed89e2","sha512":"7f1497eeb0e8a1349fedae0428563ad60a48b8ddb1d42595c583d88f0d45500abe86772a9b51e024da763791c430a62e2bb82654ca6b93f8589dc374b708c2c4","ssdeep":"768:ymUaCDnm4OxWqBUK+bStvMxZWA2FsIjPkek2qCzN:ymUF1OxWCqusIjTTzN","tlshash":"1ae2e15f42f09d30d0f20634daa9c5343b50b9fdd19be02a2a5cdc0967a45d9357f1e9","first_seen":"2025-09-17T01:56:31.341257Z","last_seen":"2026-04-04T14:04:46.922003Z","times_seen":2420,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":110,"dns":1,"connect":20,"send":0,"wait":13,"receive":3,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7c9eab67.d.m.C8BG55BJ.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7c9eab67.d.m.C8BG55BJ.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 916\r\ntraceparent: 00-212a9b1c00940d484c428392fec9ce20-69be966a549e4ab0-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-394\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2572,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2521)","md5":"a20f3ecd4b28a4c6669a8ca848e4eaf9","sha1":"4b90319c517312cda7e2438bd8eef4fcfbfd9baf","sha256":"300fb5e652caddb53c82a25d38ae96acf3ac65bbd2d41a0ce4dc5cc651736565","sha512":"b39557f62559c7d5dcf138d18427b017357d858bc52cedb07cef2b65321b1431d0d3b027d3c355973a3304257e77e5616cb0e0c0a2116f9d0ac944a6d2d2a265","ssdeep":"","tlshash":"025121c035f17661966b2af3c67f012bf57a1994fa0e64c2b816ed9c7834032935fe89","first_seen":"2026-01-05T18:44:37.413534Z","last_seen":"2026-01-05T18:44:37.809534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/spribe-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/spribe-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3761\r\ntraceparent: 00-6c6fb6ba1467c32f44c51c8e2e047074-48793c48fc70336e-01\r\nlast-modified: Mon, 07 Feb 2022 08:39:55 GMT\r\netag: \"eb1-5d7698b78c1ab\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 10 Jan 2026 23:09:20 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2144073\r\ncache: HIT\r\nx-cached-since: 2025-12-11T23:09:20+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3761,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ebc2f9c306dbce541876c215cca0603","sha1":"32ef98f289c5404581c3930df790ec194a78c2fb","sha256":"f6e1e26c897ea8311b6f367d7e6967a086adcf9c3b151fcd59098bdb4ec1d6f6","sha512":"4e0fd678c996861d4eadc8a5de5c89a644005cb38c6c4e23b159cbbab1e4a59bacf415daac5d308c26bcb3a7f3d5a15aaf29190a46de7426dbf6f2fb02f5311a","ssdeep":"","tlshash":"e67153cc2369b1b4f409b7bed71a56ea792f2cee3604c48583f22d2b644452d89988d7","first_seen":"2025-09-23T04:33:55.391144Z","last_seen":"2026-01-05T18:44:37.810513Z","times_seen":14,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/it.BtPmDMVr.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/it.BtPmDMVr.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 185\r\ntraceparent: 00-24811efc0aa684bd715423f837fa0689-15c01ac27518d657-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:03 GMT\r\netag: \"68e7b33b-b9\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6596824\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:16:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":320,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88ef43e7260c8216506e0e3ed238fb2c","sha1":"6057b1e0339f5b5704a22ab77e54e4f9bbb7573a","sha256":"9e8e565408f0ec25f85d3a5fde9dce39ef30107ec7b4096294c697aa734e25cb","sha512":"eb6af3fbbbc658beca79f9060ced10e60665bd2eebb9bd858833beb56e85fceab5c1611bf77ba120d63569066d8e83ac03894356ec195a0bd00d863ea282c264","ssdeep":"","tlshash":"94e0c2a8a7b86450e51483708a3c79e26aa1d0ab62ba5081f1c428a0260e5575cb3add","first_seen":"2025-12-25T07:42:43.861065Z","last_seen":"2026-01-05T18:44:37.811435Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f06cd424.d.m.D31KhSC7.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f06cd424.d.m.D31KhSC7.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-566981fc6577ea583e5e196fe013db7b-a6cc7330da50a596-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-5880\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22656,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (22605)","md5":"b7549cf486868e6d60c9e6772e66e13a","sha1":"b3b5f7a6530d7edad4c37f220cef387729579c7e","sha256":"90fbe7f635ccc40da4febf9df27181ee3b9eef5bea028a0d4de58f5862cc4dc6","sha512":"8e561714de795ce4e9a04fe9dc65064f1fd9caf3c750bd6cf050c399b7572a1ea85a6560aa07308ead877e46c6673b4d9b79d7a032a42bef3f34dc15e838f74b","ssdeep":"384:kFKK4+fn3zgUeIXi8RNK91Cke6cIVOpX1M1wfNkEyQ1ql6qgwdckHVzOCpG+tbuP:9K/z9eIS8RNKJVOplMSEQC6idckHVzOV","tlshash":"7ea22cb7236293b246ab018a50770543d31407e5f148c4f179fe9dae35b58a2e326f3e","first_seen":"2026-01-05T18:44:37.501774Z","last_seen":"2026-01-05T18:44:37.812391Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/booming_booming.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/booming_booming.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 14020\r\ntraceparent: 00-f71eb8401492a3805487306f4a67fbcd-41855d644c5f5c94-01\r\nlast-modified: Mon, 07 Feb 2022 08:42:39 GMT\r\netag: \"36c4-5d769954701b8\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 04 Feb 2026 18:16:06 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1667\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:16:06+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4483002f66b0cf8814a6f09919ca5e8","sha1":"e186a468d5f37733720d28e8c4cc36940567ec87","sha256":"a1bb6f8a88b90d9809b9e8d30145763a1dfaec148e215ebaf9e493b003b3361b","sha512":"daec10502ddf12b1ecb22b5c6d1c007862ef77efc6250befe48ecde755c7a792202fa5ca06940c6d413f30dba74b9fc726dab1f98691f7f9645d7599a7086cca","ssdeep":"192:13WDp+LdRPXpU/+ARdYXVWdTTu1mSTcTjjnn2f6N/FL5gqDAgGP106E8wGSZDO8/:13LZRtsYXV+W10+4NL5gqAP1zIfIM","tlshash":"805295de77a192f8f504f3feca2258697e4a68fb3c92c638c3a51e41e69145d4948cc3","first_seen":"2025-09-23T04:33:55.500101Z","last_seen":"2026-01-05T18:44:37.813352Z","times_seen":13,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/b3b80119.d.m.D058WQf0.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:56.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/b3b80119.d.m.D058WQf0.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:56 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1184\r\ntraceparent: 00-a05c61cf90697351f38b9e4683e4412d-4a2f5189e8f4d2ca-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-4a0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2915)","md5":"7200971673a914a4511faf7b99951c7f","sha1":"d6467b30556539a9bb19c6f0f87046d188b95f93","sha256":"8f31f12bf27c9f5f558b8ebf68b006ae4aa8eafba3031b6f42b00d197863a318","sha512":"ba314fc06e226680262c60682367e019218afbed8fc9204f7dd2db5ea0146995d7b71cbb68579bfea2749b90dbce083f8820ebad7f8f1e48ee75ca5c3c4b54b4","ssdeep":"","tlshash":"a351940b993a2433518120fae86710320619d25d3698a0a8f7feb54716bbc95233bf9a","first_seen":"2026-01-05T18:44:37.482945Z","last_seen":"2026-01-05T18:44:37.814321Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/f7cf2aa7.d.m.Cn0zlC22.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/f7cf2aa7.d.m.Cn0zlC22.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-af9666ade98087a8a86e2a7b5916c823-7475c32be1da9f5c-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-10bc\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4284,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"b947ef62a7f91df66c383c7f603a51b0","sha1":"54afbe339cf9ad8e4793d3c4e7447cbd1bc7c10d","sha256":"e3b74989ba78a34e873ea7d3e98f3bf9f832584a81de6a23f942862bd7a40857","sha512":"57d2873fe2052ecf8404ce5b2144f76e8b068209ee27c12f593f009e80294d0832fb463c354d5ee365ca6678393d02f0474ab22bbae7dc653ed3be14c448f7a5","ssdeep":"96:kaqcNxpuDF0s/ahcpbjNFpFJRJ3qkdeolh58Q6ud0/bLKCRXxBL:kanx0DGRSpb/pxJ3bdeolh58ad0TemXf","tlshash":"5e9184de76c1b4b997b764e590bb710160291c94701e68e0e12ce6e77e329dfc621f1c","first_seen":"2025-04-24T07:07:12.664409Z","last_seen":"2026-03-31T00:45:46.22582Z","times_seen":99,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/mifiv-2-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/mifiv-2-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15983\r\ntraceparent: 00-c50ce58be517fdd346210529727e8871-a174f5253cb50105-01\r\nlast-modified: Mon, 21 Jul 2025 12:25:00 GMT\r\netag: \"3e6f-63a6f907e4c7f\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15983,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ef649593928afd942fcdac1df669467","sha1":"ce939d5cfbd0f360bbcf44f9c75e4a0ecfaede58","sha256":"4d63042b574d4117007b7cdbd165c36a1706ef569ce042a46dfb3f4610c7fba8","sha512":"4d2c766ceb42fa9bccfd85ca7744fa9e3d2e4d33fb608f3fe775c4b017e9e07c9838b5250e57e9746aed77ea08a0e1724560eda5ffd0953485b4f90293da08ce","ssdeep":"192:eqYmG7irXagYvKdGNbirHFWBtADpfcMho+9rIEf6/t9BiKgsydO87lwivO2VFqqx:WmGvJbiMBt8pPe+JIq6V9BiMANGDnev","tlshash":"cc7243ce7369d7f2d98ae3ecd9025424761940e2a6c0c7a0c3a4bf0f58474e6fc5aad5","first_seen":"2025-12-25T07:42:43.897728Z","last_seen":"2026-02-28T15:40:00.662739Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":69,"dns":6,"connect":4,"send":0,"wait":8,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/5f62684a.d.m.jNJuUjyM.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/5f62684a.d.m.jNJuUjyM.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7393\r\ntraceparent: 00-a35d21a73ced762217c0d2803787af10-899300a4c0eacae3-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-1ce1\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24689,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13470)","md5":"e16bc97e2e519aaa79db2ab430984674","sha1":"56fcfa546e547f20ba8c28797bbd74a4e7e4cc11","sha256":"90065fe79041dee1fdd1dd4aecaaa1dbd536e310d4c577ed72981a34970a3bb4","sha512":"6b9100accb8d7e8dd2b9edea65361df1f662cd36ccc709486888084f35eecde6034810e93258d331b64e04d5b264d4965c80ea763e745a64185995831999d7ca","ssdeep":"768:cxqC21jR7qT8C+YTJqMPcS0K9Sb5SvEoESs4erHzcViuayBg/B5VDs:yYVEx+KqM+7rg8Ds","tlshash":"aab2f9c132927571838694f2e6320252e33a64543806a4bdbdbdb9db7981d877b73bf0","first_seen":"2026-01-05T18:44:37.266076Z","last_seen":"2026-01-05T18:44:37.817022Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/playson-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/playson-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9145\r\ntraceparent: 00-50558053670b3176609acf40c76de465-435638f9e82655d5-01\r\nlast-modified: Wed, 30 Mar 2022 07:52:27 GMT\r\netag: \"23b9-5db6ad3a46f5d\"\r\naccess-control-allow-origin: *\r\nexpires: Sat, 03 Jan 2026 23:19:26 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 155855\r\ncache: HIT\r\nx-cached-since: 2026-01-03T23:26:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9145,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1f134499d36d20d70b3f58aab002b63","sha1":"16befd4d66337d68a9d7b01cedefeef19060737e","sha256":"0bcb1cc873fe86a184304ae3bf51dfb62d9d28027ac9f0c78f1df94e11a2485e","sha512":"bf62dea7f37164a95ea5f45ae89a56e81c0e424578b2b45fc6e8366680bd0be1526b4058786b857e5c6c1480a59628a516072396376a709e63d6873ce5d8772e","ssdeep":"192:pQK8s2HSiydBG4FN15H+7NwlDwADjxRtBx+OcGrBkclEGTKC:p6hyiyj3rHxNBRtBIOccBkc5uC","tlshash":"2412c5dc1bb500bce180b7bbd703047eb54ea5e22e50af28cba94f1a908186ded55cc3","first_seen":"2025-09-23T04:33:55.355552Z","last_seen":"2026-03-08T14:14:44.242253Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pool.liftdsp.com/pixel?id=154038\u0026t=js\u0026sink_id=99908cbc-6e56-4fa3-b360-43fb139ba1de\u0026\u0026timestamp=2026-01-05T18:43:59.965Z\u0026fire_id=1767638639965-4e2c6047-5bf9-442b-ba83-7f72a571822d","fqdn":"pool.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"35.206.140.87","port":443,"asn":15169,"as":"GOOGLE","country":"Belgium","country_code":"BE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pool.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 04 Sep 2025 00:00:00 GMT","end":"Sat, 03 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:D1:1F:8C:03:79:86:40:F2:82:80:03:91:2F:F5:D3:BE:9E:80:E6","sha256":"45:A8:F2:04:BC:98:4C:A8:E1:9A:B1:A0:3F:CF:0A:6A:43:2C:B4:D6:CC:5C:26:2E:59:FD:FC:B1:AE:AE:58:26"}}},"request":{"raw":"GET /pixel?id=154038\u0026t=js\u0026sink_id=99908cbc-6e56-4fa3-b360-43fb139ba1de\u0026\u0026timestamp=2026-01-05T18:43:59.965Z\u0026fire_id=1767638639965-4e2c6047-5bf9-442b-ba83-7f72a571822d HTTP/1.1\r\nHost: pool.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 0\r\ncontent-type: text/javascript; charset=UTF-8\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":903,"timings":{"blocked":436,"dns":286,"connect":25,"send":0,"wait":29,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/86620776.d.m.U6qnQQg1.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/86620776.d.m.U6qnQQg1.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-de5d5db6a13656ac2c2526119c3db7ad-7a84edce3957acf1-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-13bf5b\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1294171,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (64928)","md5":"e83eacfadaa934a56592d8025064593d","sha1":"a251d0d5aa0a208f1ad5391debee9e5e9d4968a6","sha256":"dd4f570a69b9a08d5d86e4e70b5674e371bbcee8f268183e4440cdbda49ada02","sha512":"3b86d0c45f5a7bcaeff832659448000ac018f014941f4a5675c0d7351b9c64e0c3f33d2cc6f69a22c33310b253c9b16bba621c2b8457bf4f97d82e6ca039c404","ssdeep":"24576:0iHKN2yyH6LAD+d7sU/dkRSUT8A7Dued5mx+hpi2WuTOj6nvbzba0LoqhjoU:0iHKN2yyH6LAD+d7sU/dk4UT8A7Dued9","tlshash":"54254b4a7649347683f34596a09b0401a23c0b55f5a48dd0e6fc8e7e2aadd3093b7f6f","first_seen":"2026-01-05T18:44:37.450879Z","last_seen":"2026-01-05T18:44:37.818407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 5455\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; shield_FPC=SCtfW2H3f2uTBokrpQCLOJ4g3SJxmMjfzM; _ga_JZZNGY93CC=GS2.1.s1767638639$o1$g1$t1767638639$j60$l0$h0; _ga=GA1.1.524640301.1767638640\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5455,"data":"[{\"id\":\"bc44c480-4ba1-4f9c-8acd-c69c4f374a87\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.128.3\",\"level\":\"ERROR\",\"line\":0,\"column\":0,\"error\":\"YandexMetrika registration error: config={\\\"counterId\\\":71598811,\\\"isDevIP\\\":false,\\\"accurateTrackBounce\\\":false,\\\"clickmap\\\":false,\\\"trackLinks\\\":false,\\\"webvisor\\\":true}\",\"file\":\"\",\"url\":\"https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\",\"ts\":0,\"stacktrace\":\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js:1:2713\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:4:4291\\n_R@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:5:2092\\nonerror@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148548\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:1:44334\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:1:43597\\nBo/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148688\\nBo@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148279\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:150020\\nregister@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:150599\\n$o@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151560\\nYo@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151223\\nm_/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151496\\nemitFrom@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:1:24327\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:1:24196\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:91\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3777\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:2836\\ngo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3248\\nsetTimeout handler*go@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3183\\npl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3995\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18235\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18305\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52331\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53325\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53538\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53647\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52062\\npl@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3953\\nIp@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:10:109140\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1283\\npromise callback*g@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1262\\nasync*@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1315\\n\",\"payload\":\"{\\\"name\\\":\\\"_R\\\",\\\"message\\\":\\\"Script failed to load: filename=https://mc.yandex.ru/metrika/tag.js; message=Possible cause: blocked by an ad blocker\\\",\\\"code\\\":\\\"SCRIPT_ERROR\\\",\\\"metaData\\\":{},\\\"stack\\\":\\\"r@https://leoncasino.gcdn.co/js/01f20af8.d.m.CSMfGuoz.js:1:2713\\\\nB@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:4:4291\\\\n_R@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:5:2092\\\\nonerror@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148548\\\\nEventHandlerNonNull*addScript/\u003c@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:1:44334\\\\naddScript@https://leoncasino.gcdn.co/js/8e2531cb.d.m.Dfp_l2nw.js:1:43597\\\\nBo/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148688\\\\nBo@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:148279\\\\nensureScriptLoaded@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:150020\\\\nregister@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:150599\\\\n$o@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151560\\\\nYo@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151223\\\\nm_/\u003c@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:151496\\\\nemitFrom@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:1:24327\\\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:1:24196\\\\nemit@https://leoncasino.gcdn.co/js/a48612de.d.m.wAYkMhfk.js:2:91\\\\nm@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3777\\\\nn@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:2836\\\\ngo/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3248\\\\nsetTimeout handler*go@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3183\\\\npl/\u003c@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3995\\\\nYt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18235\\\\nIe@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:18305\\\\nzl/s.call@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52331\\\\nY@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53325\\\\nzl/p\u003c@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53538\\\\nzl@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:53647\\\\nKt@https://leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js:1:52062\\\\npl@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:6:3953\\\\nIp@https://leoncasino.gcdn.co/js/64da48c6.d.m.CjEC4eAa.js:10:109140\\\\nasync*g/\u003c@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1283\\\\npromise callback*g@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1262\\\\nasync*@https://leoncasino.gcdn.co/js/app.B0C4LT9b.js:2:1315\\\\n\\\",\\\"silent\\\":false,\\\"interactive\\\":false,\\\"cause\\\":\\\"null\\\"}\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5f1f262a45f1bad88d5a893d9f715876","sha1":"937ea6945d98a5dfd95a12969be3b43a6e2be15c","sha256":"c0f640308a57653ce30b49c4260296c6b3b87a5abaf7341918f307a763a792ac","sha512":"e33d201677b04bc01c59a01e1547c7dbe1fcefe1b95817e9a7889d4e5bb7c2962cd21cf8e11452987ed55321f022ed43f0fc348ef5b3e31f41829fbdadd039a0","ssdeep":"","tlshash":"74c02bc83c7f06940d0881086720cd114ba8741140400a0a0bc929000084c2cfb8fc31","first_seen":"2026-01-05T18:44:37.819162Z","last_seen":"2026-01-05T18:44:37.819162Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/18+dark.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/18+dark.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2763\r\ntraceparent: 00-377c35cab1944de30a6db39af71e7913-0faaccb80b97c4d6-01\r\nlast-modified: Mon, 21 Jul 2025 12:15:35 GMT\r\netag: \"acb-63a6f6edbe355\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e9bdf84336ba2f0d7fd0116bbc47e0","sha1":"5f1882ed3aa41267bbdb1c083902955e2a965022","sha256":"2c0b2b2f7ac364b363a152aeddf08ad89a3b4043e3347cead0206158492c8a2a","sha512":"f59720c3a786afb91c58de81a4097faebb49e15008f2918805b041afa60d8e790d2296ccc3b01b008992ca92135c59135f27b7c5760542999f8a5c7089e9b5cb","ssdeep":"","tlshash":"145101efa7d4b2c0d807e3b094094a793adf287f77158744425aaee6fb02094484e8c4","first_seen":"2023-07-08T17:48:53Z","last_seen":"2026-03-31T00:45:46.207178Z","times_seen":122,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":72,"dns":1,"connect":1,"send":0,"wait":6,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages3.gcdn.co/HRJLWPLB/files/top-nav/vip-ic.svg","fqdn":"cdnimages3.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /HRJLWPLB/files/top-nav/vip-ic.svg HTTP/1.1\r\nHost: cdnimages3.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-bb68b871166a47960ba884195608dda7-ac629e759e7f1ce6-01\r\nlast-modified: Mon, 29 Jul 2024 11:38:11 GMT\r\netag: W/\"106a-61e614bbda1cd\"\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 178944\r\ncache: HIT\r\nx-cached-since: 2026-01-03T17:01:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ef082510b46a6aeb00c0df559b2de18","sha1":"b483a67c1a80a1db0afdd67246d5faf47f846f42","sha256":"155705ad90a321b396a52fbab695bc92f9a2046aac18371fb9a172657e97c2a6","sha512":"b23cde6916243bb8bd8695e5a97722d815217395a2727cd39aa9f459f344b88c951a260a56557d6bab22af21307f9765e408b8f67d310970747131cd6fdb2d11","ssdeep":"48:e8O6IHpZU+i2/zId7HoWsiN0thXLiJpwO/b37IvgFLQLZi/hABNFkg62venBHcA2:go0kMWsA03i/bYgF0I/hABLkrQeBB5K","tlshash":"c681892aa144d61d5883e24dcbbf91e1134e4066f1ea92dc7affd3aca10f4d4f946834","first_seen":"2024-08-31T07:43:54Z","last_seen":"2026-03-29T15:19:13.373051Z","times_seen":108,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/casino_newyear.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/casino_newyear.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3367\r\ntraceparent: 00-1a20316fb39e46a1ccec84b7c860546b-09a786aa59432914-01\r\nlast-modified: Tue, 26 Nov 2024 10:08:14 GMT\r\netag: \"d27-627ce0707e2b2\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 31 Dec 2025 14:31:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 447085\r\ncache: HIT\r\nx-cached-since: 2025-12-31T14:32:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19393058de2d299f14dcd9439cb762ab","sha1":"4b9a78c3b7738f3ada7c397ae9c7d4f87d085bd7","sha256":"d23d83deb8bcd63f043c012d6d12ec3887ce3624bb8c4516969d4b3dac38730e","sha512":"60403502f97443eed822bce940dd5991905a3ef664eb8cb02011ea6bda28bbe983948fadc4b482bf737026f5197bb10686a79f649f00f8cc93149552e2fe9695","ssdeep":"","tlshash":"556160f3e3d8e0e48543efe8d5232926bb6b38bd3f92d7890194d9442a552b589c4c94","first_seen":"2024-12-31T04:55:51.416247Z","last_seen":"2026-01-05T18:44:37.822823Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/app~tooltips.93c93ca5.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /app~tooltips.93c93ca5.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 75410\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 05 Jan 2026 16:07:31 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: D63i3PIXqpG3XPnHFGaUGRzXizH9NMCe\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:10:22 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"9e25fc6e7b3da4f804bf3d5296c54d40\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 2024\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: AXiFJ7x9CnGmi5AST9ANcjQ9D4z-h2nKlMKvT9oAOzvHLiFx_1k8Aw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":320129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65457)","md5":"55d67b9087044e5585c4acb538e272a6","sha1":"d47e429decee4b099cacd5dba2d12c4f5a3852a7","sha256":"89d9722a2143a5cd6801584760ab93793a183f033995bf27bd781fa69ffd6da5","sha512":"77d23f4c40e747e9fe172ca19342d11319c732394c830e392d4004ae7ba03e2cd913fa2255b05c58e3faa71302d4532d1b818553bc93a7b766dacca8dc5af51e","ssdeep":"6144:3Qcoky2VEwazOqUoPl2C2ncpWuiFUKVbofQe8PuMiGkgILSm:JqUoPl2C2n+iFUKVbofQe8PuPGZI2m","tlshash":"b7643cd8b1c5b428e3676124406f140e733e7595f80d45a4f66ee8e4e8ae1ce9223fde","first_seen":"2026-01-05T17:17:22.307518Z","last_seen":"2026-01-06T09:18:17.6927Z","times_seen":27,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 269\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":269,"data":"[{\"id\":\"f2f7477d-efd2-45c4-a22b-14c21c7530e2\",\"qKey\":\"39df8872-1248\",\"operationName\":\"getBanners\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"2c0418f6-71f2-45f5-938e-bb3dbadb9527\",\"qKey\":\"6352b886-793\",\"operationName\":\"getAvailableForms\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":46346,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"36c566d1929172a074dea5cd699cef49","sha1":"62ff1e18c65646230be69e72c028b13f7442c934","sha256":"0014251d86cac183edcd205e780c949830187f8ca486441e4fd20a3fb3c37ee4","sha512":"23b3a51ed2040fb5a1ab5e957b5cf586c710bc62cd30557a0c10a63a9892d3a5fb033e73c4efee1fccde4b2e46d7c157e0d2da5609237a6a17472f69200a485e","ssdeep":"768:JGSJEKovNhn72OaErdj7I7T7U7V7+7R7V7u797G77787f7B7j7+7V7U7N7K7nD7s:4EMgnM5m152RefkDFXm5MBC3LClI1mce","tlshash":"ae23639e559cac7fd389a28538bf3d25610e3017b180ff74a5ad9f6452f4aba013306e","first_seen":"2026-01-05T18:44:37.824955Z","last_seen":"2026-01-05T18:44:37.824955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/vegas.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/vegas.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3456\r\ntraceparent: 00-67daf6dd5c9071b7531c01417b5c66f0-407bbeb566943142-01\r\nlast-modified: Mon, 07 Feb 2022 08:59:03 GMT\r\netag: \"d80-5d769cff1f764\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:08 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 721224\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a710024692d92eb9bffbd1a702336855","sha1":"125596c7cdcc5865f9c7a3824647caca7beb2192","sha256":"c7be15965dae1df109391c7dd4e88fb2070ccdafd55d4f5b2739ce4c618fc8a3","sha512":"784ae4fd878e39538228739de6ff4dce3117394ce6e6b832b61284a0f2bec2e1e6382561e1a87136e384a8f549ff7e5f6149944cb03e766f117af85c4d3ce3a3","ssdeep":"","tlshash":"f061f35c8a2a4260d11113deec4ef0b4bd89295c27529df187382e0379758fceca68eb","first_seen":"2025-12-25T07:42:43.787519Z","last_seen":"2026-01-05T18:44:37.827908Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/17ff6b76.d.m.HBxgj1_9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/17ff6b76.d.m.HBxgj1_9.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1097\r\ntraceparent: 00-35fbe35ef113123189be694adfcc38f6-d4d287112b61927d-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-449\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2346,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2295)","md5":"e2d5d0730bcfa889de401cfe87cbb53c","sha1":"41abf5def69cc21f48f190ccd514408ad5a6628e","sha256":"4a65a2b2de6a89cc323c43c3afd4573495472e0ba366130bdf7bd0caf89017b7","sha512":"589e257073584a9743b684b6c7f3af50e3d5e48db1ade5868442e98a18c423a4fb727cbf00050a75dd64534005a1b9e63d05c9b27ca77492ce4974a120b5923b","ssdeep":"","tlshash":"7e4176b9b080f43c437e84bfe4b691d457245350726795f1e06e219d09a4cc6c2b8f9f","first_seen":"2026-01-05T18:44:37.444398Z","last_seen":"2026-01-05T18:44:37.829082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"34.199.152.216","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 468\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":468,"data":"app_id=cnjqphyx\u0026v=3\u0026g=501f3d4e163f7ed455044a1e8345e7b9d2661a70\u0026s=c70ae9ca-beba-4b82-b0c1-bd0684d92c2c\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=898bc6df693adab1\u0026internal=\u0026is_intersection_booted=false\u0026page_title=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: 98a2f35f66b42eddd9c7a0e6425d3e5bda30fdb5\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0023c2svus8m47qpokh0\r\netag: W/\"4e84de28917d12bc516d21b9a60f15c6\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://leon-italy.casino\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.036510\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-02b143f88e2c47dc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":582,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2374f88428e19ca0df366a764545b1bf","sha1":"2893501802b75337e0a2f9a40d9a7c87a2b1355b","sha256":"4e84de28917d12bc516d21b9a60f15c60eb48a957765c29cd8d582b428913554","sha512":"07ee324b5b8bcfb2af4e4fde611c2c49a5beaca154236d9a823af0adb7e8a868e236d730affa0630e64677c00a764de638efca7e93cfd37f8b1c104f1f0bcad2","ssdeep":"","tlshash":"9ff0e1e9978c4c2537d247d9c31f6e0b0796859a62501df0f0b4dd98d0eba169949507","first_seen":"2026-01-05T18:44:37.480637Z","last_seen":"2026-01-05T18:44:37.830084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":195,"dns":8,"connect":92,"send":0,"wait":153,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~locale-it-json.87d963fe.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~locale-it-json.87d963fe.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 19832\r\nlast-modified: Sat, 20 Dec 2025 14:31:41 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Q3RwIm2jDW23Qp6T0jmXuAHl76s1fmey\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 17:09:53 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"42f97b700e7475d2f086831ae1d56f03\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6NR3NhYYkXO5EmeL9ZWAp8gskoReFp26EARMKw81Ed_fU5gmeBM4tQ==\r\nage: 5649\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":78870,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65387), with no line terminators","md5":"b81b6985a6b44dc7a395aedf890025ed","sha1":"de9716672e529341cd27360666a0ba3819bc05a0","sha256":"93868e30712f1b1cab8f1d7d0fa9ad01fddd2cebd09717c40a2d7781dfd8de8c","sha512":"0c1d59cd17a6efa1674b06682810e3819c8684448e81d0ffd668ee96fd798c6fb60be9eea2fc100dd45614b249a4e860027a52e047a9d041f346de76b4aa7c82","ssdeep":"1536:yxccNWAKZ13KafYSrnwwMmO9H8SgpxrnB5/7u:yxNKqT0wwMmY6nB5zu","tlshash":"6973b42c4c64ac3106af03e7999a7c5aebf886debbc85514fd95861c11cdbc0e1af706","first_seen":"2025-12-25T07:42:43.803795Z","last_seen":"2026-01-05T18:44:37.831028Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/71c69379.d.m.B0hzyTNM.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/71c69379.d.m.B0hzyTNM.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1739\r\ntraceparent: 00-180d9e37d8d209484e229e719556b33b-58ca7a59b99c2cef-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-6cb\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4613,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4562)","md5":"cf29b9535fade0254cbe92c606e33ed4","sha1":"af98ade9b06f34363c575f4888e294d8bd440b41","sha256":"c4b6380dab64297efd9c8b6cb5f7a214428b5d9bd6eefae24a33313a5cd7c2b4","sha512":"f4107129690b1c08f75c93b45fbf0a4267837636f7f437a1e22d7ab3576a18b92339e70c6a02f0de82f649fa39d046526e3c3f6aade081cbdd78b93826ba774d","ssdeep":"96:rv2uRNa0uGzXt8I2s0uGzLsJdcnwL8ZuGzhrMvyrPAXywWixs:yM4UpzUL2dNUSKrYiwtxs","tlshash":"7491a78d3c7ed4b0abff588ff1690c199e6d0fa621254d4194bf14bb2bb7850e252427","first_seen":"2026-01-05T18:44:37.346833Z","last_seen":"2026-01-05T18:44:37.83192Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd43e72a.d.m.vfSsdjxl.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cd43e72a.d.m.vfSsdjxl.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 304\r\ntraceparent: 00-5b6d8ff31f583ef078ccd88d04fcfea1-eb290db9cb820ee6-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-130\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":512,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (461)","md5":"abe1ce4231382d5b2139f5c5980deee9","sha1":"236a426039842cb375e77fccccc05dcc255226ca","sha256":"608d4f64b5b27661a92ecb393e215a3928520a9b85ea746628d7e254b0ec4e75","sha512":"07e1746c5afbabf9946e6df0c242e617c335dcbbe34171ad0739f844eaa4522ae3ac0478cf59fdf746257ab66399e1e60d39eec9a77b26f7a7923b8196c31ed4","ssdeep":"","tlshash":"7bf059cd76c3b46806a71479c03fdc5ef63b7d947acec4d0e50aa0752a3446a8133a69","first_seen":"2025-12-20T03:09:17.600449Z","last_seen":"2026-01-05T18:44:37.832773Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/3d6acc57.d.m.BDaCtZJN.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/3d6acc57.d.m.BDaCtZJN.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-07f08380ea567bc5582f5925365dbfb4-aab3176caba365e3-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-fb7f\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62242)","md5":"7a25c4c9a65d55764117fc52af2108b9","sha1":"9dc842566d2fc4de0ac85d0b5999f04b6fea927a","sha256":"c3ab9bd41d76ed2929a01ea1922a40a1668ad6add8a1ef18662d824e0a6478ee","sha512":"1a886792e533fa2a5da9a0aca95d87ae536f5ef6a68356f87b4fb9c26b34e47f6a0544d27055e3283cbf56f94eadde2c40e26f0d1d3045e1b3e669faec9635e0","ssdeep":"768:4hpsMqKvydWIthUY7jwhgmNX5DrjWHQyfgJ8IfhoVkjpWBknQAY68uAgKud+et5l:440yRbYVfh7WBknQL61PHd+ejJm4","tlshash":"d35380cd76d2b0a583a3a034402f940af33e2d55a84dc558f5bbc4d5bcba819863bf6d","first_seen":"2025-10-09T22:05:52.462523Z","last_seen":"2026-01-25T14:09:20.240953Z","times_seen":53,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/utorg.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/utorg.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2382\r\ntraceparent: 00-30dfbe559b2ba932f355e4266b496cfa-5e70893c3a8299bf-01\r\nlast-modified: Mon, 22 Sep 2025 15:19:30 GMT\r\netag: \"94e-63f65588cf917\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86be8991a4c69dd7889a23bbf7f85f06","sha1":"f95de34fe087609ad985280738cde8ffa6c3efae","sha256":"882c5b1272dd98cd1dc2f3eaf7b1b313c5d0dbde559abd8a568ee7d4958a62a0","sha512":"7bb6854d2210186e1ae7153ae7721e943accceb27c75d69246932cb7de87d86f83e3cfcff7d2ae6c35884334581e96e0ec6690e13a2c5cefba74ac8c9d42ae62","ssdeep":"","tlshash":"ee4150d222edb2e0f90dd7f86924586b762b32fa3831c594836b7c09a60954fc258cf4","first_seen":"2025-12-25T07:42:43.91826Z","last_seen":"2026-02-28T15:40:00.675912Z","times_seen":6,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":97,"dns":10,"connect":4,"send":0,"wait":3,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 190\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":190,"data":"[{\"id\":\"0ab6d807-ca40-4601-9c83-5e595edd800f\",\"qKey\":\"33368f52-237\",\"operationName\":\"getCmsContentSpintaxBatchTranslations\",\"variables\":{\"options\":{\"contentKeys\":[\"WEB2_SEO_HOME\"],\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38681,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8d1dbc57a05ddc5cdf64bd0b9ac4906a","sha1":"e50135ed9487c4cbab115f2d7b7dc2ecb7b6a3e0","sha256":"bc26f8185661e0b0343a9e53835607216f0b131f3014fdbbac8090cf0e7c92ad","sha512":"08b81a6cc2cd109bc824611426774b332bdf88b46040faf77c82a20a8f7ffc729dfbff7175ace3921b73ae681ec06a80571a8e519d1607cf66f44dc38039dbb8","ssdeep":"768:RLQPlI7bnF2zceDxVlwQZxTq4IWJhyqq9:NQPWbnF2zceFVWQjTqkJkl","tlshash":"0403a651f7dca117380bc281676343d5a95d48dcfb9561e2befac6e4e28ca00ac7c58e","first_seen":"2026-01-05T18:44:37.835427Z","last_seen":"2026-01-05T18:44:37.835427Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/208a717f.IEG3RMnx.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/208a717f.IEG3RMnx.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 213\r\ntraceparent: 00-a30b690742efa15f3145003302f87eca-b9c6142c8673d201-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-d5\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":519,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (518)","md5":"2503e514bb973cf99d45b28178d290fc","sha1":"c096c1cd6280ff0fb242188e3e61d55aa4f56e6a","sha256":"03a5fda0dedb4bc1630184c5f31da408e9655a2a8a2a33ef27be0e96d88970a7","sha512":"8e86ac1e134673a406d1b0c29a3f57aa545d372e948805fc552eec0b563869941ce1f5c1ab2d32a6eddc8e79edbd8c2f7d5d97c6f5a6e595e047fdacd41ed438","ssdeep":"","tlshash":"88f0506b0d41d32e64b76419d5eb7e4c922d0cc726831b6c5c7870ad919569c50316c9","first_seen":"2025-07-09T00:32:09.424202Z","last_seen":"2026-01-23T03:09:51.680767Z","times_seen":40,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T18:43:47.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nset-cookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; Max-Age=2147483647; Expires=Sat, 23 Jan 2094 21:57:54 GMT; Path=/; Secure; SameSite=Lax\r\nlink: \u003chttps://leoncasino.gcdn.co/js/rollup.d.m.DiW8JAql.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap\u003e; rel=preload; as=style; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js\u003e; rel=preload; as=script; crossorigin=anonymous, \u003chttps://leoncasino.gcdn.co/js/app.B0C4LT9b.js\u003e; rel=preload; as=script; crossorigin=anonymous\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":41276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (21561)","md5":"36eeedaa3c85383f22177d4106d79947","sha1":"bc34fde472dcc687953c57b8aaac3aae3438df09","sha256":"13e23eb6316859428b860e340e2e9fd3164da518d6ddcffe69fc8e05e307c5ba","sha512":"b26108d29f054abb0310272a208eac239870cf753fe1c9bd51bc3918b72e98a504c586bf393db6881915932def233273478b45998662b699ba6cbbb0054384ae","ssdeep":"384:BGmj1NN4Rwy1MfOjzB6oQlaKD6U3m6uaQtGokYbMHuAO5sz2J3SBCW:BGmxNN4RwXgzByHD6sm6vokSMQs6JE","tlshash":"a3032cfe1f0495f9fb12a3ffe756208c6a09b467dd418d74f26c729877c7a9048a2182","first_seen":"2026-01-05T18:44:37.838078Z","last_seen":"2026-01-05T18:44:37.838078Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":77,"dns":28,"connect":20,"send":0,"wait":75,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/bonus_buy.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/bonus_buy.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1496\r\ntraceparent: 00-0ff3460bd13c525ad961e8c9e344c1e4-56635cbfe6d8b430-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:52 GMT\r\netag: \"5d8-61bf3656318b7\"\r\naccess-control-allow-origin: *\r\nexpires: Thu, 22 Jan 2026 17:12:22 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1128689\r\ncache: HIT\r\nx-cached-since: 2025-12-23T17:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04cc7ff5133430a2bb78f34c3442b720","sha1":"0b8442472d38d17efdbf59c2849d0362c3b90687","sha256":"22eb05f821c7cc95e715dc17de449edd34c22e15cd62eeb916824dc6b87b31aa","sha512":"f70c09ab0097bbb5e75b417860f3d09d41032654af0f8a967bab915228f284cb3b4fe35b4e7b3c99bace421f1f3e428d39b9c3b3931612f7734bbdab203ad54d","ssdeep":"","tlshash":"2631a7d2564c60f4570ed774c526ff967baf34ba7adc8bcc61400a844e20188b98d9c0","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.250859Z","times_seen":61,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516078\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=4jg3s6\u0026event=visit\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 05 Jan 2026 18:43:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/a17a5642.d.m.d2egGL5n.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/a17a5642.d.m.d2egGL5n.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 76432\r\ntraceparent: 00-139d89bb8ed8774fe80349fdd17933ca-33b0212696b8671a-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-12a90\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19927)","md5":"555d4b25f076300ed4bc7c1783356f4a","sha1":"fe89c62d1d879c01c1012d5a5e81cc338e3215f2","sha256":"3d0e8b45f9eb5c9c464d49cef63580f2b905615dde847cece1780ee09044467f","sha512":"f1ae5e4f6edc731d7a18af2fc530da0b966259eea945c9389c9f92a14f021ebdb5a90fde1466ef5b60aa85216d0d83dd0a3573a7c85d8908c7505e122c143fb9","ssdeep":"3072:PrcHuCsjhXv1yXSHVRpxjfWrkgqH3qlVhYa70Sn/cuMOEUQ92KA4S1N9dUrScp:TlbjhXv1/XOkgC3qlVhYa7L30De17dUt","tlshash":"0c6408d971d6703243e74aa5507b4102f7395e90740a81a8f92cddef3daa40aa2b7f3d","first_seen":"2025-04-24T07:07:12.786105Z","last_seen":"2026-01-25T14:09:20.163665Z","times_seen":98,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/baa7435a.d.m.BbiSxHJn.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/baa7435a.d.m.BbiSxHJn.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8819\r\ntraceparent: 00-ee6efd4600175583753d2917e958a943-2a274f96db21bd62-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-2273\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380200\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23588)","md5":"17f0344e1d0f109f0c2c75da7d646bc3","sha1":"a7ac565a7af3d5e8ea4242862618fdb57b561197","sha256":"299bca3929dafddc8329ae7cf329519b6f0a153f87eb02fd50a1794838b5b6ab","sha512":"969df9f5471c7ba8aa0d0fed9d831e1bdc30ffcca9b8815c4be0d895e5b0c260ab8297915d1ba3f5dbc314dc8f20c0112206119c92c88f25d97b1f73ac4702d6","ssdeep":"384:+QdRm3BJ4puAyz7J+CHzYQO3aTry++J5Fi7GsdHzkdRvnebCdvNKMl06COZSE2i8:+QdgKpvyz7J+CHzYQ/Hy+c5F/sdHzgRi","tlshash":"19b2e8e93282707697e60ae5807b1106f2761dd6384e94d0b01ca9e73c33d9d92bbf6d","first_seen":"2025-12-20T03:09:17.625008Z","last_seen":"2026-01-05T18:44:37.841251Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-qtag: a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nContent-Length: 830\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":830,"data":"[{\"id\":\"e786d87e-3dbc-4467-afd5-922705c44c65\",\"qKey\":\"93dd9da9-132\",\"operationName\":\"getCookie\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"f83f6fda-d69d-4bf1-bd6f-e97718cfbdbe\",\"qKey\":\"790886e7-467\",\"operationName\":\"getRootSettingsInternational\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"26fb177b-e877-4a5c-96f8-b6bcfb67a78f\",\"qKey\":\"b120a8be-122\",\"operationName\":\"getApiSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"dbc7ca99-98cf-45cd-813d-ebe6035ab16e\",\"qKey\":\"7f2ddfa6-16000\",\"operationName\":\"getSiteConfigSettings\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"8bbe4c66-a56a-4e09-b4a8-a7392106ddd9\",\"qKey\":\"f9753f3f-92\",\"operationName\":\"getRoutingConfigs\",\"variables\":{\"options\":{\"ts\":0}}},{\"id\":\"642e8bb1-aea0-44e7-8964-cac9abcfa8a1\",\"qKey\":\"c2e6684f-112\",\"operationName\":\"getNavigationConfig\",\"variables\":{\"options\":{\"ts\":0}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: ABTestSeed=39; Max-Age=315360000; Expires=Thu, 03 Jan 2036 18:43:49 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; Max-Age=2592000; Expires=Wed, 04 Feb 2026 18:43:49 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nqtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; Max-Age=2592000; Expires=Wed, 04 Feb 2026 18:43:49 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nreftag=; Max-Age=0; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nipfrom=91.90.42.154; Max-Age=31536000; Expires=Tue, 05 Jan 2027 18:43:49 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\nx-app-language=it_IT; Max-Age=2147483647; Expires=Sat, 23 Jan 2094 21:57:56 GMT; Path=/; Secure; HttpOnly; SameSite=None\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139228,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"29ad820533773b8f3c713c551951ca0b","sha1":"1a215fbaa650f3c75fe85ce8da63ea8c5e43fc68","sha256":"5eacf29260ebcdf9407bdff455e995de1c4666a2417c9cb93d04fd1e75076bf1","sha512":"fee62faa8c2d27021b206062376df23956e1bb1149746d9338336ce17148cf159cacc084caa70ba973c305a4469be097447ab376efe116fed10901153a4b9afa","ssdeep":"3072:lUadSMFj9bBJ4RuXSYxA52f62gvmxKvWT2/gZs5KVML8pfAPGRqPt2JQPY1s1s1J:JcMFjJ4RuXSYxA52f62gvmxKvWT2/gZJ","tlshash":"83d3eb3a721cdd6fc4874a8d633f2e36003dd06625caa89cdd4dca6991ef2f8613155b","first_seen":"2026-01-05T18:44:37.842019Z","last_seen":"2026-01-05T18:44:37.842019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/7fbe0154.CbYR40R8.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/7fbe0154.CbYR40R8.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-f6307a77e1dc82abad09bb15e07c5d8f-fcab96e655d4e41e-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-1e481\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124033,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9eceb615fc6e2c7c7d59e1f65d00a686","sha1":"f4ec48f6cda4262c372bd2e8c2e4b08c0a057c22","sha256":"1d34801f854a544218192a107303baa8ee5f3b727a6db519213b5832c04c6f46","sha512":"59d3b06590f05ddabb5e970129011f4811dad4c9a5f76c54deb3f2cf014815ab9c67813b4a634b08e82e25e7d7878b22b37cbf55b2d030e5b6353dae04678513","ssdeep":"3072:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10bVMby2cekOKywXwfOIl6V6duEerdA5wu9:oBBlS6q6LnH7uQzI4JLcagAgPjP7M10k","tlshash":"7bc3a8ff8e50a27bf767ec9dc3e5b648724eac03cc921d66d1b212ac42d63919394b05","first_seen":"2025-12-08T11:02:52.82182Z","last_seen":"2026-01-05T18:44:37.843621Z","times_seen":13,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/LeprechaunsMagicMegaways@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/LeprechaunsMagicMegaways@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 79418\r\ntraceparent: 00-fe4bacba771098d9394592e8da0c5c8b-0ae39f35b9ede8ec-01\r\nlast-modified: Tue, 27 Oct 2020 19:14:22 GMT\r\netag: \"1363a-5b2abdabc119d\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 28 Jan 2026 21:10:31 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 596002\r\ncache: HIT\r\nx-cached-since: 2025-12-29T21:10:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79418,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"b3a6acf111951657e25455b8eb60b777","sha1":"4f261906489801af9be422e8337bb6af4694171b","sha256":"f79d66d2b8871bb1dc163bcf76092e9cb2b8541832fec3c0b559e06d9dc92726","sha512":"811d2061ec26799f7df22aff83ee2adda4d4c9bbee4dab95fb0e16140872428aac7a388fec03807b8b684f826912f9f877a29dce1395d1064afc88fed48dca4e","ssdeep":"1536:Bvit9JinpaY227FCM1WUYbTLjnc+afZjWtki4EBk6ordsmgh7V:xyJmpb2274UWxbTLjbafZjWZW6o5svD","tlshash":"f87302de8f06a9e0f384b8b0dc478811dcfd66a09d726306ce5ced15c24daf926496bd","first_seen":"2025-12-25T07:42:43.854379Z","last_seen":"2026-01-05T18:44:37.844187Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638636501\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=12595","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=0\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638636501\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026up.customer_login=\u0026up.customer_status=logged_out\u0026upn.customer_type=0\u0026up.customer_bet_type=UNDEFINED\u0026up.vs_lw=false\u0026tfd=12595 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":105,"dns":0,"connect":21,"send":0,"wait":55,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=4\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=1\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638636501\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026tfd=17647","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:04.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-JZZNGY93CC\u0026gtm=45je5cb0v871047016z8890860847za20gzb890860847zd890860847\u0026_p=1767638636504\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=524640301.1767638640\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAAQ\u0026_s=4\u0026tag_exp=103116026~103200004~104527906~104528500~104684208~104684211~105391252~115583767~115938466~115938469~116184927~116184929~116251938~116251940~116744867\u0026dl=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026sid=1767638639\u0026sct=1\u0026seg=1\u0026dt=LEON%20Bet%20Casin%C3%B2%20Online%20in%20Italia\u0026uid=\u0026en=page_view\u0026ep.event_country=NO\u0026ep.platform_type=web\u0026ep.device_type=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.web_version=6.128.3\u0026ep.theme=DARK\u0026ep.full_url=https%3A%2F%2Fleon-italy.casino%2Fregistration%3Fqtag%3Da34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\u0026ep.previous_page_url=https%3A%2F%2Fleon-italy.casino%2F\u0026ep.main_domain=leon-italy.casino\u0026ep.lead_section=home\u0026ep.event_category=registration\u0026epn.event_timestamp=1767638636501\u0026ep.event_action=Page%20visit\u0026ep.website_product=li\u0026ep.website_skin=leoncasino\u0026ep.website_locale=it_IT\u0026ep.first_theme=DARK\u0026tfd=17647 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://leon-italy.casino\r\ndate: Mon, 05 Jan 2026 18:44:04 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/evoplay-2.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/evoplay-2.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3217\r\ntraceparent: 00-aac9ab16aea439526d0b474c500127ea-620ce17ef75a3b5c-01\r\nlast-modified: Mon, 07 Feb 2022 08:44:44 GMT\r\netag: \"c91-5d7699cc016ff\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 09:01:38 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 721224\r\ncache: HIT\r\nx-cached-since: 2025-12-28T10:23:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d7c4a09a7a89989c9b7b56143cc28f3","sha1":"63029c4cf131923aa48fb84bc8da5a03a838925d","sha256":"f0643cf6bacdd28afbe0d4ea81297d1e4b625057506ac3956610ba354d678a0e","sha512":"7d923b1eaa48a216acb8179c2e4f2e00bc4b8d14ab908a1baeac61febda8fe3e6fc7ca5be74dc1c24fdbe5e7a29c215e85c954cf5a96b1ac5a4e55b8b485af07","ssdeep":"","tlshash":"926186e8b77b92f4f0006b69c33e90340e674de49a41d468cb761c2bb4314ae4c69dd7","first_seen":"2025-09-23T04:33:55.434039Z","last_seen":"2026-02-28T15:40:00.789446Z","times_seen":14,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:58.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 20:14:59 GMT\r\nexpires: Wed, 30 Dec 2026 20:14:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 512939\r\nlast-modified: Tue, 18 Nov 2025 19:00:14 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-04T14:32:04.960052Z","times_seen":56158,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/64da48c6.DHDNCeYY.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/64da48c6.DHDNCeYY.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-2ede1863205ef3ad62abefb98f690f3c-b9a2ed44af21ca56-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-4039\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16440)","md5":"4d87269e44c4639cad79282bd3e56c65","sha1":"31e83329fd260eea94486c9ce66b2df430dc53e0","sha256":"f361154c7c7c11401aa0e630dc90f18f717534457d9b610c16e51bd290701924","sha512":"b905a6a411088e9c3c2ec61d19fb0064b0debc191037dde41e112e61fd6de6cde224ad508f724319f6c2ec635880afb11a986e9812d8eb9dd83ce4c5de7a3663","ssdeep":"192:Jw7vLZ03o2kZVz8KGJCRjMiS7cZmnDA3tMHWF1vHOp8L803Y4FUfBFo7:K7vLCu3GWJYI153Y4FUfBFo7","tlshash":"b172a7d50d64367abb7bb11fc6e2aa0ca31acc46de9326d5b5e1e12c47c638142f3d04","first_seen":"2025-11-08T11:37:36.045292Z","last_seen":"2026-01-05T18:44:37.846257Z","times_seen":33,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516073\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T14:48:47.346556Z","times_seen":714715,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":86,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/27d773af.d.m.CDjhluz0.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/27d773af.d.m.CDjhluz0.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7296\r\ntraceparent: 00-96ec0572de5c885a3e597bb78ea8048f-1edf2f5ff8ad8a99-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-1c80\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96750,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c11ef2b6eb6d7be33401fd8a3e8f092e","sha1":"2c596d5376a552ed166a78706566ddd33ad20671","sha256":"04c8fe3bfb2b5d2bcab0b9f0f5488196e5f30f0ff7008866429901a6f1c52954","sha512":"f1c667061f75e55f98d046603719f6efa79aeee1719828799b2ede04ec3856977bcb02fff3da5ffdc5e4be746dff1e0b014f8752e8484cfb082ad1a32508e1f1","ssdeep":"384:CooUMRQn66SjEEH/FVgRbKbG5JylkveU0QT3Wb56rcFVGt++OohLR7RprYddscfp:CFen6Vj3FVmbKeylkHLrAobDezfgSf","tlshash":"7d937ccd2680ac7415e93e43d809d145f5dc8b4ae7f8f8e2f75add482141a8a33a4fa7","first_seen":"2026-01-05T18:44:37.32545Z","last_seen":"2026-01-18T23:41:56.310501Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/cd5c2051.d.m.BqsH2nl_.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/cd5c2051.d.m.BqsH2nl_.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1747\r\ntraceparent: 00-ec6a77e0927b02627112c2a96d15902f-962da145334ba71b-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-6d3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4502,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4451)","md5":"e18bac1ba2c30d3434fbfe446f5674bb","sha1":"c00f743047ed7be4b8f377619f412f10736ad1f4","sha256":"4312a254c45fd686f10df6ed97de0d110e7a3bf9bed1e94f93053ce91dd7379e","sha512":"6017c7b686559035318dfcd4260e6cf470f5d0e2c5d634c224f477a047da35cb86ea746d4bea32aab2fdd8133cebc16d183bf1bee8b539db5f9c97d2597a37e9","ssdeep":"96:P2JSRnzZ35CjC+pPuF3KlQ0Dg9hAAur0wZxalsAHmn1WSUtdySUxqdxiPdr7d+iy:PQShzZ3H+pPuF3KlQSGhAlr0wrso1W3V","tlshash":"6691ebcd770876fe43f30cbdb5620401d6356a92a6704a89f19e4dfa2357494b137987","first_seen":"2026-01-05T18:44:37.375522Z","last_seen":"2026-01-05T18:44:37.847647Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/88582821.d.m.D2OUHn8z.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/88582821.d.m.D2OUHn8z.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2322\r\ntraceparent: 00-0872c8da3b51b0964c306ea4624f5223-de31fbb3fccb71ca-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-912\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 572215\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-30T03:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6016)","md5":"6527b2bc0afe32269f7536e5129682e4","sha1":"4f4d1af7ce4457aa88caa719ec11d2d551564121","sha256":"0574282d30f05a4565b45f1ca37dc0efdf22ce4047228ff9029cf5d95a5d6961","sha512":"ee04da16882999583cea197c4719359f1aecbdc79f6d682a8fe831e6e122e5ed91fe017a52a046519438e7258b6b78bc1403c749cb666cb31bf275548ddd50a2","ssdeep":"96:k+Rw54EyJB5k1Ydu1JJGWJhTn4FljEWfKZBy4bdz7naTZ5ToFpjdYNEFErZAZqu4:N24tJB4Ydu1PGW7r4FlVSyO9sToFpJa9","tlshash":"c3c1d6a9338e76404277147d259f1085b07c6884644d182af5e8f87a3c65caa4bffefe","first_seen":"2025-04-24T07:07:12.79126Z","last_seen":"2026-01-25T14:09:20.204349Z","times_seen":100,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/prompt/v12/-W__XJnvUD7dzB2KYNod.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:42:49 GMT\r\nexpires: Sun, 03 Jan 2027 10:42:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 201660\r\nlast-modified: Thu, 28 Aug 2025 11:25:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17940,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17940, version 1.0","md5":"d00c3e51355e3bb01c063709fbab809f","sha1":"13dadc7c5b140de8748bc9203573b93931451126","sha256":"76f4b0e556e9bdcdcd9c839d20f5e3420a3ccca3f2d5da2f7beefb0e95a09bcb","sha512":"f25c89140713d8d0f135d05f658cc46473e1664376486271aef7239e01999fe9ef32ac5d839183c3c22026eb7a7bbd4d102f1beb0c531c80a80e25b04a580674","ssdeep":"384:nhLa3NqEycXKtdAqWvZH8VqnY62EwwlcES75nBCOmplNSkTkb:n4IEycXY5WllvvwvHnf4yQU","tlshash":"5782d1cd9304ce64b06b600e2b61b48463c72f77e938c77f5146cd35abda9574e112a5","first_seen":"2025-04-24T06:53:03.973679Z","last_seen":"2026-04-04T13:39:57.320782Z","times_seen":2964,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":151,"dns":1,"connect":10,"send":0,"wait":13,"receive":1,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/720cf670.ZU_Xpxpa.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/720cf670.ZU_Xpxpa.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 817\r\ntraceparent: 00-97f24b9832939847f8a03213ca02f135-039508043d11e7f2-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-331\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3518,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3517)","md5":"9b46394706e510a8fd1f2fbb47fc8237","sha1":"4e83ee048b5bcbbfd37763b76f55c34afcf82b43","sha256":"088c87a98e272dd2e676c65c1ab60ef74b17b50eee9de957c720fd25703bbe9e","sha512":"397002abd00bb15782be5c38599c770a516e8faf61a4cc9af90f331a2bfcda5b6b7b22fc35867a14e2c6725119c5a0901dded61ebde5be67a5817b7b75e09224","ssdeep":"","tlshash":"8d7110d90f18e977e4d7580ec982a788b1335c438c56855bd77ab3bc8b466912363b84","first_seen":"2025-08-16T06:41:47.002789Z","last_seen":"2026-01-23T03:09:51.682112Z","times_seen":36,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 19:09:26 GMT\r\nexpires: Sat, 02 Jan 2027 19:09:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 257668\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-04-04T14:56:09.834603Z","times_seen":22481,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel/js?auth=4jg3s6\u0026event=visit\u0026uid=","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel/js?auth=4jg3s6\u0026event=visit\u0026uid= HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 05 Jan 2026 18:43:59 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 370\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"f6b20eb331d41d2a04ebc3338ccf325f","sha1":"481fa073656019f818154ed54250448e3f4480a6","sha256":"9aa062e009e5fa08ae173305d1d6635c9a35bc58fc45292d75df8f9d63db986c","sha512":"90b8d559377968995760f2870d4a3c7d729ddad4a89afc52a135f41953c9e64f93c5f287e5dc95b56d258db03eb272e867e3935d8910dcbd6a24a5e768e48fbd","ssdeep":"","tlshash":"71e0616d432db502e29920937f71655d343581fe3a1098851c8c5d14245ae9bf935c50","first_seen":"2025-11-29T08:32:41.761908Z","last_seen":"2026-01-25T14:09:20.130601Z","times_seen":21,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":318,"dns":119,"connect":100,"send":0,"wait":103,"receive":1,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel-us.r2drtb.com/pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US","fqdn":"pixel-us.r2drtb.com","domain":"r2drtb.com","tld":"com"},"ip":{"addr":"88.214.195.101","port":443,"asn":46636,"as":"NATCOWEB","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2drtb.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 26 Jun 2025 00:00:00 GMT","end":"Wed, 08 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D0:48:15:25:D2:83:00:DD:7D:70:07:A2:B0:40:FB:88:E5:9B:C3:05","sha256":"59:30:1A:64:93:31:49:89:58:C3:C8:2E:88:12:01:02:54:8C:F0:86:A1:40:B7:58:E0:4A:3B:ED:8D:8F:9F:A0"}}},"request":{"raw":"GET /pixel?auth=d796s9\u0026event=regstarted\u0026uid=\u0026site=leon-italy.casino\u0026ln=en-US HTTP/1.1\r\nHost: pixel-us.r2drtb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 05 Jan 2026 18:43:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-cache, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/ce584242.d.m.C3vkpZJs.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/ce584242.d.m.C3vkpZJs.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-3d46a473f5f6914084a77de1a1b16087-0d35af10849e68e9-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-1508\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5333)","md5":"dc88e07943da939db07e18a597a085f0","sha1":"648a69ac319c1f5ce026efffc17640f2c4a3cc3b","sha256":"e82b175b9409dd298cf5a6da63b5188f3a98398c3f0762bad09dcc4528650428","sha512":"e0ce5d0ea8463630645877fb814109f9569caa5b85af9fd52a2fff9ddd86108f26499927cbdb68b37736f80e23a271f1fc3e1bc9c15e95e7f8d0704b207e5796","ssdeep":"96:Y0c8+a+8Toy1lF0KkUZ0Fk62QJ9uy8SisBBGRN:Yj3yDvCKYk62QJ978c2RN","tlshash":"0db1120b7625f3f986ad2a28d9c422305a3d2fcd631404d1eafec0197249679c5b5bcf","first_seen":"2026-01-05T18:44:37.397083Z","last_seen":"2026-01-05T18:44:37.852022Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.cbc30eba.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 159489\r\nlast-modified: Fri, 02 Jan 2026 16:48:01 GMT\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: x_iOGUcf51esPqGCEeCF2wPknguMFTBD\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 18:14:53 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"191c7e2dad000d47bc07a26e6c6b4158\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: eAu7voevpyZJOPXSi1926WdxGBLK8Rfvlx_upJiX5heuPScYzh4FHg==\r\nage: 1747\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":30,"dns":4,"connect":3,"send":0,"wait":1,"receive":5,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/api-1","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:00.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"POST /api-1 HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\ncontent-type: application/json\r\nx-app-platform: web\r\nx-app-rendering: csr\r\nx-app-modernity: modern\r\nx-app-env: prod\r\nx-app-skin: leoncasino\r\nx-app-layout: desktop\r\nx-app-os: windows\r\nx-app-browser: firefox\r\nx-app-version: 6.128.3\r\nx-requested-uri: /it-it/registration\r\nx-app-language: it_IT\r\nx-app-theme: DARK\r\nContent-Length: 483\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK; shield_FPC=SCtfW2H3f2uTBokrpQCLOJ4g3SJxmMjfzM; _ga_JZZNGY93CC=GS2.1.s1767638639$o1$g1$t1767638639$j60$l0$h0; _ga=GA1.1.524640301.1767638640; pixelsink_uid=99908cbc-6e56-4fa3-b360-43fb139ba1de\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":483,"data":"[{\"id\":\"05f7a228-c531-4b76-83bf-0ef1f78e1949\",\"qKey\":\"0956b97c-118\",\"operationName\":\"doSaveLog\",\"variables\":{\"options\":{\"appName\":\"@frontend/web\",\"appVersion\":\"6.128.3\",\"level\":\"WARN\",\"line\":0,\"column\":0,\"error\":\"[shield][success] {\\\"session_id\\\":\\\"7cbc62d0ea6611f0b29d9f09aa941a15\\\",\\\"helmetId\\\":\\\"0ff7726d76e908fd17280debd423a80e\\\"}\",\"file\":\"\",\"url\":\"https://leon-italy.casino/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\",\"ts\":0,\"stacktrace\":\"\",\"payload\":\"\"}}}]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:44:00 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4ec61c11968d27c85afee8f6d22f2592","sha1":"04e37d317cf505bf3fbdfc2560b77b300fb6c9e1","sha256":"6b0f2b50e960b21c4bdc3716884b3ce7da041801b847bb5acc9fe04d61df8598","sha512":"ba7a3799dd21fb5c2a10838407ca2ee8738efc8953821266734922ad91273095597510671b0fdb2d6f6cb574d2d4fdb9e187c6b0103e4c61e8f672d6fc5991ae","ssdeep":"","tlshash":"26c02bd03c4243800c44c089b2b3db406a247050d4446c0006c63930809cc6c63cf861","first_seen":"2026-01-05T18:44:37.853375Z","last_seen":"2026-01-05T18:44:37.853375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/a48612de.CPXAGBLL.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/a48612de.CPXAGBLL.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 2051\r\ntraceparent: 00-ee91c8d57b3948cca809758b78d47673-9b03711a873d444d-01\r\nlast-modified: Tue, 02 Dec 2025 16:15:54 GMT\r\netag: \"692f10ba-803\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 2704388\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-05T11:30:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9009)","md5":"3d8c5a8ed733ed887035ddddcf0fba84","sha1":"35922f1282571d131890dccc5aa62a9c9e118e69","sha256":"4d5db851497a6e20b1454ead804fa05c328e7565896a84cb7558ab24b92b8164","sha512":"ed85cbd6458409d5f8582672308e5a87b78d7bccb44d6df8aec9b3b1126f5624f51d99dd69b3cc19f86bef9fe346ddcfc67efdfdc5619acd6b6c5a763d2e8c13","ssdeep":"96:fOf+7XO0jBEn8iwbXD87Yzk1ks/4VvZAsGlFEBrubG8+DnktTqdvbO:fOCjG5YXIYzk1kmGR6dtepC","tlshash":"4f02412182e05c3951a343b6d7c9dd88722cce43623309ebf3a9a45f896159e737e78c","first_seen":"2025-09-27T21:47:06.97025Z","last_seen":"2026-03-08T14:14:44.222084Z","times_seen":105,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/cc513c94.BJAIjynr.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/cc513c94.BJAIjynr.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 1936\r\ntraceparent: 00-987cdbf0842893dd407dce349e66b1f8-c43998f78976c437-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-790\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13338)","md5":"016069031e7836416684b4fb2dddfec4","sha1":"5e771371191b81757569cc8336ac5e8fad09ba35","sha256":"28321db2f0d1a637d77569d81bdcf80e67dd0bce04590f992e2d55ace1380663","sha512":"2b63cbeb355714d2f0975e975cbb622a4c5faab7443096ff908c3a417ac67ccca503aa9820857e9794b690bcb70fd1c63774d7d3ee15be1b4ab9217209061803","ssdeep":"192:2iVjJbk5LLXw88g+7PB6AQ+TPDqGD8t7T2pb8v13qud6:rjJMftKaIHD42b","tlshash":"1b5240c71878a76f35a7a03fdac1364c022aecd384136ad5d9f6ea5491c6a8241737cd","first_seen":"2025-11-14T01:20:20.946447Z","last_seen":"2026-01-23T03:09:51.740928Z","times_seen":29,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1cr9zxt7u0sgu.cloudfront.net/shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0","fqdn":"d1cr9zxt7u0sgu.cloudfront.net","domain":"d1cr9zxt7u0sgu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.84","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /shdfp.js?SITE_ID=5a0ef96fd84066141eb932d11ca5b39bb17a78cb\u0026TYPE=JS\u0026DE=1\u0026AUTO=0 HTTP/1.1\r\nHost: d1cr9zxt7u0sgu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nserver: nginx/1.14.2\r\nlast-modified: Fri, 19 Sep 2025 13:00:04 GMT\r\ndate: Mon, 05 Jan 2026 18:43:54 GMT\r\netag: W/\"68cd53d4-2c9b0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 1QZ8fuQRwZL2rNbIWsU57iRQie2jmGoHPJQDAfA-eVVkzxc1jAgYOQ==\r\nage: 23\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":182704,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0b91077d0eea71289900b82439e0f098","sha1":"d129f02ebf9f0579e6ae7d0193c31b72bf9a3a8b","sha256":"19671cd169b8256b899b4406963bb6e47e81534c9bb9841ff21cc7a3417f5c7b","sha512":"4761bed806fd413c1347deb991fbc8c872a39326dfef7c1acda30472f5e7cc3f1733e75f69890128e3e24d4af8ed7239ae58a5ffab44c2587990f12bbb0025c8","ssdeep":"3072:qEzujzd82s/OnqHKc/yHT6ERokLBa4wWnkxcxtujMDmdk4LHBseQztbtHdGTHSWH:qEzujBhjTa4RkxcxUjAmdk8QtbmTHS4","tlshash":"0904c5507bc0694963875f7b762bf5d4e45a0e7e3c844d8bc148bc58ab66223fbe0a31","first_seen":"2025-09-23T18:58:11.287136Z","last_seen":"2026-04-02T09:36:05.663821Z","times_seen":79,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":37,"dns":19,"connect":2,"send":0,"wait":25,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/sunSw.DL-onBB5.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/sunSw.DL-onBB5.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 240\r\ntraceparent: 00-8041f3241910e02fb51b9502b5aeb26a-6d02658efd1b9029-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:04 GMT\r\netag: \"68e7b33c-f0\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6595791\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:34:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0811eb7ab652dc7ee7bee06fed53671","sha1":"1192b619f776177819ebc73c6f6f31b11b891d24","sha256":"0565ef51f5934a1fc6f8a6e25f958de335b791559e5e0c100b2649acbe64f92b","sha512":"89bdfee5cd795ad373e227320ee5ad9b5509e9e1321726170fd93642d694389df569212784af41ed18a6a21f578507ea65d15cfe5d599e168ed956eae70f4ac9","ssdeep":"","tlshash":"d8e068d34b0af6ac92418636d9a83ae0321e64aa107420a8846e05a020569cee207ce8","first_seen":"2025-02-07T04:57:00.938579Z","last_seen":"2026-03-31T00:45:46.258466Z","times_seen":105,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/table.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/table.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2051\r\ntraceparent: 00-98ffab2fc462bc6b6ab9f1c3375718d1-1f8fec75c8875518-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:09 GMT\r\netag: \"803-61bf3666cddb9\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4739eca3bf889f229641c474aca34a5a","sha1":"275e4368643608ce9466984958ef31f8884495a0","sha256":"533cc1795d0f8c05ba575368c4a1d156021e74d1e72c1e48f6a54c1f9c8c7b06","sha512":"7f012c42f67d4577d02227fa0e9ef5d7cd4be62762f17a67edd0589e4959b4d65ee617e75384af07749832ba09c33c27bd402a76adbe8be5c22c2b3778525da2","ssdeep":"","tlshash":"614154f2e3d480ecce07d360d937b8a63a6e5cf9c79b8764a041f680b05969549c8d84","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.242854Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/no.s6YevAOV.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/no.s6YevAOV.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:54 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-5e47dd740de8bbeb4eaad398e8024fbb-bdc6169d1be90356-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-14a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6596880\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2072cb659bfe23b3d0163006af1aee6c","sha1":"693c27833ee0647755f2b13021bedaeb59c23662","sha256":"b90d2629e1cea6a55bc55ab7cf2edbff2d1a593cb252cf20ddaff8525f97426b","sha512":"bde0651392ad6f40c0d2890f8c74032eb7faea38ef00b7c1c87318cbe04ab6cb577655325606c92257b3470319e415c1bf890f81091cbb649ba01b30b929230e","ssdeep":"","tlshash":"7ae0c2dde37cb820cb1083510f2d72f29695f4dea2d521d7f94069a8212e6878ee3ec4","first_seen":"2025-02-23T03:47:48.678197Z","last_seen":"2026-03-14T07:22:16.769304Z","times_seen":62,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"downloads.intercomcdn.com/i/o/cnjqphyx/810341/0b23188d2bb7b3fc6d2a83c390b5/13f3db22a136c3fa5ea34818db1285c9.png","fqdn":"downloads.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:07.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intercom-attachments-9.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Wed, 16 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:D1:71:BF:C4:4B:F6:57:9A:52:E2:67:74:4C:C0:FB:08:C9:B9:97","sha256":"22:93:6A:B1:39:46:E9:C7:A0:9E:57:8B:6B:EA:59:87:A5:B5:82:6D:C0:D5:A1:45:BA:63:8D:B0:C3:9F:65:59"}}},"request":{"raw":"GET /i/o/cnjqphyx/810341/0b23188d2bb7b3fc6d2a83c390b5/13f3db22a136c3fa5ea34818db1285c9.png HTTP/1.1\r\nHost: downloads.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"leon-italy.casino/subscriptions?platform=web\u0026skin=leoncasino","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /subscriptions?platform=web\u0026skin=leoncasino HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leon-italy.casino\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: HKM2+RcaHXGTgCU+xeHIBg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM; ABTestSeed=39; qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg; qtag_rfrr=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg-null; ipfrom=91.90.42.154; x-app-language=it_IT; firstTheme=DARK\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 05 Jan 2026 18:43:51 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nupgrade: websocket\r\nsec-websocket-accept: CoVceWmGHJtXp9pdqMhbsLofqCs=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T14:49:32.922678Z","times_seen":13335470,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":1,"connect":25,"send":0,"wait":58,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/7fbe0154.d.m.s8nA2SdR.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:49.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/7fbe0154.d.m.s8nA2SdR.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 113546\r\ntraceparent: 00-5fec1fdb56e30dcf672319f60b6d7c43-65e1ba8c3f949a1d-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-1bb8a\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458941,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36266)","md5":"ecf66efd08003e84bb008de979ef3d91","sha1":"a0b5963a32f1a58cdf1c46ea8f47ca0a1df21efc","sha256":"9ea0c6185ba5556d8d44e3ff5130c74f18ef94ebd1d6cb986d6868f0072626b7","sha512":"5fddd650c79c491dde5e407b1080e66e51f4c6f1ef5f5a48f9af3138c5ad19070d9170f5d417fbe2775b92e78153c2ae24c63529738ed119a8bc42d4fa1743a2","ssdeep":"12288:m552KLfKGJvEvGdrSaV67dmcgUxHtDcAUA4Ic/5/WLODYoCIDIinUVDAlwn3Qd5+:m5dLfKGJvEvGdrSaV67dmcgUxHtDcAUW","tlshash":"aaa43a99b181713893fb14ed902b088173780f407419d9e4f07eaeaa79a5c19d3b7e7e","first_seen":"2026-01-05T18:44:37.416347Z","last_seen":"2026-01-05T18:44:37.860447Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/slots-4.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/slots-4.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1832\r\ntraceparent: 00-4962996010d23041a2331595a6f18b52-5329deb84ae48d25-01\r\nlast-modified: Fri, 28 Jun 2024 13:41:39 GMT\r\netag: \"728-61bf3682e8cd6\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:57 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a64ccc1ab66cb91bd441d3cb46cd948b","sha1":"9608b42a44b67da4be82d09c933f09b5ea3110cc","sha256":"1ae73f949ce1ca94b58f32ac5fab711d948e93073d8432e06228d5dc3a69321a","sha512":"43b77ebaf033ddf4d15d21492facc9ad846cbf57ebe6b406193891a8f029340c10f92bc5ff4e6ea165342aa0cc36037bcb7f086fa38d85d054e06f0a98dd7c7a","ssdeep":"","tlshash":"be3100fa97c0bae4f04bebe9c439d5a9729f34f93fb492810144a788b75506d8c8de04","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.147581Z","times_seen":62,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendors~app.454a4740.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:06.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendors~app.454a4740.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 117095\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Wed, 24 Dec 2025 06:08:13 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: vl2jgsmfzwu0hHP8Ictzf6B7N2Ozpbv9\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 17:29:20 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"f8694eb4f5fd6f0368590a933ed697b5\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 4487\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: is3er9Qw7cMuCi4xMNbzoVbAFohhyad432VcUphOR7eYxU_5MwbMvA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566550,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a61c00b13a2efd93b3ab5847dfc41c48","sha1":"30921f01158a35ce63259be1bfb2a8476e6a1589","sha256":"162c16e1a43dbcbd67c0077388ec68f98f87153ee95c0d5be68ed878dfdf3e55","sha512":"04bdc14a0de7ef39d7371efb80938920e3a367d5ae4e3ae2fc24c7c52c94ba634495ba02c3e551ec99d37203f0c0a170c94263a506872876e623f7486e565ed8","ssdeep":"6144:nxY9lstwDG7qD/v+W/BxbjKuOOc+1o/ibMZyWowdQgaH3nWSL8/w:nS2wDd/BxbuuOJ+1o/ibMZyfwd63WSmw","tlshash":"97c419c5b6e1f4b24b9750e2543b1007f33a4d5c206d90a4b368d5dbb8ec58e62b6b3e","first_seen":"2025-12-12T19:24:48.683738Z","last_seen":"2026-01-19T08:36:56.026365Z","times_seen":849,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/launcher-discovery.430cd563.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.117","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:44:07.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /launcher-discovery.430cd563.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 2935\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Sat, 20 Dec 2025 14:31:39 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: LqMpFAZTG6ci3qOQVzwwOuL9ntgPo6Ub\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 05 Jan 2026 17:36:26 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"5659296d566282ee293cb42c36306a1b\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-origin: *\r\nage: 4062\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-amz-cf-id: AGeA-TufzD4SstqQNPQefikZMGwj2BORxHGxd38JRtSZUw-gIZnreA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9453), with no line terminators","md5":"bcd58cfa4410c365ad13c25475ba2053","sha1":"c66704713e7cebac620c3eef41fe72219be36ae6","sha256":"e970246704566a26c40522c6e1320c0a3e4cb7399777e8e96f311fcb41d5895a","sha512":"29aafb3d7bb7819605f1fbedbf5a60b3c1f6bef48d941131642038709603ab6e5be1a94344c629c4dfbd028ae8ff0ea76772d0e81090d1b749741df5b7417568","ssdeep":"192:LdgSN958TwPo55OrCci3szx9Oca/uIVdWDtenWYxO7:xg9AoCCci3cx9Oca/uIVdWDtenWYxO7","tlshash":"1612b448f8aef42c92f363a482af500d637d96a8d01e55f8b865d8e54ffd04c5723b29","first_seen":"2025-12-12T19:24:48.697578Z","last_seen":"2026-02-06T08:10:22.719622Z","times_seen":575,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:47.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900\u0026display=swap\u0026family=Roboto:ital,wght@0,300;0,400;0,500;0,700;1,400\u0026display=swap\u0026family=Mulish:wght@400;700;900\u0026display=swap\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap\u0026family=Oswald:wght@200..700\u0026display=swap\u0026family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap\u0026family=Pacifico\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 05 Jan 2026 18:43:47 GMT\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a0c6ee06b96a7406eed6e54bf1b64c78","sha1":"f69e8081aa551d26f3eb46672a79a4d7cb4b4657","sha256":"260af81791823a8b9f855ede4e9b6d1220238b62c22859594d8cf2216dd0348e","sha512":"761fb8e6ed1e28f98d11da236d244f38ecbf08e43f410918ca8048b08e04b115bafcd9fa4fe2977e123a7efc2f251be8f02f88e981aba28d3e1fca0968746276","ssdeep":"768:KuujH72NuwEIwLu2ieQ3HDaZzcqaVyIAa3LZlfCJmwBUiRDfMTcfFBhiEymDcTYn:KuGH72NFEIwLzieZxrAwR","tlshash":"7b73eda1041b9440eb871cc223cf7e36ee4ea2617051c179affd1a9aecebc62536475d","first_seen":"2025-11-19T19:15:03.775253Z","last_seen":"2026-01-25T14:09:20.059844Z","times_seen":42,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":141,"dns":1,"connect":11,"send":0,"wait":22,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/web2_footer_icons/wiserpay-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/web2_footer_icons/wiserpay-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 26529\r\ntraceparent: 00-27a3bde8ea3b8e7ded0358652897766a-65e8051a70f6dfc2-01\r\nlast-modified: Mon, 22 Sep 2025 15:20:15 GMT\r\netag: \"67a1-63f655b4532de\"\r\naccess-control-allow-origin: *\r\nexpires: Tue, 03 Feb 2026 22:34:34 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26529,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a27de659b3a3edc408674078133fc8ca","sha1":"40442f7b78ef16267e44ca235ead66fd329a3eb5","sha256":"6b7f16702e861ae2e0ab2414dbeed14c9f57582b333875975645454afdc2350a","sha512":"db8e5379137f176bd1f51ead57408b9f1964d0febc741636f6af0524ae0c16cfde68e94fe3eb161e927bb66689cb3077a1351c08a548ca2f290a91be47cf7788","ssdeep":"384:DDzNSTkwOxNGkozy+Z6uuEWNe7quDa2QJONlJXVmlfNvb/I6PsWDL:zwdtYWT7quD7BgfZI60k","tlshash":"ddc296f6b3e9a3f4b00af3e4981684757e5738fa7b56db998350ad94e70205c88c9cc1","first_seen":"2025-12-25T07:42:43.885768Z","last_seen":"2026-02-28T15:40:00.689997Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":92,"dns":8,"connect":4,"send":0,"wait":4,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon.ico","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 05 Jan 2026 10:35:39 GMT\r\netag: W/\"695b93fb-47e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"64de7da7635492586554d0f6d496ad86","sha1":"c8db566c07e86c484dfeeacb9c509616f68af64e","sha256":"e8ceb48efc3ae43c8756f9d57267ddbf0676c1951cacb0928b7d4e538e40688d","sha512":"ba4309f5d30b4b6e34d8c5da4427338168d7b34e10884e77ca36cf35275a0754e4d51dbbd764418bffae5137170ded83da5e5ec538341381bd37bd740fd3967b","ssdeep":"","tlshash":"5b218c1234618c68cc580930ceffd7b2baa67cd4220b12f266f1bf7b3870340461a601","first_seen":"2023-12-12T16:38:31Z","last_seen":"2026-03-29T15:19:13.331537Z","times_seen":277,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/logo.CTzo9Wgk.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/logo.CTzo9Wgk.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-36728fcec97e6c677928953d587fa959-a7fd32a0e956943b-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:01 GMT\r\netag: W/\"68e7b339-3dd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-id: osix-hw-edge-gc4\r\nage: 6596904\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T10:15:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c084e668671b35036439f1639690ef75","sha1":"9988516ab917ea62df37ef9136a9ee89da7e049c","sha256":"6516e9411efd44270ddd1ed1af1523a9c63a61a1bf29b697e1aac53302963b36","sha512":"edec61a2a75471788a707cabe122822827b51e7ae00390f54c00b36dc201a0885b035718ea7f4ec9b2e6344dc485b7d2182c142019daa3fd17f1cae14864a80f","ssdeep":"","tlshash":"0c1121eb861062bcab55afa5ea307416b10f547e3f4a86acc26c830014939d4e40cc54","first_seen":"2025-02-12T21:05:05.539064Z","last_seen":"2026-03-29T15:19:13.409426Z","times_seen":96,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.liftdsp.com/smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false","fqdn":"track.liftdsp.com","domain":"liftdsp.com","tld":"com"},"ip":{"addr":"3.167.2.124","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:59.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.liftdsp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sun, 23 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:18:52:8D:E1:26:95:D7:DB:15:DF:B9:09:C9:C3:C0:77:05:A0:CA","sha256":"73:B8:80:92:8F:BE:DE:B0:39:0F:83:CA:C8:55:E1:16:99:75:C0:B1:4B:73:FD:83:54:F0:AC:CA:65:35:39:40"}}},"request":{"raw":"GET /smartpixel.js?pixel_id=154038\u0026json_id=ac786b28-283a-4d76-a40b-23e03f94ae14\u0026diagnostics=false HTTP/1.1\r\nHost: track.liftdsp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 21 Nov 2025 11:01:42 GMT\r\ncontent-encoding: br\r\nserver: nginx/1.28.0\r\nx-powered-by: Express\r\ndate: Mon, 05 Jan 2026 18:43:59 GMT\r\ncache-control: public, max-age=0\r\netag: W/\"246f-19aa613b9f0\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: eJho8W1Rl0Ne_N16EgFm5KftRhCv3FpM3gRdypSpJqMgRC4-Xm-7mg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9327,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9284)","md5":"5517675f9e392d7c5baca5af98c92978","sha1":"c49ee358790d8abbc9bf0ddca8b5f13cda76cefc","sha256":"f99ce8d5465ef03457f6c7e763c45c41be2589474f81584231aabf2bbcd6129a","sha512":"ed892354ad19e6ac018cc29c921fbb216555cc321746044403eaa6c109528641e74a5cc1d73479a2d7603d8bdda39f32db8243ec03cab0452ac683f5caadda89","ssdeep":"192:e0lMRIbStVAmfKmb6ayb5dIhbel2dYszxasGDqPYwgRb4EYhbO:e0OFtVBfKmXyb5d2al2nzxq6YCI","tlshash":"1c12f858117a043942b519fab2bd52645133d328748f94c0b2ad4e59b891ea332fbffc","first_seen":"2025-11-22T06:10:35.149138Z","last_seen":"2026-03-16T18:10:31.536165Z","times_seen":342,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":118,"dns":114,"connect":1,"send":0,"wait":3,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/vite-plugin-import-retry.dca3f5.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:47.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/vite-plugin-import-retry.dca3f5.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1187\r\ntraceparent: 00-c6eb0b970d32e8d1f2a0ac2934c85e25-be01f9a04628ddb1-01\r\nlast-modified: Thu, 09 Oct 2025 13:06:00 GMT\r\netag: \"68e7b338-4a3\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 6605171\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-10-21T07:57:36+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3484,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3484), with no line terminators","md5":"ff04ff64f41edcfe0a5706200f38f11e","sha1":"77e4fd5c51c8f69f421918cd91c20358747dd473","sha256":"dca3f558d8b551db233a488f512c5180ee9db08c320ce1c1492ec74160f5a5cc","sha512":"18b1313067f46bdefed5d478c9a35c83b90285b11bb53056aed6d988335c36f2eb4a6062aad119e94257bf3502eed86fe13e933eef062db8aaa21d595e966cef","ssdeep":"","tlshash":"de7142d93ac3b56c63737479803f5446bb6a2810f2884d61d9acd3d27d2ae46c227df0","first_seen":"2025-02-07T04:57:00.571763Z","last_seen":"2026-03-31T00:45:46.186865Z","times_seen":157,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":64,"dns":0,"connect":8,"send":0,"wait":3,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/06b1eb38.d.m.Cmy5yogU.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/06b1eb38.d.m.Cmy5yogU.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 28943\r\ntraceparent: 00-ad986f0d416ed5bdb1262c1ae4481c00-b3aaba5a8a8e74d6-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-710f\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72556\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7865ac27e1043f26a26140a1fbf9afe6","sha1":"07573bdf3fe2c6143a64f9e3414fdc4fd7b14bb2","sha256":"97700135ef8eca0a857d9e09b8dd158279cade7ee054c485af0c40584da0b900","sha512":"3f651dbdc509294ad5fdae4d74833bb067fc6c52e97d43cefa95c0f472c97c7ac253fcb30b14a88fd9c4595b8890539507a3b76de38cb53f891cb082b59c85b4","ssdeep":"1536:7fpN8uD6NeoG0aWr9dn/iN/r/9cZPK1wlUEk7c8hbS0NHa6HYwi:zGmWr9di6ZPK1oUVc8hbS0N664z","tlshash":"8b7329f933a2b57393ee11e6407b0406f3ae68da284d045cb195e9df3a7445840ebfb9","first_seen":"2025-12-20T03:09:17.529007Z","last_seen":"2026-01-05T18:44:37.870274Z","times_seen":8,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/christmas-hat.CqSVa5RO.svg","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/christmas-hat.CqSVa5RO.svg HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1889\r\ntraceparent: 00-6ebb87ef11c746234025684fc1e96884-88589e58188a7df5-01\r\nlast-modified: Fri, 28 Nov 2025 11:14:08 GMT\r\netag: \"69298400-761\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 3056371\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2025-12-01T09:44:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4496,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a081da84bcc4af12476a3687f3924dc","sha1":"6ccdb53c50f18696092cfbf8ba91ac3f8ce34082","sha256":"6c40ffd117394e57b25ce999a53b4c3aa3b6f86ac110ccdad94a168182f70fb0","sha512":"324cdbe5f0d1bf42f520d69dbef3b97d89341e82cb1d613500c5439daf12919f2b0c2a80ab50f0d5655952cf3da3a3d534f6ef2e8f2e8594c8240e46a93d1637","ssdeep":"96:Ubh4jZI5oU88CRAEtxDKABir/KLU+zQSg1uO2xQDJduqhaWpu0:0h4aSUdCGsVVQR87y","tlshash":"2b9172d82338538c59878a9d9f7decd4930ef0fd356682c516afe698904b9c4fb0b850","first_seen":"2025-12-03T17:22:24.016579Z","last_seen":"2026-01-05T18:44:37.871126Z","times_seen":16,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/new_slots.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/new_slots.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1699\r\ntraceparent: 00-acba5f70c34b5f0d40ad580e10fa7340-c7536a6f8f73df04-01\r\nlast-modified: Fri, 28 Jun 2024 13:40:41 GMT\r\netag: \"6a3-61bf364b9c54c\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:46:56 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 726317\r\ncache: HIT\r\nx-cached-since: 2025-12-28T08:58:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccbd6c3b7279dc7e0c3e32460b07d77b","sha1":"d8400d43aa8abf54af0ba8a052192f1f1331e259","sha256":"98596f703ec5e76243f01c178e27e944f494fbda0e8e4dacd6291739b078ac8b","sha512":"bd75a96f89454b29baf742ebe76c471f2744d5e79f44ff64051d04ae236c1f08bb4270cb34b63933232213688b0e55c798b132e0e737bb9dc69beef92b003f0e","ssdeep":"","tlshash":"8a3102f7d3a952d0970bcbd5e22ab62674a73cf77c82679442006a4432535e9c88ec90","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.270025Z","times_seen":61,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/megaways-8.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/megaways-8.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1021\r\ntraceparent: 00-deefc20599e75f540724d9b283f7ac62-e8dd1758cd5d24c7-01\r\nlast-modified: Fri, 28 Jun 2024 13:42:33 GMT\r\netag: \"3fd-61bf36b728ef1\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 21 Jan 2026 20:31:49 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 1203122\r\ncache: HIT\r\nx-cached-since: 2025-12-22T20:31:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95cdbb1a91e3cd4e2e7727c66710a767","sha1":"67fd4051cf6236f406baa5b90f6ccbe5825867e7","sha256":"9f37e4d79b64613286fbf83e86ba1a2e41279be0c2ccbd076ca5b50f9386a8b5","sha512":"e582d46b1834fa9c5e03687e9bdd314ed39cafa5b632828c632a048f39e8215927330d17c810270671597a094f563bf7c0a2d5f1da788468d3064afac762ad93","ssdeep":"","tlshash":"c111abf7a1e5b6c4a60dcb71d926e5b41e1f38f93eda048293801ad0bda02719c8dcc4","first_seen":"2023-05-07T16:21:55Z","last_seen":"2026-03-31T00:45:46.152577Z","times_seen":61,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/86620776.DXw6KDyO.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/86620776.DXw6KDyO.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 43080\r\ntraceparent: 00-44e56768205c963d5a24c9207eaa1e97-22c9dc358643ea8d-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: \"6943ee40-a848\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 380199\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-01T09:07:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":309218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"01c9b0fbcaf965cf12a126adc871cceb","sha1":"70af6ca3b0d02c7fabdfb36d7015a50570a2fc6c","sha256":"a0e2fab0f43faff90cd9aa3f4ebc4afd542decb4778c55f29149d9344aca72a0","sha512":"dac3731307bcd384f4c8f674a9a18b4f43c1bb6434c0fae9d620b11da0bd67522c84e26ef0a0804342b2a87da2503fed9d24a0037e6e16e946af471102e9489d","ssdeep":"6144:6fLfAo1BvreQyY7t35lPJB3VKIN506LU+HnuISH7A45GiaYw6vNZqMX6Q25aTxFQ:6frAo/vreQyY7t35lPJB3VKIN506LU+9","tlshash":"4e64d7ab8e60613ef5b3b92ee1d9be5d7108dc03c9a30655e5a1972cc2c77d25336b08","first_seen":"2025-12-20T03:09:17.556946Z","last_seen":"2026-01-05T18:44:37.873632Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leon-italy.casino/favicon/favicon-228.png","fqdn":"leon-italy.casino","domain":"leon-italy.casino","tld":"casino"},"ip":{"addr":"209.38.102.153","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:48.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leon-italy.casino","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 11:03:43 GMT","end":"Wed, 01 Apr 2026 11:03:42 GMT"},"fingerprint":{"sha1":"80:26:BF:75:49:ED:62:F4:6E:16:80:52:0E:01:1C:15:A9:E4:50:5F","sha256":"AC:CD:47:E3:1C:67:4C:C0:8A:88:AD:32:EE:84:BD:B6:E6:2A:69:01:E9:A0:02:5C:A4:54:43:52:C4:76:FE:81"}}},"request":{"raw":"GET /favicon/favicon-228.png HTTP/1.1\r\nHost: leon-italy.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg\r\nCookie: eua=syFTG5xheOkWSiUoL5sV8yfzua4kTECFRduchPnoWjnDn0T+gC2uaXKJsbzQIdC9Ryq2v8H+n+KOfsP4UbX1VkR1z5RFvfOlzs9ocFsIMnG0vK79Lp72Sv59H/+3fZdvEKkU5xU3UxGfLOLJ003AygswpTFtPMov3BPlSvdZOhA+C2ClRWvmbbNFXvRfdc2gRqmiT+N/00Vbh/ldMqH1nNRhmFKBRuN2Nmd/ofkhEesjtoG8XG3kk4zM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Mon, 05 Jan 2026 18:43:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 05 Jan 2026 10:34:18 GMT\r\netag: W/\"695b93aa-e4c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"c565bfb0d2b161d0b15e3a5b4e6ddec1","sha1":"02b2e975911f913cd604af7c48628d216eae73e5","sha256":"f54df6349b3aae33b002f4c28bac23076606c4d99b86167d7d796069f7c115cb","sha512":"b315def9b6e768fb0dd4e667a81c954a3f35090b4eef9c12a46428433447eb226f227c9402334c0ae8ef6ae3c02b775ccf7d881b1140a23d6eed5fccefa82954","ssdeep":"","tlshash":"3d717ddddde878c66985742cce9b518ce0854b5073c5a1ad6e90d87254052236c7e74e","first_seen":"2023-12-10T15:49:18Z","last_seen":"2026-03-29T15:19:13.454848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:58.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 19:22:36 GMT\r\nexpires: Wed, 30 Dec 2026 19:22:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 516082\r\nlast-modified: Tue, 18 Nov 2025 19:00:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-04-04T14:46:23.729727Z","times_seen":23065,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs_image/EgyptsBookOfMystery@3x.jpg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:54.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs_image/EgyptsBookOfMystery@3x.jpg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 70358\r\ntraceparent: 00-8a4b72b80aeb7ea45857ae5aeab7da26-9498e3399988f939-01\r\nlast-modified: Thu, 13 Aug 2020 08:57:03 GMT\r\netag: \"112d6-5acbe7cf3a615\"\r\naccess-control-allow-origin: *\r\nexpires: Wed, 29 Oct 2025 08:56:45 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 718135\r\ncache: HIT\r\nx-cached-since: 2025-12-28T11:14:58+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70358,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 375x561, components 3","md5":"3fad23c3bde1cbad7b786a008fbbd5f2","sha1":"a2617d30a314466f54ac5c8e428838124c7dc4cc","sha256":"3d8ffd93da7e67d6bb00c7982395899ec823614afef289428e696fcba616bee8","sha512":"59ed992b567a36a2a732463ec5eb67fb90f04529cceecf38dc1c88c61923429f9bdff2dc59b05ff274f2d98087d2be9b23557971655b5d0b81f53adc1e5763a6","ssdeep":"1536:cXdYkLWeowcYM3+IMg59lumho2lDDxrS6rgpOguAC2sojdCk:SLWV8++w9weo2lPpLgHC21d","tlshash":"c763016f3fc27a41f934b3e07cbbd42578524d66b8c2b976892cd4eb57d054020ea4ea","first_seen":"2025-12-25T07:42:43.891421Z","last_seen":"2026-01-05T18:44:37.876235Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KGLDT3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:56.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtm.js?id=GTM-KGLDT3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 18:43:56 GMT\r\nexpires: Mon, 05 Jan 2026 18:43:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 05 Jan 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123045\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502175,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (44354)","md5":"6635ec19e8e43a5b4b5ee54a191eba5b","sha1":"e4de42c33c433ebf500683998b6607e180e966aa","sha256":"884de5bde90ad7861e73694071880d494839d728cc6ef90ce6edef702ec4544d","sha512":"5b31bc6ccfa65f15634b2ba52d30e7bde48a2701e1607ca885696f3e70aec95226fe48419c825d6b9800b764991cd7eb56d8c85651283c8f319b20483c8bf20e","ssdeep":"6144:lJgteEaaVnRJObujKYp98fDHHYOyQFz0nssrWYxRZV:2WbuNH4ansoWYxd","tlshash":"16b4fa8e77d4a87ec3a65520643f060a657d20e2b24c9490f0daccd42e799797263bff","first_seen":"2026-01-05T18:44:37.404152Z","last_seen":"2026-01-05T18:44:37.877089Z","times_seen":2,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":117,"dns":2,"connect":15,"send":0,"wait":58,"receive":47,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/assets/ce584242.BQGIdFSo.css","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /assets/ce584242.BQGIdFSo.css HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-ae3572c479d3fb054efb6849f8d2a729-2f4b4ebe1065c108-01\r\nlast-modified: Thu, 18 Dec 2025 12:06:24 GMT\r\netag: W/\"6943ee40-b6e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 72557\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-04T22:34:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2925)","md5":"04a6e5a2ff1a33ec1917960d1b3360b4","sha1":"a83affb77304a190bb6755e0048c453852f944c4","sha256":"9f1fd6fe6354bdc41ff1d4c2876905831f761f77b3b2fbfe749c9b4d1a2104d6","sha512":"5693129d96b4421d88e881c6500297d7eb0d969efc3867ef3077c669769701bbe19648252f1d076c0e2eb28caa83309d195dc73d1524885292f8655451c694b1","ssdeep":"","tlshash":"8f5112536930733dbdbfa53dc9d4778a6119addbca134288e8ebd02c80ca68259707cc","first_seen":"2025-09-29T03:15:31.287684Z","last_seen":"2026-01-23T03:09:51.677066Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/720cf670.d.m.CN2pKDf9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:51.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/720cf670.d.m.CN2pKDf9.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:51 GMT\r\ncontent-type: application/javascript\r\ntraceparent: 00-9428a7c6cc742365a7a2fbfd2be5876f-77005bac9e4b07e1-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: W/\"695b93a9-6160\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 1\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24928,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24877)","md5":"9acecf5c934acee86872b838ac9faabc","sha1":"630a8ac666166e8630a5482195db59a5d13f8848","sha256":"2380dc63f69bbd572c86aa75d8d4fa9c82425db1c4e94af8035b8b6da96c429d","sha512":"f895336fdb2c28656d1e6fd3db86abc798d4880ba3e8a98706bfe248176ad773be2339b169a051ce89033bed57851e7a151c441159176338ac1157d8bb9fba4e","ssdeep":"768:VF3wXo0ogDqGZVBSL7e0nP0620T0s8Bvm3OvTtnRLIK:b+o0RJJIjP1OhmK","tlshash":"31b209dcba125cf3d7e3448ea9020901607a1e4166b84ac3e3bd8b7639eac1497777d7","first_seen":"2026-01-05T18:44:37.433937Z","last_seen":"2026-01-05T18:44:37.879389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnimages2.gcdn.co/SC/Leonbets/egs/quickspin-dark-1.svg","fqdn":"cdnimages2.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:53.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /SC/Leonbets/egs/quickspin-dark-1.svg HTTP/1.1\r\nHost: cdnimages2.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leon-italy.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6486\r\ntraceparent: 00-6500b9e5d3dd65902678ae81300c6afa-a9ca7992aea86d3a-01\r\nlast-modified: Wed, 03 Dec 2025 10:21:49 GMT\r\netag: \"1956-64509949205f3\"\r\naccess-control-allow-origin: *\r\nexpires: Fri, 09 Jan 2026 18:34:19 GMT\r\npragma: public\r\ncache-control: max-age=2592000, public\r\nx-id: osix-hw-edge-gc4\r\nage: 2246974\r\ncache: HIT\r\nx-cached-since: 2025-12-10T18:34:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6486,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a89cee4a0cc8b4c6103f49a19f29c96","sha1":"c3be46c5f04f2df3266c866571b0485e56320aa6","sha256":"4ba17716ca8f712aa1f5bf02f6c0577a4d11195c1268ebe5393f85585d1e9095","sha512":"e2412ff50ea18b400310c2d0a60118ec442b467c6c3a511fa5f5c844d6f03bf967e38464aabbe62928a3349b8cb811e9c4256270b23cba54bf11e1c4d594e8db","ssdeep":"192:TB8P9EWU6JeJ/yGT4EABRX1TxLtxzNJxgFG:TBqwazEABRX1TxLtJxx","tlshash":"bfd195d8bb9e82b8f044f2fec9064479b9466dd63543c5e4c3c42d5af8489a94eadcc3","first_seen":"2025-12-25T07:42:43.845636Z","last_seen":"2026-01-05T18:44:37.881447Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leoncasino.gcdn.co/js/208a717f.d.m.DIds2wA9.js","fqdn":"leoncasino.gcdn.co","domain":"gcdn.co","tld":"co"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leon-italy.casino/it-it/registration?qtag=a34309_t39258_c2574_swjhq0qj5unsrficf3nsr59lg","date":"2026-01-05T18:43:50.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gcdn.co","organization":"G-Core Innovations S.a.r.l"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 14 Jul 2025 00:00:00 GMT","end":"Fri, 14 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"31:C3:DA:25:B0:1F:33:33:70:56:0C:EA:55:D2:CE:7E:B6:E4:8C:71","sha256":"17:C0:97:35:7B:85:89:7F:7C:67:5A:29:D2:64:8E:CE:C3:78:A2:23:B5:1B:87:3D:D1:C6:DC:C7:3A:04:1C:CB"}}},"request":{"raw":"GET /js/208a717f.d.m.DIds2wA9.js HTTP/1.1\r\nHost: leoncasino.gcdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://leon-italy.casino\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leoncasino.gcdn.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 05 Jan 2026 18:43:50 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1426\r\ntraceparent: 00-74e900f7fd218e0011c3c14e351e3b2b-5b395823939d4d41-01\r\nlast-modified: Mon, 05 Jan 2026 10:34:17 GMT\r\netag: \"695b93a9-592\"\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nvary: Accept-Encoding\r\nx-id: osix-hw-edge-gc4\r\nage: 0\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-01-05T18:43:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3307)","md5":"4e0c6b15ae290036f1cf03006445e44b","sha1":"c69cd5af94b3ab6c95032fa3848ef9ef6034af8d","sha256":"a551f183804069cecdba0fd96341788fa4717c94751eb08d65f1edad704f3db4","sha512":"9811991384c9d369c1e4c47ef0cce2f7104437a2da0fff6e1dc849c9d1a71eb38527565ac07ce75b046d471477474df357033e91728a16d5963893c9d0c4fa37","ssdeep":"","tlshash":"a161a69b6206e370c1267094d02f3c10e95846cdb3b47590adfd54aedaa213ae17bb6f","first_seen":"2026-01-05T18:44:37.28143Z","last_seen":"2026-01-05T18:44:37.882451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}